Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9AD4134CDD911EF97020E9C762E951A.roa
File: E9AD4134CDD911EF97020E9C762E951A.roa (raw, json)
Hash identifier: j8nKj+QqmJE5hsLDmx24ZAvvPYvVYHj27Xtvp52mNf8=
Subject key identifier: 69:CC:AE:46:FC:69:2B:1C:96:59:E4:34:67:96:9B:F2:75:1E:8B:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013789
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9AD4134CDD911EF97020E9C762E951A.roa
Signing time: Wed 08 Jan 2025 16:02:08 +0000
ROA not before: Wed 08 Jan 2025 16:02:05 +0000
ROA not after: Sat 03 Jan 2026 16:02:05 +0000
asID: 984
IP address blocks: 154.89.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79753 (0x13789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 16:02:05 2025 GMT
Not After : Jan 3 16:02:05 2026 GMT
Subject: CN=677ea180-6ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:d7:b6:f6:22:24:af:dd:73:20:79:aa:03:
9a:0a:21:e2:b0:99:59:da:0e:a2:41:f8:b1:41:9c:
a6:8a:b8:9b:03:f3:bf:0d:5a:19:b0:62:89:9c:01:
ee:9e:ad:5a:eb:9b:e5:d0:2c:79:52:cb:8c:3b:f1:
a8:df:6d:b3:ff:98:71:89:f3:53:14:40:88:b6:e6:
46:ac:f6:85:fa:51:52:70:9e:84:5e:29:90:7c:eb:
69:2a:7a:28:38:57:b2:66:72:6b:47:59:2c:92:ae:
b7:e4:f1:56:5e:8a:11:4e:af:83:70:73:b4:76:1d:
4e:94:a3:ba:78:76:84:cf:f0:64:31:e3:03:95:58:
e6:a7:a6:69:36:29:42:c8:03:40:26:b6:58:2a:ce:
32:b7:11:5e:da:5f:72:78:d9:98:fd:1e:67:fd:2c:
10:91:78:85:a5:ce:19:e6:ba:6f:f3:78:2d:b8:75:
20:55:03:86:8b:80:e1:69:d4:12:7a:12:2f:22:4a:
56:be:b2:c9:08:35:22:93:5e:93:33:6d:62:74:a1:
88:34:6e:e3:6f:57:3e:2e:22:e2:8d:2b:c2:56:70:
d3:63:7a:47:91:54:8c:10:67:7c:41:ca:f2:c7:d8:
c2:13:01:f9:5b:5d:6f:cf:63:da:05:2b:08:aa:e9:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CC:AE:46:FC:69:2B:1C:96:59:E4:34:67:96:9B:F2:75:1E:8B:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9AD4134CDD911EF97020E9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.147.0/24
Signature Algorithm: sha256WithRSAEncryption
83:6c:92:1a:bd:6f:8e:9b:d4:ae:7f:92:38:e4:8d:14:5e:dd:
75:18:79:8e:d2:bd:b5:94:79:bd:67:74:40:5a:53:84:e5:c6:
a7:16:42:1d:dc:8f:21:e8:c5:e7:ea:8f:c6:20:c2:4f:29:d5:
8a:b5:04:fd:83:50:7d:fc:74:2c:82:c7:49:79:5f:13:2b:48:
e3:f1:c2:43:7a:02:df:de:f5:9b:29:ea:27:09:fc:27:f0:e8:
32:25:36:73:54:0f:5b:90:d0:c6:09:51:13:ce:65:82:ca:87:
fa:55:11:f1:ad:d7:bc:18:1f:7e:e0:d3:ee:68:ea:3a:4f:99:
94:ea:b0:5a:80:b6:85:0f:eb:6a:c5:e2:9b:43:26:e8:28:0b:
c7:90:7c:2c:6b:39:5a:ff:69:d8:77:ff:3a:b3:e1:cd:40:b4:
7b:ae:86:3f:e9:bd:51:04:e7:b6:92:f6:31:21:04:27:84:7e:
30:27:14:be:fb:8c:25:17:3d:a4:19:e4:64:4d:6f:26:44:fe:
ce:1a:73:36:5d:b8:5b:a1:cb:de:f4:1f:3a:8b:fb:99:a8:96:
05:3d:b6:bc:96:9c:ab:b3:92:54:82:69:70:ce:02:c9:91:84:
05:9a:cd:11:4f:5f:7c:b1:a1:86:df:12:b2:7c:42:24:ba:da:
86:8b:18:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:22 2025 by rpki-client