Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA1DFD92CDDF11EFA21BF343762E951A.roa
File: EA1DFD92CDDF11EFA21BF343762E951A.roa (raw, json)
Hash identifier: OdC4IIDk1nJQyFOWDoVwcH+G/H77bMiAV38fS+XtAHk=
Subject key identifier: DB:B8:D0:03:B4:2D:06:FC:8B:8B:D3:53:4C:EE:52:E0:C7:DF:06:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA1DFD92CDDF11EFA21BF343762E951A.roa
Signing time: Wed 08 Jan 2025 16:45:06 +0000
ROA not before: Wed 08 Jan 2025 16:45:02 +0000
ROA not after: Sat 03 Jan 2026 16:45:02 +0000
asID: 984
IP address blocks: 154.89.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79799 (0x137b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 16:45:02 2025 GMT
Not After : Jan 3 16:45:02 2026 GMT
Subject: CN=677eab92-1e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:14:e4:92:1a:38:09:d0:c3:95:48:54:96:
6f:82:a4:93:28:b1:68:6e:b0:d8:78:2b:d3:3a:68:
41:1a:27:8e:67:52:19:fd:b4:62:aa:04:60:c2:b0:
ff:7f:f5:05:46:5c:2c:1e:cc:4a:b2:12:52:56:3d:
c9:6c:a9:a1:4a:1a:47:ee:a8:a3:df:7d:69:e4:2d:
e6:5c:eb:b5:49:12:90:07:c4:75:bd:a9:05:16:40:
0a:22:f0:55:ed:5f:81:52:3e:63:7e:da:67:4a:e4:
d2:83:be:70:c2:9d:c9:db:fd:16:b5:1f:76:ab:b1:
6f:3c:76:dd:6c:fc:7f:ca:8a:fc:91:da:a4:cb:d2:
8d:3b:92:f5:ae:e1:47:ed:02:74:ed:b4:fd:8f:04:
2c:b7:21:87:1e:43:30:6d:4e:11:4e:44:36:c9:42:
5a:8a:32:30:52:1b:11:15:18:9e:8f:0e:30:ba:54:
27:a7:69:5c:0b:dd:43:61:13:da:d5:35:04:e1:98:
33:a6:d3:62:b9:fd:c8:43:5d:e9:20:54:30:e2:b1:
9f:7d:6a:55:20:98:9c:ce:a5:6a:2e:a4:a6:bb:e5:
f3:b6:7e:d4:4a:be:73:ab:88:fb:47:f6:e3:7d:82:
e1:ae:ae:dd:5f:04:69:d2:a6:68:fa:08:f0:a0:43:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B8:D0:03:B4:2D:06:FC:8B:8B:D3:53:4C:EE:52:E0:C7:DF:06:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA1DFD92CDDF11EFA21BF343762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.170.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c8:6d:fa:5c:68:f4:d6:38:a5:78:bc:ca:36:88:30:ea:de:
1d:ec:d8:84:af:e5:2e:b0:da:42:cd:bf:c4:36:bc:fa:15:7a:
db:73:95:fd:55:56:24:39:cb:4e:c8:b4:7c:eb:10:ac:bb:67:
f5:e9:64:22:99:69:61:ae:08:99:cc:b0:af:68:be:1c:42:5d:
63:74:32:97:06:e0:9b:41:df:a3:16:e0:40:31:ec:ee:1c:48:
70:cc:65:36:77:8e:53:df:57:87:ec:61:8c:8a:c7:a5:05:8b:
cd:e7:43:38:17:dc:c1:49:d2:df:98:83:8f:35:7b:b8:67:21:
68:0d:ae:ae:62:07:e6:8a:e5:55:59:40:89:ae:4b:5b:6a:c7:
84:24:51:4a:62:bb:94:79:dc:4e:c6:82:26:d1:24:a1:4e:68:
89:a6:ab:26:b8:14:62:cc:55:e1:21:6d:2a:d9:e8:4d:03:f7:
40:a8:5e:ac:c8:a9:63:2c:71:a2:a3:57:ac:bd:f2:e2:60:ab:
93:1c:78:89:92:b4:96:c9:07:0e:d8:5b:4d:af:65:72:3f:d6:
a5:96:af:aa:13:b1:13:bc:7b:f0:f1:28:c3:49:ac:59:87:27:
3c:20:c9:85:f4:8e:1d:1a:29:0e:39:d8:cd:fd:fd:6e:fd:4f:
8d:85:94:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:04 2025 by rpki-client