Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1ABF05CC0D611EF9180035B762E951A.roa
File: F1ABF05CC0D611EF9180035B762E951A.roa (raw, json)
Hash identifier: 7EXka0pvUcpee5qGg+LW+3gsNGy6pPnC0Q3rViq1juE=
Subject key identifier: 23:75:A1:93:FA:E2:BA:E9:45:87:95:CB:FC:51:0F:BD:7A:DE:BE:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1ABF05CC0D611EF9180035B762E951A.roa
Signing time: Mon 23 Dec 2024 02:38:08 +0000
ROA not before: Mon 23 Dec 2024 02:38:05 +0000
ROA not after: Wed 10 Dec 2025 02:38:05 +0000
asID: 984
IP address blocks: 154.89.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73320 (0x11e68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:38:05 2024 GMT
Not After : Dec 10 02:38:05 2025 GMT
Subject: CN=6768cd10-27a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:c3:1b:5c:ce:09:b4:04:fb:7f:4d:99:c3:
f2:91:f4:eb:5e:22:fb:cc:6c:bd:17:c5:ae:60:28:
95:e2:5e:ca:6e:84:25:d0:b3:45:89:9a:83:be:76:
5c:f4:05:04:69:ce:24:45:77:ec:18:82:e6:31:5a:
8f:29:bd:96:57:3f:24:7e:0a:3a:c5:a9:00:1e:21:
f2:b3:f9:59:b6:9b:04:f8:49:61:cc:c1:35:0c:02:
f0:b8:f8:91:1b:7e:1a:f8:17:fa:70:89:74:38:1a:
07:86:6e:16:d4:b7:74:20:76:9b:9e:e2:d0:c4:bd:
0f:b0:33:f4:8d:f5:05:53:e8:af:c5:20:35:b3:3b:
8a:2a:3e:22:eb:86:c1:e8:9d:e9:a1:c0:10:35:6f:
e5:8e:80:1c:b8:89:4e:20:ab:0e:f8:5c:ac:8c:2c:
3f:56:5c:08:8a:6b:bf:f6:08:f0:e7:33:e3:9c:e0:
5d:0a:f1:6d:70:28:5c:88:0b:84:71:eb:31:cc:dc:
8a:a7:4c:a4:42:6d:60:a6:13:69:1a:15:8f:de:76:
78:e4:47:4f:ce:4d:05:67:86:ef:6e:ee:10:b0:47:
4d:5b:df:d2:9a:88:db:38:3f:79:68:66:8f:c2:66:
8a:67:8e:31:cc:77:e4:96:a4:f5:f2:2c:2e:ae:98:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:75:A1:93:FA:E2:BA:E9:45:87:95:CB:FC:51:0F:BD:7A:DE:BE:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1ABF05CC0D611EF9180035B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.146.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c9:ea:b2:3e:a1:c3:c2:e9:dd:ce:8b:a1:04:ec:57:c5:e5:
2f:ec:77:d4:64:8e:8e:43:6a:60:dc:15:a3:44:5b:f4:a8:07:
ef:07:0d:fb:c6:56:10:b8:3f:cb:12:1e:e6:4b:09:46:25:89:
9d:55:f9:82:c9:97:86:89:98:d7:61:a7:df:93:ee:ed:db:ac:
df:51:e4:b5:91:29:cd:52:1c:1a:6f:bb:48:fe:a9:4d:9e:d2:
5a:0f:62:f9:8b:7c:e5:50:dc:70:23:75:3c:f0:6d:31:ab:8e:
4b:94:44:fa:af:0d:b3:aa:1b:19:f0:1d:20:2b:d9:32:6d:31:
8b:44:97:35:11:de:11:db:dc:0a:81:68:e9:90:7f:32:00:29:
f6:e6:d7:89:1d:21:ae:5a:8e:da:99:e3:f0:72:2f:6d:37:16:
d5:38:17:48:a4:ea:eb:ec:b2:6b:95:62:80:1e:94:35:85:76:
56:30:73:97:f7:86:86:38:1a:e0:81:8a:0b:7e:a6:6b:5b:4b:
f1:e3:05:82:b7:08:7b:09:55:22:4a:58:5b:4d:f9:5a:b7:aa:
42:d5:7c:e0:e3:d3:69:d4:67:11:f5:f1:2d:1a:f5:62:4a:f7:
60:c1:5c:f4:44:d5:a2:9e:47:a6:0b:69:9f:05:f8:b1:15:dd:
25:2d:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:59 2025 by rpki-client