Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F27B7B8ECDE611EF8F691C6F762E951A.roa
File: F27B7B8ECDE611EF8F691C6F762E951A.roa (raw, json)
Hash identifier: DuZqLaXdiu2PQzsKMWqFcmcLcXQCz/f4+93YMMOFIyM=
Subject key identifier: 0B:F3:3A:58:F6:E6:F1:76:C3:DA:5C:C2:98:2B:77:4C:8A:52:E5:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F27B7B8ECDE611EF8F691C6F762E951A.roa
Signing time: Wed 08 Jan 2025 17:35:27 +0000
ROA not before: Wed 08 Jan 2025 17:35:23 +0000
ROA not after: Sat 03 Jan 2026 17:35:23 +0000
asID: 984
IP address blocks: 154.89.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79849 (0x137e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:35:23 2025 GMT
Not After : Jan 3 17:35:23 2026 GMT
Subject: CN=677eb75f-3015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:73:1a:29:c0:72:af:8b:26:ac:53:3a:59:14:
87:8d:62:76:07:01:ce:7f:be:54:60:2f:63:0f:d2:
64:7a:bc:c8:30:1c:4c:0d:3d:f7:a0:1d:ef:4d:fb:
f5:a1:93:16:29:52:e3:d7:2f:3f:77:7b:76:aa:cc:
cf:0e:5b:82:18:f1:d5:47:a1:e6:32:8b:d2:0b:fe:
e5:d3:b0:7e:e4:aa:13:d9:a4:bf:7e:5d:fa:17:3e:
8a:b3:17:da:5e:d3:77:e3:c8:d8:ac:3d:00:2a:24:
ce:e2:dc:83:78:14:86:c3:a3:3e:28:bf:26:ed:57:
33:84:4c:6d:10:35:65:95:bb:d6:74:ee:ab:d4:64:
86:23:3f:e1:7f:37:04:69:fc:56:5e:f0:5b:e3:f3:
27:fb:4e:d7:c0:b1:fa:19:60:dd:04:ef:a6:99:bb:
5c:b7:a1:58:b6:f5:d7:a7:81:5e:e9:ee:f4:a8:63:
e2:7a:65:94:a6:2a:60:92:6e:05:2e:27:56:7f:d9:
1c:20:1d:55:fa:bf:58:15:a3:81:76:07:bf:cf:8c:
2d:a4:5b:b7:55:ed:71:dc:25:11:65:1a:ec:d3:e7:
51:91:34:7e:a0:02:27:6e:76:cc:1d:61:45:8a:b3:
49:6e:74:87:30:f5:b0:94:e0:7e:c9:a4:1d:de:cb:
3a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F3:3A:58:F6:E6:F1:76:C3:DA:5C:C2:98:2B:77:4C:8A:52:E5:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F27B7B8ECDE611EF8F691C6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.195.0/24
Signature Algorithm: sha256WithRSAEncryption
46:aa:31:6e:d2:09:9e:f6:a7:8e:6f:8e:63:ed:d6:c5:34:69:
03:20:16:52:e9:a5:a5:21:03:fd:20:b9:29:48:85:2e:55:6c:
5c:ff:8b:22:5b:9e:73:7b:02:73:0b:a4:e7:c4:68:81:4b:69:
78:a8:53:ad:1c:03:45:b2:9c:a4:7b:4d:b8:3e:b4:aa:e4:bf:
e6:01:86:07:53:c2:d3:1c:18:1c:e3:75:0e:3a:a1:bd:2c:73:
f6:31:c9:71:bb:8b:42:1e:1c:e7:63:9e:a3:d1:89:42:52:90:
36:2e:dd:2f:a1:88:c8:d6:e0:90:06:d2:b0:3e:e9:e5:7e:87:
cd:4a:9d:64:d8:d3:cd:0f:ca:21:76:32:d8:86:fd:9b:58:e5:
c6:77:7f:04:02:cc:e9:f6:46:c7:58:85:e7:62:c1:ac:bd:ba:
c8:05:10:b1:97:bf:7f:ec:5e:f7:42:48:0e:fa:6b:dc:9a:05:
01:76:d1:26:0b:8d:09:27:88:c0:9f:ac:84:5d:f9:9c:99:89:
9a:f8:9a:67:fa:37:8e:de:16:79:09:a6:58:20:dc:8c:c6:f0:
5a:09:98:97:63:79:49:6e:23:57:ac:4c:34:27:1d:b9:3c:c2:
57:8e:3e:ac:5e:62:3f:29:d4:29:59:f7:ee:b9:c1:ec:b0:f5:
de:c6:0d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:15 2025 by rpki-client