Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CC240CF3D511EF920C9C59762E951A.roa
File: F2CC240CF3D511EF920C9C59762E951A.roa (raw, json)
Hash identifier: Flp0Hm3QiDYD57nZsQ/xgAbhWdhu3pUdq5WHjBBtM3I=
Subject key identifier: AF:DA:F7:E4:65:01:13:E8:7C:5A:0E:83:F6:C6:E2:91:85:5D:24:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01602D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CC240CF3D511EF920C9C59762E951A.roa
Signing time: Wed 26 Feb 2025 00:09:30 +0000
ROA not before: Wed 26 Feb 2025 00:00:26 +0000
ROA not after: Thu 19 Feb 2026 00:00:26 +0000
asID: 984
IP address blocks: 154.89.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90157 (0x1602d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:26 2025 GMT
Not After : Feb 19 00:00:26 2026 GMT
Subject: CN=67be5bba-894b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5e:07:37:b3:d5:b5:31:63:dc:f0:32:ac:46:
dc:50:a1:ac:64:0d:fa:2f:f6:18:01:f8:3d:52:2f:
33:6a:06:31:b0:22:e1:2d:ed:b7:e8:f3:c6:65:30:
cf:49:01:fe:ff:a8:a9:fa:db:ef:ab:07:87:87:13:
42:25:fb:f6:80:2b:1f:cd:f8:3d:fd:3d:12:12:4e:
74:07:eb:a4:21:a7:9d:fd:01:09:f2:81:f7:41:13:
c6:6f:c6:61:39:b9:72:6f:ed:0e:bf:b2:f3:b5:6a:
4d:0a:7b:1d:39:1d:2f:38:25:0d:81:58:77:1d:ae:
a3:56:f8:97:43:e6:19:7e:2b:ea:e1:10:91:af:3d:
f5:20:03:96:2e:b9:1a:91:ad:c8:73:af:e4:bd:7e:
e7:1f:ea:16:83:77:67:17:78:e4:49:5e:e0:a8:64:
07:f5:51:e3:7f:87:0a:63:d6:7c:46:72:e8:37:34:
d9:af:20:e0:d3:d3:6f:6b:f2:5f:6e:5f:4c:4b:92:
4b:73:da:ae:e3:b2:d3:e7:cf:9f:59:6b:1d:71:2d:
5e:df:7f:a5:f9:cb:ef:d4:da:64:d4:1c:2c:10:f6:
c8:3c:ef:c5:42:ee:ef:ca:9c:b4:de:51:2d:37:76:
86:91:91:6e:f0:69:83:ec:d3:98:3a:8f:ba:e0:3d:
f1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DA:F7:E4:65:01:13:E8:7C:5A:0E:83:F6:C6:E2:91:85:5D:24:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CC240CF3D511EF920C9C59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.233.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:86:a5:78:65:05:e4:83:12:76:73:70:f9:7d:c2:af:c5:6c:
49:9a:62:01:53:49:52:ce:48:55:52:2b:b3:79:5a:d0:d6:7a:
4f:df:f2:b4:09:db:87:05:c8:f1:e8:97:26:05:69:38:3e:3a:
d5:4d:5c:1e:58:b6:0d:ed:54:46:88:d2:45:d2:5a:a1:a7:42:
b0:cb:4d:51:ed:f2:ed:0c:89:d7:28:8b:d8:36:49:13:8f:41:
13:c2:45:36:01:29:b6:85:bf:1d:be:b1:fb:57:86:98:af:ec:
fb:01:54:47:9d:c4:35:de:9d:91:b0:9a:df:bc:79:c6:94:7c:
22:02:f4:5e:1c:b5:f4:a9:c9:d8:ef:95:65:fe:12:cd:1b:56:
de:74:11:2d:6b:f7:8d:7c:e6:21:d4:1e:7d:45:be:2f:03:79:
09:82:df:3b:ff:8e:8a:ee:0b:d8:d3:4a:a1:46:9b:68:24:34:
e8:42:01:9e:f7:70:cc:c1:e1:61:f9:07:84:fb:ce:36:7f:79:
df:d0:d2:20:04:26:a4:aa:89:b1:71:f0:43:ad:35:c3:ce:de:
43:be:db:d9:58:bb:b7:2c:c5:6e:59:69:53:f7:9c:0b:46:64:
44:3b:f7:d0:29:ff:60:9d:34:58:89:a2:a7:65:bb:18:56:cc:
3c:e3:77:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:39 2025 by rpki-client