Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/564F3570D3D611EFA0B2AA9A762E951A.roa
File: 564F3570D3D611EFA0B2AA9A762E951A.roa (raw, json)
Hash identifier: cz1itpgjdHDxr4Epv8MZOpIXA62ArECaAD/8X6kVlMw=
Subject key identifier: 9D:14:F4:29:FB:16:95:33:8D:E7:3F:73:E5:E1:60:26:14:48:C0:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/564F3570D3D611EFA0B2AA9A762E951A.roa
Signing time: Thu 16 Jan 2025 06:51:40 +0000
ROA not before: Thu 16 Jan 2025 06:51:36 +0000
ROA not after: Thu 20 Feb 2025 06:51:36 +0000
asID: 63969
IP address blocks: 154.89.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80834 (0x13bc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 06:51:36 2025 GMT
Not After : Feb 20 06:51:36 2025 GMT
Subject: CN=6788ac7b-a0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:58:90:8b:fe:cd:04:ff:b6:48:66:b1:68:
66:64:de:ab:06:2a:02:37:38:4e:61:40:b6:42:a2:
e3:43:94:f3:70:b9:49:95:5f:1b:57:45:53:c2:90:
d0:0d:72:1c:c3:fc:dc:75:82:14:a2:1e:10:3d:07:
0b:06:1c:9e:38:9d:ba:36:d3:30:8f:31:9b:41:2c:
17:3d:e7:a3:8f:0b:3d:a6:92:26:f2:fd:e2:41:af:
d3:bb:20:2d:6c:04:e4:fc:c1:0b:4d:76:ce:a9:1c:
31:ca:2d:55:37:9a:f6:67:48:2b:d8:62:d8:6e:e8:
c4:52:30:77:93:1e:bf:7e:5b:9b:88:cb:77:68:1a:
39:ea:5c:41:50:51:0c:a4:f1:23:c9:72:41:b9:3c:
39:30:5d:48:e8:35:6e:18:ce:26:b0:6d:c6:ca:94:
2a:99:45:87:97:a7:c5:d8:25:e2:d3:64:fc:d3:e7:
22:06:ca:82:6b:11:60:cf:79:e2:b9:81:71:af:34:
59:09:08:29:90:82:a0:3d:90:08:89:c6:7b:ed:6b:
a7:c3:25:08:33:95:aa:79:6a:91:82:20:3d:57:45:
b4:7e:08:ca:b7:2e:c0:df:0f:5d:41:b7:1a:b2:51:
f8:6f:3c:90:5e:c2:b3:ad:b7:a0:d6:53:94:c1:3e:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:14:F4:29:FB:16:95:33:8D:E7:3F:73:E5:E1:60:26:14:48:C0:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/564F3570D3D611EFA0B2AA9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.7.0/24
Signature Algorithm: sha256WithRSAEncryption
64:76:17:f2:d6:fd:43:3b:57:ad:06:67:ed:3e:cc:77:bb:4d:
1e:dd:d9:23:89:53:3b:92:f2:fa:fb:7e:49:9a:ac:ea:51:f9:
93:bb:3a:ce:b7:41:88:e3:70:73:35:d9:1e:1f:8d:84:5e:e8:
91:b3:f1:d5:89:34:36:f0:1d:dc:0b:66:92:12:36:49:70:47:
fc:c8:b8:63:74:cd:65:f5:0a:40:31:cb:18:ba:40:63:25:a3:
bd:d1:56:17:53:84:b8:42:6b:27:30:e6:21:12:2a:6c:31:09:
77:b3:7a:01:78:6f:0b:fd:bd:d9:0e:da:89:c7:0f:85:2e:36:
85:52:3c:e1:15:94:c6:9a:32:89:dd:a4:55:b6:0f:82:a0:8b:
3a:e0:e2:24:a9:1e:b9:ee:80:88:48:7a:fa:c9:fb:11:04:6d:
75:ed:49:ab:c9:1a:9f:c8:ca:b2:e8:76:1b:6d:64:36:69:29:
db:12:b7:40:0f:69:61:b6:34:4d:4a:4e:b5:28:38:5c:7c:f3:
59:77:a4:1c:e6:75:5b:e6:9e:5f:fa:ec:e5:af:0e:6a:e9:db:
77:7e:cf:be:90:13:fa:71:00:17:4f:74:82:2c:7d:67:ec:f2:
b4:ca:84:74:1d:ba:7e:a5:f9:93:15:21:36:6b:df:88:3a:e0:
67:b5:0e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:06:33 2025 by rpki-client