Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8474D86AD57511EF8701FEB8762E951A.roa
File: 8474D86AD57511EF8701FEB8762E951A.roa (raw, json)
Hash identifier: JwWnDuDN57LPj+ULCNudXwgqvIt8JF10CWAGNuZ5GMo=
Subject key identifier: 71:A4:4A:BC:2B:77:A1:9D:38:B9:A1:71:C4:FD:D1:3F:64:A5:07:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8474D86AD57511EF8701FEB8762E951A.roa
Signing time: Sat 18 Jan 2025 08:23:38 +0000
ROA not before: Sat 18 Jan 2025 08:23:35 +0000
ROA not after: Sat 22 Feb 2025 08:23:35 +0000
asID: 8796
IP address blocks: 154.89.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81348 (0x13dc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 08:23:35 2025 GMT
Not After : Feb 22 08:23:35 2025 GMT
Subject: CN=678b650a-b5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:3e:9f:52:67:b7:6a:21:47:32:ed:50:8b:
ee:99:0c:9c:99:1d:b7:80:93:a9:fb:9e:8d:0e:9b:
38:a3:80:f4:67:0e:21:84:20:0c:ac:9e:7d:e8:f6:
28:2c:d2:d4:7a:fc:fe:ff:5d:ab:c3:4c:22:10:5c:
ca:30:1f:37:44:cb:da:1e:37:5b:de:67:b7:68:ff:
a8:d9:e9:9b:1a:7d:3c:d3:9f:3d:54:e9:4f:47:b0:
01:0e:df:a5:71:b8:d3:77:f8:c2:6d:3f:79:d7:67:
95:2d:58:fc:24:62:5f:40:4b:18:5d:c0:e3:58:dd:
2b:29:20:b1:25:22:c7:5b:a0:f5:5f:8f:bd:5a:9c:
41:1f:c8:73:f4:a4:15:93:9f:9c:e3:19:63:4c:84:
6b:1a:f7:3b:bf:ba:b5:9b:ba:29:02:8b:0e:be:50:
09:ee:44:b4:d9:b7:30:56:26:eb:95:f3:27:22:68:
9b:9c:2e:3e:ce:86:21:1f:c3:dc:26:2a:b3:34:0d:
af:83:40:26:b6:47:6c:9b:d6:39:74:50:49:90:4e:
ea:51:ce:90:a9:1e:e8:73:94:7e:6e:50:ed:79:28:
db:ee:46:15:97:43:ce:ec:24:e8:08:18:e6:3a:0f:
79:86:f9:30:96:d0:b9:3e:7c:b8:24:c8:b1:fc:92:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A4:4A:BC:2B:77:A1:9D:38:B9:A1:71:C4:FD:D1:3F:64:A5:07:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8474D86AD57511EF8701FEB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.160.0/19
Signature Algorithm: sha256WithRSAEncryption
14:be:f8:41:c4:53:d8:10:cd:d5:c4:6f:1e:5a:fa:e4:f5:b0:
9f:8d:f4:84:3b:60:eb:a5:c4:17:54:04:4d:06:1c:f8:78:00:
c2:05:f1:e3:f9:66:ce:9e:15:0e:79:01:fb:ae:07:e7:b7:07:
84:e2:8c:0a:c0:09:87:70:9d:43:63:6a:54:b1:6c:8a:56:9c:
85:fa:30:31:c9:cc:53:31:73:81:1f:7c:10:cd:29:a5:6c:69:
dd:b5:74:6c:d6:c7:62:98:ff:f9:b6:ba:5b:00:9d:13:48:5e:
c3:fb:01:49:5c:16:dc:32:03:d4:e2:97:2e:88:7d:87:64:c3:
42:3c:ea:05:8f:ca:ca:19:bd:bc:d7:b4:75:c5:cd:97:6e:d0:
76:4b:5d:e0:76:6c:10:0c:56:e2:8f:66:f7:09:a3:37:ac:1a:
8b:ed:98:ef:a5:f3:4c:64:e7:07:d6:e7:35:93:2a:b9:79:73:
6c:2a:89:e1:6f:87:02:2e:16:45:f9:9f:a1:09:61:19:b3:f4:
42:ac:0a:3d:a0:1c:dc:7f:1d:a1:a4:89:0b:b8:6e:97:75:32:
36:4a:8a:1e:be:7d:e2:7a:d1:2c:f4:af:e4:fc:68:55:db:96:
0d:d4:b4:28:b0:24:1e:74:a1:97:31:8f:c6:26:a6:d1:9e:8e:
1d:8c:a5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:36:39 2025 by rpki-client