Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88FE0C60D57711EF885B0948762E951A.roa
File: 88FE0C60D57711EF885B0948762E951A.roa (raw, json)
Hash identifier: DUQtXyL0G7A9sj7fQwF33MDRXcR1CReK0UmiJrnR3f4=
Subject key identifier: D0:BB:03:33:45:49:68:BF:6C:AD:80:39:80:58:91:2E:E5:B1:6F:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88FE0C60D57711EF885B0948762E951A.roa
Signing time: Sat 18 Jan 2025 08:38:05 +0000
ROA not before: Sat 18 Jan 2025 08:38:01 +0000
ROA not after: Sat 22 Feb 2025 08:38:01 +0000
asID: 55020
IP address blocks: 154.89.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81364 (0x13dd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 08:38:01 2025 GMT
Not After : Feb 22 08:38:01 2025 GMT
Subject: CN=678b686d-82e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:13:c3:9d:20:76:9c:65:a6:d6:69:16:c6:62:
fd:3b:b5:cf:90:46:09:d1:40:58:d5:f3:eb:1d:51:
6b:f3:e3:51:c5:95:84:d6:75:05:f6:b7:94:4d:2c:
e3:9c:7b:b3:41:bf:38:c8:a9:3e:c0:0b:3d:6a:6b:
76:53:36:83:f8:56:dc:49:19:9e:a8:9c:a4:45:37:
29:fa:0d:4c:68:ec:04:ba:44:3f:03:94:17:55:3c:
e6:28:6b:e3:5b:ce:98:a2:da:00:c8:4a:36:7d:d6:
19:77:eb:fb:12:1c:e4:a7:93:1c:38:58:cd:6c:6e:
3e:3c:c7:90:87:70:64:27:4f:a5:1c:68:db:e8:5f:
9c:02:d1:84:68:7f:ce:2b:e3:15:bf:06:84:7d:93:
1e:90:29:53:2d:f0:5e:ec:f3:47:3a:62:d3:18:54:
f2:8a:74:3b:90:6a:b5:9f:e2:15:c1:fa:c4:11:d8:
cf:2c:48:24:82:42:3c:cf:da:f3:3a:d0:2f:4a:c1:
54:c9:09:8b:5e:26:aa:24:44:73:59:af:94:8d:06:
8b:e6:51:51:87:9f:67:26:a3:ea:8d:0c:dd:25:10:
d7:62:64:82:28:87:60:c6:15:47:5d:a3:32:41:ac:
d9:ab:48:17:34:91:26:52:50:48:ed:09:02:ce:3b:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BB:03:33:45:49:68:BF:6C:AD:80:39:80:58:91:2E:E5:B1:6F:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88FE0C60D57711EF885B0948762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:56:ff:ba:fb:5f:b9:d2:c6:43:62:90:a1:3f:64:46:a1:83:
d4:df:7b:b7:6e:ed:d0:11:ec:dd:09:86:07:2c:e6:d1:4a:11:
c6:b9:69:94:b0:3b:f0:1f:b2:ae:08:5b:a9:38:79:0b:22:7b:
91:0f:ad:c6:52:3f:6e:ee:6d:53:e0:02:79:76:a0:82:60:d8:
ad:6d:78:4c:04:3f:75:c1:c9:2d:b3:ed:f3:71:3a:dd:bb:9b:
ff:e5:32:00:3f:e2:fd:a5:1e:a6:9e:c3:17:b4:a3:e0:07:00:
38:cf:09:55:37:79:c8:78:1f:85:ff:50:8f:01:5b:a0:46:ef:
9c:c3:35:74:04:5d:26:84:68:af:ee:a5:19:e5:4a:5e:c6:00:
67:eb:ec:6d:0e:87:c3:5e:b6:4b:61:b1:53:0b:10:b3:36:31:
92:b4:b7:48:e5:40:e3:55:d9:24:fa:44:4a:04:4f:06:2d:de:
a0:7c:fc:af:8e:18:24:29:2d:77:8d:b3:88:06:6e:19:b4:1d:
e7:fd:92:39:ab:d9:6b:71:a6:8f:cf:56:32:87:e3:7f:7a:7b:
3f:31:1b:42:f3:ae:f1:ba:01:07:0e:70:c6:62:66:58:61:b2:
dd:b5:ca:44:e9:f4:e2:58:d7:eb:cb:6a:ae:27:46:2f:b6:0f:
f9:02:1f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:01 2025 by rpki-client