Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89AB2412DFE111EFA0EA3764762E951A.roa
File: 89AB2412DFE111EFA0EA3764762E951A.roa (raw, json)
Hash identifier: E99KYwp3FK901KVDprE8l32YUXw3X5NKA9uRevjJf00=
Subject key identifier: 92:D7:5E:10:27:0F:E9:BF:C7:47:08:93:85:42:EE:9D:69:3B:45:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DBB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89AB2412DFE111EFA0EA3764762E951A.roa
Signing time: Fri 31 Jan 2025 14:42:04 +0000
ROA not before: Fri 31 Jan 2025 14:42:00 +0000
ROA not after: Fri 07 Feb 2025 14:42:00 +0000
asID: 63199
IP address blocks: 154.223.82.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85435 (0x14dbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 14:42:00 2025 GMT
Not After : Feb 7 14:42:00 2025 GMT
Subject: CN=679ce13c-caa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:20:a2:06:3d:9a:76:3f:cc:cc:3f:a5:96:
ff:26:73:9a:fd:02:96:21:98:6a:8b:2d:d2:2a:42:
e4:e9:9a:0e:b6:b0:b2:c4:1c:67:ff:93:4a:21:b9:
73:ce:56:0f:8c:e3:80:f1:61:95:3d:6a:52:1d:0c:
91:73:3c:9f:a8:49:03:c9:03:70:9d:20:29:eb:08:
4b:a4:f6:5b:51:3f:93:9f:2f:49:96:62:92:d4:78:
5a:26:c1:ea:ec:c0:ea:5a:da:7a:ff:34:10:cc:10:
5a:c4:92:6e:25:63:b2:ee:26:ec:93:08:78:d6:56:
a3:34:e2:99:76:34:f2:79:4d:8c:3b:ef:8e:40:ce:
12:9a:2b:7e:0d:ce:2c:dc:ce:98:50:68:8f:fc:16:
82:11:28:43:fa:0a:ee:69:8b:ff:68:d9:95:c4:a8:
f2:70:0e:32:88:39:f3:43:cd:bf:04:22:da:71:11:
f7:7a:80:9f:b4:54:6c:4d:fc:56:a0:58:53:79:4c:
59:fd:f4:87:59:bf:58:2a:e0:f7:08:b9:fb:03:cf:
0f:33:b7:93:e1:8b:eb:80:2d:1d:7b:d5:a1:ce:64:
8a:95:b9:12:ee:da:f2:48:c7:fa:68:ff:8f:2c:cd:
c7:64:c2:73:2e:73:a1:82:f1:0d:ba:5b:24:68:86:
77:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D7:5E:10:27:0F:E9:BF:C7:47:08:93:85:42:EE:9D:69:3B:45:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89AB2412DFE111EFA0EA3764762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.82.0/23
Signature Algorithm: sha256WithRSAEncryption
63:a6:fc:07:3a:67:c6:7d:cd:68:e0:1f:2f:6e:c7:77:2a:f8:
22:dd:3a:32:15:2b:ce:0d:08:7c:d7:78:93:e9:e6:a3:4c:96:
e6:f3:28:60:b6:64:bc:63:4b:db:e5:90:5f:d0:31:12:b1:90:
6b:5d:bb:44:84:cb:00:16:52:e2:2d:d8:4f:9f:65:34:18:08:
b8:d1:b6:9f:86:a7:bc:ae:ae:9a:46:fd:f6:55:c2:b5:c3:d9:
99:dd:b1:9f:f7:ec:13:9d:ff:cc:8b:1c:a7:2f:4d:61:1a:25:
7a:ae:db:33:b3:e8:60:d5:66:23:cb:f0:08:86:a6:16:0e:6f:
60:50:ac:26:b4:17:45:5a:a5:29:73:e2:cd:70:cc:ba:9c:41:
93:13:1d:a3:ad:9a:13:d7:c0:97:d5:4c:41:ff:e7:52:55:fc:
23:01:b8:42:3b:de:c7:21:95:db:60:2c:bb:2f:92:a1:9a:5b:
00:46:ec:73:04:0d:86:67:e4:54:22:5a:1e:fe:73:ed:6a:a3:
de:54:67:f4:b5:b8:ae:bc:8e:8d:f4:df:83:5d:77:74:d8:a4:
22:bf:64:b5:87:b8:13:a3:cc:cf:17:89:27:22:d1:ac:56:00:
b9:9f:15:60:f3:39:a1:4b:bf:d5:81:f6:e9:a3:7c:9c:4a:94:
89:60:36:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:32:35 2025 by rpki-client