Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37096E02CDDB11EF830A7BA4762E951A.roa
File: 37096E02CDDB11EF830A7BA4762E951A.roa (raw, json)
Hash identifier: hH89s17M6DCotKp9LSiON5CCUrdCNM/0KFyEA+U/3dY=
Subject key identifier: 5B:28:1E:04:2C:29:6A:20:92:E9:48:52:8F:62:87:AD:74:D9:48:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013793
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37096E02CDDB11EF830A7BA4762E951A.roa
Signing time: Wed 08 Jan 2025 16:11:28 +0000
ROA not before: Wed 08 Jan 2025 16:11:24 +0000
ROA not after: Sat 03 Jan 2026 16:11:24 +0000
asID: 984
IP address blocks: 154.89.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79763 (0x13793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 16:11:24 2025 GMT
Not After : Jan 3 16:11:24 2026 GMT
Subject: CN=677ea3b0-a68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:23:b5:41:d4:c5:63:6f:e6:3a:b7:87:dd:
ea:1f:32:c2:22:59:b1:5b:0d:d3:28:dc:f4:b8:13:
e5:d4:2a:43:ae:ab:3c:7a:81:ed:eb:f4:50:96:de:
bf:6b:45:42:ec:d2:1b:c8:e8:bc:d4:a2:f0:e7:2c:
50:49:a4:a8:1c:80:db:d4:3a:8a:b2:5f:09:90:da:
e8:0f:eb:db:3e:50:e1:1b:18:4d:70:85:16:0d:d9:
92:3c:6f:56:0f:e7:0b:92:cf:11:ef:73:32:fd:de:
a5:78:0b:dc:19:b8:30:2f:19:ea:b4:e5:11:a3:da:
ba:c9:f2:97:ba:35:24:a6:3e:97:90:d9:0b:f7:3e:
59:83:9c:18:26:ee:43:d1:df:03:8c:0b:7c:4c:f2:
7a:f7:bc:3f:64:65:03:4b:ae:53:f4:5a:2d:fa:f6:
b9:9e:7c:50:79:64:93:fb:5f:8a:93:12:0b:52:ce:
89:87:ac:82:27:fb:22:a3:02:ef:0f:47:03:c5:0a:
40:df:87:66:ac:35:1b:e7:0c:e7:8b:e6:fb:39:95:
d9:69:a4:93:d7:2d:d5:30:90:f1:e2:62:ce:25:4b:
df:16:08:3b:93:3d:56:d3:14:89:be:7f:e7:5c:83:
90:07:f3:eb:27:d5:3c:b9:07:0a:42:4d:f8:7b:0f:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:28:1E:04:2C:29:6A:20:92:E9:48:52:8F:62:87:AD:74:D9:48:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37096E02CDDB11EF830A7BA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.152.0/24
Signature Algorithm: sha256WithRSAEncryption
79:50:41:f5:1e:75:55:58:57:90:8d:fe:de:35:51:bb:d3:46:
8f:66:5e:11:ef:50:34:b5:07:6e:14:dc:41:f3:4c:56:c8:d1:
31:e5:8e:3d:1f:a2:e0:16:9e:7f:12:d7:fd:b5:88:b2:31:0c:
cf:02:73:02:35:9f:f9:67:bd:22:bb:27:03:3f:c0:2c:cc:7a:
50:08:cd:02:92:07:9b:46:bd:b9:e7:b6:32:9f:bb:67:1c:c3:
9f:7f:94:86:54:81:3a:9b:2b:d0:5b:73:1d:dd:49:bf:d3:df:
a7:0d:70:d8:10:69:b4:19:47:bb:f4:cf:86:48:77:d8:3e:a5:
42:e6:2e:ae:b1:b8:9b:d3:37:d5:99:bb:aa:ef:d6:f4:12:f5:
ef:f6:0d:15:6c:7d:f1:69:68:b7:53:4f:f7:c9:6b:82:5f:fc:
5c:01:70:c8:dd:50:e7:8a:b9:28:0f:87:9d:2b:27:45:36:3a:
0a:8b:79:c3:71:92:cb:87:4c:00:54:d1:4d:cd:0d:ae:ef:2a:
25:ae:cc:62:4b:85:fb:a4:1c:61:02:b6:49:2d:cc:61:c8:be:
61:6d:17:77:ab:14:58:89:46:53:e7:96:18:08:05:b1:2b:1a:
c4:21:0f:41:e5:a7:51:01:92:28:60:c7:e3:01:fe:e3:6f:7d:
0e:a6:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:55 2025 by rpki-client