Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/540F82DCC27011EFADC04691762E951A.roa
File: 540F82DCC27011EFADC04691762E951A.roa (raw, json)
Hash identifier: G1Ley7vU+zQQh8CMF5y4bvJ+jWqhEij/JUadi3gIu+E=
Subject key identifier: C4:2E:D9:EE:C4:AC:8C:11:92:76:F3:87:8B:AE:36:AC:AA:EC:EE:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01245C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/540F82DCC27011EFADC04691762E951A.roa
Signing time: Wed 25 Dec 2024 03:28:38 +0000
ROA not before: Wed 25 Dec 2024 03:28:34 +0000
ROA not after: Wed 10 Dec 2025 03:28:34 +0000
asID: 984
IP address blocks: 154.211.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74844 (0x1245c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:28:34 2024 GMT
Not After : Dec 10 03:28:34 2025 GMT
Subject: CN=676b7be5-356a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:84:8d:0b:d5:bc:2a:26:2c:1f:5c:bf:fa:
4d:92:bc:2d:c4:23:12:14:3e:37:bf:d7:21:ca:4f:
fb:e0:fc:19:8c:08:cc:fd:23:ae:45:c3:61:92:8f:
90:10:a9:8c:28:8a:a7:cc:06:a9:ab:e8:ed:e7:cb:
6f:85:15:4f:41:6b:02:8a:1d:b3:50:e8:5f:71:1b:
3c:48:1a:d5:f8:b8:76:ba:48:11:ae:09:22:10:b0:
19:37:f5:49:7a:7b:71:6b:6b:94:ea:fd:dc:01:8a:
d8:8f:41:37:90:54:7c:19:35:5b:f6:cd:44:8b:3d:
e4:b4:a9:68:4a:18:7b:c8:be:f7:63:20:e6:58:b7:
1f:c8:41:c2:2f:d2:af:0b:fa:44:23:3a:77:f6:28:
25:a9:15:40:d1:29:6a:2f:f8:b2:df:6f:80:a2:b6:
30:fe:e2:07:0b:3d:ef:66:ee:02:19:e0:35:f1:71:
aa:2b:2b:a0:2d:b9:c0:bb:fd:43:15:6f:60:b7:da:
1e:69:30:e8:45:53:b0:5a:27:9b:69:91:ad:23:3e:
f5:63:73:42:c1:19:b2:7a:0c:a0:7b:b9:5f:3f:fa:
d9:64:32:1a:0a:de:df:9b:cf:2c:8f:94:b1:f6:7e:
fa:51:48:d1:41:a9:32:d6:ea:17:58:9a:cd:f0:ce:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2E:D9:EE:C4:AC:8C:11:92:76:F3:87:8B:AE:36:AC:AA:EC:EE:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/540F82DCC27011EFADC04691762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.197.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:98:c9:46:ff:28:5a:00:f5:0e:b0:fb:fb:ab:1a:32:9f:92:
b5:0d:84:71:04:46:c4:7e:3a:e0:44:b8:db:cd:7f:4d:ca:8e:
9e:37:2b:63:3f:03:31:04:5b:42:26:44:47:52:61:78:f3:05:
06:34:6d:30:52:0d:7c:48:7c:f3:29:a7:7c:53:f8:ae:c4:14:
89:a3:35:32:ac:fb:b2:3e:65:fa:3a:92:a1:98:9c:21:0d:c4:
46:77:13:fc:0b:79:34:44:cd:eb:18:c2:27:e7:e0:4c:0c:75:
4d:c1:3a:39:e3:4a:65:a0:98:cf:ed:57:ee:e7:78:bc:e6:eb:
fc:f2:21:41:7c:fc:be:92:2b:eb:c6:d0:42:8e:6f:c6:af:cb:
56:1c:9f:e0:05:ec:8f:b6:a6:a9:85:c0:ec:d5:bf:d0:2e:b8:
c9:06:ab:b3:f7:45:b1:fb:74:80:3d:f5:0b:3c:8d:45:d2:5d:
80:ac:75:57:fd:8f:94:8d:e8:d6:e9:e4:01:9f:45:11:d7:5d:
c2:b1:ce:92:c4:23:51:a5:92:b9:5d:02:ca:cd:33:d0:e8:d8:
fe:97:ba:a1:48:70:a4:d9:1f:cc:4a:50:b9:f4:26:55:8c:ef:
03:28:8e:c5:9d:22:b9:55:15:3e:59:37:5a:36:9d:08:cb:29:
be:5f:bd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:33 2025 by rpki-client