Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74635098C0D811EFB9D66865762E951A.roa
File: 74635098C0D811EFB9D66865762E951A.roa (raw, json)
Hash identifier: l5Tl3+zBha4abnC5Pwu2cDDlI/ICxIoUz8uWgjkKlu8=
Subject key identifier: 03:AB:5B:F6:34:80:85:22:41:DC:99:6B:80:48:9E:D6:48:27:0B:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74635098C0D811EFB9D66865762E951A.roa
Signing time: Mon 23 Dec 2024 02:48:57 +0000
ROA not before: Mon 23 Dec 2024 02:48:53 +0000
ROA not after: Wed 10 Dec 2025 02:48:53 +0000
asID: 984
IP address blocks: 154.89.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73340 (0x11e7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:48:53 2024 GMT
Not After : Dec 10 02:48:53 2025 GMT
Subject: CN=6768cf99-0b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:5c:c2:fe:48:04:4c:0c:cf:39:b4:09:63:
31:c4:61:6d:a1:8f:a3:0b:28:21:91:7a:82:d0:ab:
8c:18:36:1e:cf:27:4c:3a:0b:5a:c9:39:c9:5e:73:
f2:99:a4:dd:12:8d:44:ba:8f:73:1a:12:38:3b:c6:
b7:3d:5e:01:f0:41:12:6c:a6:0d:f5:41:80:61:9f:
6a:33:44:60:00:39:7e:08:96:5c:6c:80:88:d7:a6:
e6:a3:91:c9:94:7c:5f:55:40:7d:e3:5d:60:65:56:
18:b0:cc:49:35:57:e5:15:09:2d:fc:5f:dd:16:15:
d0:92:dc:7a:e9:3a:68:ee:1d:74:59:57:03:d6:7f:
39:4f:24:a0:b3:74:67:d1:4c:be:ad:b6:67:50:15:
f5:dc:94:50:7a:bd:7c:29:0f:7f:b7:7c:bb:d6:43:
5c:ba:d7:f5:31:ff:49:e3:d6:f6:33:70:ff:af:ab:
85:92:a7:56:bb:64:67:dc:9f:3d:be:61:2d:a6:d0:
dd:a7:b8:44:d9:df:4e:b7:1c:7f:c0:fe:6b:cc:eb:
a1:5a:27:37:03:9d:92:d5:61:bb:89:f6:6f:a4:c6:
54:23:7f:c5:ac:d1:e7:de:92:ec:1d:b3:af:1e:0d:
08:b8:ef:94:b6:fe:c4:33:27:61:b5:12:12:e3:b6:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AB:5B:F6:34:80:85:22:41:DC:99:6B:80:48:9E:D6:48:27:0B:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74635098C0D811EFB9D66865762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.156.0/24
Signature Algorithm: sha256WithRSAEncryption
73:90:cc:89:bb:6c:96:0a:48:0a:dd:a4:37:c5:0c:f7:93:ce:
82:5d:08:56:55:dc:1a:d6:9e:e7:54:83:36:35:14:99:e7:34:
4f:4b:31:a5:ea:56:dd:8d:04:46:7b:09:48:88:ae:c1:56:a6:
f7:e4:b7:25:05:f5:33:b4:cf:4c:e2:c1:82:a9:a0:6a:6d:8a:
bc:7c:8a:b2:c4:65:0d:32:13:32:b6:5a:75:7a:7f:9f:c4:8d:
65:11:0b:5b:75:d3:a9:76:80:18:db:e5:a8:f1:28:1d:96:49:
83:9c:2b:57:3f:b6:ab:03:e7:6c:14:0a:6f:f4:fd:e9:02:4f:
d8:f2:0b:de:5d:04:42:24:0f:1e:76:c0:51:8c:5c:73:73:32:
31:b0:d2:4d:bf:81:62:6b:7c:25:2e:4a:a8:b6:ee:db:3e:89:
c4:86:7b:23:a2:b9:cf:48:93:37:1c:78:f2:7b:19:a7:86:3e:
08:51:d6:8f:8a:a3:42:58:6e:52:cc:3f:ed:13:e7:4e:c0:f9:
3e:56:66:f4:98:57:3f:4c:9b:0d:82:6d:f2:fc:ac:04:f5:ae:
7f:3d:87:3d:3b:0e:60:24:33:31:eb:b9:03:ae:a0:9c:b8:85:
24:45:85:ac:80:fc:1f:ea:e6:39:1c:b3:5b:c1:0b:75:95:82:
d7:7f:7d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:48 2025 by rpki-client