Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74D7A274CDE711EFA2454671762E951A.roa
File: 74D7A274CDE711EFA2454671762E951A.roa (raw, json)
Hash identifier: 1/s4s0FNJkiIsjlLpPpzDfW7J/x9oqs7Q4escFUWZVg=
Subject key identifier: C1:F4:70:9F:F2:54:87:9E:BC:B4:8B:6C:2C:4F:91:E2:7E:CA:30:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74D7A274CDE711EFA2454671762E951A.roa
Signing time: Wed 08 Jan 2025 17:39:05 +0000
ROA not before: Wed 08 Jan 2025 17:39:01 +0000
ROA not after: Sat 03 Jan 2026 17:39:01 +0000
asID: 984
IP address blocks: 154.89.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79853 (0x137ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:39:01 2025 GMT
Not After : Jan 3 17:39:01 2026 GMT
Subject: CN=677eb839-0a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:1a:ca:da:bd:af:3f:a6:36:76:cd:4a:77:
95:f2:ef:82:78:b4:91:88:97:e5:53:56:e6:ce:70:
31:c5:ba:e5:b4:3e:b7:c1:9e:4b:54:e2:e6:30:53:
04:07:01:f1:04:6b:46:7d:24:70:f2:12:a9:f2:69:
40:ea:dc:35:4a:5c:ae:c4:59:45:d6:6b:81:c9:bc:
fc:f6:65:bc:bf:0a:53:d7:09:a1:e6:52:85:bb:1a:
93:84:5e:16:e8:ca:a1:14:07:d6:74:cc:7b:45:62:
1f:25:a9:6d:7c:76:e7:64:c4:18:18:e8:76:e1:93:
68:bc:18:2c:db:15:0a:a5:f8:70:70:b5:e9:af:cb:
71:a1:f1:e2:f7:85:48:a9:d2:71:81:8d:c1:22:91:
cc:e0:0b:4f:1e:9a:c0:c1:93:fe:89:9f:a7:4b:52:
d5:5e:4c:58:09:60:99:7b:74:b3:86:18:61:2a:82:
af:24:ea:07:b8:cc:86:70:b7:5e:ca:ba:85:fd:69:
17:27:72:ea:9b:76:c3:50:fd:eb:78:5a:4e:94:3a:
07:70:63:cf:1a:22:c0:69:f4:e4:ca:4a:f8:24:bd:
ad:21:b3:bf:12:ef:96:85:58:1f:f0:bb:ea:93:f6:
e3:a5:6d:9a:24:5e:66:ac:ba:2c:bb:93:26:29:7b:
c3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F4:70:9F:F2:54:87:9E:BC:B4:8B:6C:2C:4F:91:E2:7E:CA:30:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74D7A274CDE711EFA2454671762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.197.0/24
Signature Algorithm: sha256WithRSAEncryption
58:59:47:aa:95:65:50:13:23:2b:4c:1d:51:de:c9:b7:1a:eb:
86:23:17:84:2a:88:e8:bd:b7:b5:d1:b2:c1:27:48:f3:a2:d6:
71:ff:c6:32:0f:81:9d:e8:db:25:9a:27:e8:b8:14:70:a8:13:
01:cd:46:e3:d3:cd:38:a0:a9:f5:4f:4f:20:12:93:c9:73:ee:
cf:5c:52:41:36:0a:73:18:d7:2b:f1:f7:ab:e9:3d:6a:e4:35:
81:01:eb:be:0b:0d:0d:5c:8c:d1:d9:60:73:3f:9b:61:8b:73:
a0:de:bf:37:2c:6b:cb:b0:ed:b8:6c:bf:33:15:b5:0c:75:8d:
05:d0:5d:10:1d:f7:c3:a0:98:5b:ab:cb:ba:80:f7:34:54:a9:
8c:74:21:09:a1:27:32:32:68:6b:b1:d1:0f:e6:c4:b8:d6:e1:
8e:9e:99:a9:4b:7e:27:3e:0c:f2:27:a2:a6:77:2c:da:f1:63:
59:8a:9a:c9:a1:18:57:77:e8:01:f6:dd:de:7a:7f:d0:f1:1a:
c8:12:9e:25:40:ee:cd:43:fa:08:87:8d:63:73:24:07:e5:1e:
cc:83:28:60:44:26:5d:84:9f:c2:b5:c6:0e:be:a3:bf:24:2e:
80:48:1d:2a:34:7e:42:00:6a:e5:e1:a3:6b:66:dd:88:cc:08:
81:ab:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:51 2025 by rpki-client