Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11CCE62AC54111EF8E25636A762E951A.roa
File: 11CCE62AC54111EF8E25636A762E951A.roa (raw, json)
Hash identifier: s+OxbgsCLvGO/iCkVfJvohmG56eufDA2Wx3MpdHQueE=
Subject key identifier: 93:25:5E:C0:75:8D:7E:A5:0A:71:D8:BB:CC:1E:98:B1:9E:92:82:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C7D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11CCE62AC54111EF8E25636A762E951A.roa
Signing time: Sat 28 Dec 2024 17:27:53 +0000
ROA not before: Sat 28 Dec 2024 17:27:50 +0000
ROA not after: Fri 12 Dec 2025 17:27:50 +0000
asID: 984
IP address blocks: 154.206.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76925 (0x12c7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:27:50 2024 GMT
Not After : Dec 12 17:27:50 2025 GMT
Subject: CN=67703519-b58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:98:29:41:c3:de:8e:61:e9:0f:20:a8:34:79:
46:c6:e4:1c:d2:22:7c:e7:b4:40:53:82:d0:46:f4:
ac:df:88:62:ee:77:79:e4:96:3e:48:b7:17:82:73:
55:d7:3f:82:8a:7a:b0:f2:ba:e5:72:54:f8:bd:e1:
89:0e:00:02:d7:a5:81:87:94:7a:a4:8f:a8:44:88:
7e:47:5e:31:e9:be:46:4a:02:cf:b7:9e:6d:43:10:
7c:b3:52:d2:4b:54:c4:ab:ff:60:5a:8f:6f:b7:6b:
15:fe:17:3d:d8:33:90:f3:af:ae:f1:b6:2c:75:7a:
4e:72:f6:9f:89:a9:89:ca:ca:3f:4a:1b:bc:63:b0:
9c:88:da:7b:b8:03:e0:0b:a9:d9:05:1f:6a:99:ac:
25:88:52:8d:44:08:d7:bf:d7:2a:33:0f:a9:2e:30:
44:a7:98:45:0d:58:d3:a1:22:cd:7e:a0:4b:dc:cd:
e1:22:22:3d:e7:38:b8:35:fd:be:25:44:a1:14:32:
03:96:f5:f5:a4:30:a4:7c:a1:14:03:65:cb:9c:a2:
76:ed:cc:b8:32:08:db:b9:f3:78:f4:75:30:0b:65:
4f:67:6d:1c:54:c2:f3:f8:d4:1d:89:0f:fe:47:59:
a1:a5:34:e9:ae:87:df:b4:40:fa:8d:e9:0d:75:d2:
44:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:25:5E:C0:75:8D:7E:A5:0A:71:D8:BB:CC:1E:98:B1:9E:92:82:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11CCE62AC54111EF8E25636A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.246.0/24
Signature Algorithm: sha256WithRSAEncryption
22:3a:9f:91:a6:e3:a3:39:6b:69:f2:6e:46:e8:09:e9:d0:26:
df:27:9c:fd:4d:85:e5:24:cf:e9:7f:a2:f7:98:18:b7:30:60:
14:47:97:97:28:f9:7c:31:67:bb:99:df:5d:61:53:df:d1:cb:
93:48:92:5f:9e:56:88:fd:34:5a:59:dc:f3:f6:98:82:d6:73:
e2:51:12:67:e5:db:dc:af:d1:cd:83:90:bf:6d:91:52:51:aa:
e0:14:3d:e0:1b:1f:64:2a:6d:46:60:b0:47:9f:58:ec:f9:e9:
47:ca:62:67:dd:3c:af:10:72:66:7a:cd:d2:6d:8f:b1:af:2c:
06:c9:08:4c:b5:d3:8e:96:8a:82:ca:69:ce:ef:90:8f:1e:ae:
ec:ca:8c:d0:34:1e:82:11:47:a6:4d:31:8d:f1:f5:42:9a:a0:
6b:f5:4b:62:4c:95:57:3c:3e:b8:59:89:c2:93:4a:2f:f7:3f:
36:dd:19:8f:f3:d7:da:fe:23:03:f2:b9:18:66:3c:77:41:25:
80:1d:e1:43:5e:79:9d:44:67:fb:0b:0f:9d:aa:09:05:d8:1d:
97:06:64:c4:f0:48:39:3f:3b:55:40:d8:65:c7:d4:ed:56:9b:
0a:b9:99:2f:aa:42:6e:3f:5c:c9:8c:70:9f:2e:23:82:bc:02:
00:6b:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:27:24 2025 by rpki-client