Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15916840C63A11EF88294691762E951A.roa
File: 15916840C63A11EF88294691762E951A.roa (raw, json)
Hash identifier: N2SlKO2wCphKixuMkjsMKcrZwtXNH12WshyXqwvirXg=
Subject key identifier: EB:EF:D6:46:4D:B1:0C:7F:83:A7:8E:55:57:72:72:DA:5D:CA:88:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01303D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15916840C63A11EF88294691762E951A.roa
Signing time: Sun 29 Dec 2024 23:10:24 +0000
ROA not before: Sun 29 Dec 2024 23:10:21 +0000
ROA not after: Fri 12 Dec 2025 23:10:21 +0000
asID: 984
IP address blocks: 154.218.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77885 (0x1303d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 23:10:21 2024 GMT
Not After : Dec 12 23:10:21 2025 GMT
Subject: CN=6771d6e0-d914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:82:92:4f:eb:9a:9c:ef:0d:44:f3:03:43:
b5:fe:5c:aa:b8:7d:ec:25:f3:1a:b3:40:df:5a:11:
8c:44:1f:5f:64:f0:5e:df:71:29:62:16:25:7b:cb:
56:09:dc:01:93:51:71:d6:78:5c:f1:2e:52:b4:fe:
c0:80:22:7f:b1:a3:f2:56:e9:d8:bd:5b:7a:53:57:
3d:b4:46:6c:91:1e:71:2b:7f:0c:ef:1a:12:41:c3:
9b:36:aa:fc:45:c2:47:5b:f8:ce:27:8d:1a:aa:8b:
3f:7e:50:8d:57:6b:ba:75:5e:c2:68:5d:fb:36:37:
4c:18:98:34:65:d8:03:0d:7e:c6:6d:a6:2f:d8:91:
37:42:2d:0d:57:24:fd:59:84:bb:4c:60:64:b7:23:
ff:b6:9c:03:3c:4d:7d:e7:29:4c:d2:ca:69:2a:26:
ff:dc:49:00:e6:e3:de:ac:b0:a2:1c:2f:6a:1b:a3:
8a:61:9a:05:c5:d8:97:34:cc:26:24:ae:83:bf:cb:
df:1b:c1:87:27:0b:9f:40:dc:a3:a4:0c:09:94:a0:
e1:96:8f:4f:2c:f1:8b:ca:60:f6:4a:2b:ae:ef:dd:
b1:84:9a:2c:0b:3a:0f:fb:e7:57:ec:1b:ce:0a:b3:
50:83:3f:05:51:d4:8e:b3:77:43:d2:78:ea:28:88:
d2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EF:D6:46:4D:B1:0C:7F:83:A7:8E:55:57:72:72:DA:5D:CA:88:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15916840C63A11EF88294691762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1f:9e:56:ee:27:79:48:af:d0:0c:d5:97:26:2d:2e:a5:b0:
63:92:00:fa:3a:06:44:f7:1b:be:4c:e8:36:bf:9d:9a:e5:f8:
5e:3d:e1:eb:06:23:bf:65:db:02:be:6a:4e:be:ea:4f:79:82:
23:d3:db:32:d9:ab:31:99:dd:60:df:e3:ea:e0:ee:40:33:c4:
75:bb:80:81:af:f1:6b:3e:64:05:41:47:75:9e:fe:48:10:9c:
13:da:bd:30:a9:d9:fe:ec:1e:a8:00:93:32:bf:2d:f6:d6:50:
4c:1d:a0:9f:17:b7:7f:62:75:43:63:82:12:9f:2a:4d:fd:e5:
ab:e5:d9:cd:41:ab:d6:5d:c2:2e:8f:2d:47:97:9b:d3:21:16:
29:d5:cf:70:b2:70:6d:ab:8a:05:21:1f:2a:cb:cb:29:f3:6b:
77:e2:ea:cb:5d:08:36:44:e4:2e:a9:db:6c:42:a7:09:50:e2:
ee:94:ae:9c:a5:6b:10:8a:ed:6a:6f:1c:46:83:7e:36:03:e4:
19:c7:e7:cb:cb:4d:d0:68:f5:2e:e6:07:50:24:45:35:dd:53:
6e:9e:7d:cf:57:21:3e:e0:aa:c7:6b:94:7d:80:91:5e:57:71:
01:56:11:b4:78:02:30:2d:78:de:a7:44:e0:1f:80:f9:45:5b:
4e:3e:5c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:59:02 2025 by rpki-client