Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60628534C0C711EF98537567762E951A.roa
File: 60628534C0C711EF98537567762E951A.roa (raw, json)
Hash identifier: CXr3I8CWkO5jndSMeP9kTFYsaqbgYSWgBe047eJ7Qlo=
Subject key identifier: A2:6C:A7:08:7D:BA:5D:0D:D6:A6:A6:EC:C6:F0:7B:34:AF:C1:F7:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60628534C0C711EF98537567762E951A.roa
Signing time: Mon 23 Dec 2024 00:46:42 +0000
ROA not before: Mon 23 Dec 2024 00:00:38 +0000
ROA not after: Wed 10 Dec 2025 00:00:38 +0000
asID: 984
IP address blocks: 154.82.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73158 (0x11dc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 00:00:38 2024 GMT
Not After : Dec 10 00:00:38 2025 GMT
Subject: CN=6768b2f2-a44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f5:d9:22:6e:95:fc:8e:0f:ac:70:7b:52:1c:
20:d4:6e:bf:e3:cd:da:07:35:f5:1b:70:11:0f:15:
ed:c5:38:a0:74:e1:8c:8d:a3:4f:61:47:82:88:ae:
bb:ef:38:17:01:ba:26:28:26:45:4d:2b:ac:c0:d3:
84:26:d9:9c:d5:4d:78:b4:d6:22:ea:4c:6b:e1:c6:
64:34:71:d1:06:9b:19:d7:24:9e:d8:13:c2:96:02:
52:bd:1d:e2:15:36:cd:32:59:6d:44:71:bf:9b:cd:
47:a5:e6:88:57:b3:d1:5c:b3:36:85:ab:23:6a:ca:
6c:82:33:9b:c1:e4:5d:e4:18:3e:31:83:80:15:85:
95:44:ce:38:0c:73:1e:d1:17:ca:2a:3d:db:87:e6:
d2:92:06:25:4a:22:31:1d:83:8a:03:2e:41:6b:16:
40:a5:e1:18:b4:57:62:a1:60:9c:d4:ae:94:4d:67:
a4:76:0d:f9:42:8d:cb:86:6c:d9:c3:99:76:7d:da:
c5:f3:1d:3d:3a:e2:97:ab:3e:21:56:8c:23:1d:42:
9a:76:03:b9:5e:07:aa:c3:42:a6:2d:71:17:2d:6d:
2c:d2:af:6b:f0:b5:8d:1d:48:61:ad:72:34:45:f0:
8d:f8:32:07:9c:b1:bc:72:c8:dd:79:c0:0d:e8:8a:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6C:A7:08:7D:BA:5D:0D:D6:A6:A6:EC:C6:F0:7B:34:AF:C1:F7:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60628534C0C711EF98537567762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.214.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:57:7e:d4:a2:04:4d:90:95:8f:bc:0d:a6:84:f1:aa:d4:5e:
69:48:e1:3f:4a:f2:f8:c2:bf:21:38:c9:23:00:dd:b6:bd:f4:
c8:b6:8a:c6:45:63:1f:c9:80:41:00:6a:2e:9d:f1:02:97:7d:
12:01:57:d1:8d:ab:39:88:20:9f:55:cd:84:15:b3:98:ee:e2:
08:ce:a3:a4:28:63:b1:fc:7f:7c:64:06:ec:aa:2b:96:4e:84:
72:58:e9:2c:e1:ae:2d:43:ce:da:c7:85:15:49:91:d7:77:8c:
7a:47:86:5c:b1:e6:30:3a:53:9d:7a:ff:24:e1:67:c7:41:de:
d2:70:39:9e:36:27:12:41:a5:70:b6:d7:29:3b:cb:7d:4d:06:
c5:39:41:f9:e0:81:3c:0c:b9:50:47:62:24:39:d8:ad:72:be:
f3:03:7a:4d:92:d0:2f:02:66:6d:6a:a0:82:f8:80:c0:54:83:
9a:c0:53:5d:7a:10:a8:97:f3:77:f6:92:7a:f3:c3:31:ba:6c:
28:00:40:10:ba:b5:75:ed:35:3b:ad:86:15:cb:5a:3f:e1:40:
c6:cb:99:63:f5:0f:06:7f:10:41:3d:87:88:fd:13:33:61:e9:
66:39:c5:a2:66:dc:1e:84:b2:20:5a:4b:32:86:19:2d:b7:85:
ad:71:32:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:43 2025 by rpki-client