Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/668D858CC27311EF91F279A4762E951A.roa
File: 668D858CC27311EF91F279A4762E951A.roa (raw, json)
Hash identifier: XtE4OHAojOrcWz3PO+X4gXaseJ/TaEdxih2hZKmdwTU=
Subject key identifier: CB:DA:12:61:84:24:C3:25:7D:01:4D:AC:6C:03:4B:2A:36:F2:9C:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01247E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/668D858CC27311EF91F279A4762E951A.roa
Signing time: Wed 25 Dec 2024 03:50:37 +0000
ROA not before: Wed 25 Dec 2024 03:50:33 +0000
ROA not after: Wed 10 Dec 2025 03:50:33 +0000
asID: 984
IP address blocks: 154.211.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74878 (0x1247e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:50:33 2024 GMT
Not After : Dec 10 03:50:33 2025 GMT
Subject: CN=676b810d-853e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:24:a5:cb:61:d8:9d:ab:07:4b:2e:4f:9c:
3c:f2:9f:4c:d7:33:46:db:9c:47:64:a4:4c:73:3e:
8e:29:9d:f1:08:21:23:00:30:55:9f:5b:d5:36:1b:
96:52:83:29:18:c9:de:f9:90:68:18:19:0b:f0:3e:
0b:bd:37:2a:90:55:23:90:71:14:93:64:17:e0:f4:
17:e8:20:26:3d:c6:65:3f:93:08:ac:a8:b4:86:90:
d9:26:75:e9:c7:ec:18:9d:98:2e:6d:16:09:35:dd:
52:1c:e3:84:46:14:f8:5d:66:e4:96:b9:6a:9f:74:
55:21:21:eb:9f:9c:28:17:1d:3a:f5:ba:0b:22:ef:
ed:91:cc:08:d5:4b:2a:6f:fa:d8:90:e6:68:f3:c0:
32:2b:ef:3b:6c:f9:1f:01:ca:26:16:50:ed:0e:c8:
9a:0c:8d:c1:0b:72:b7:a3:1f:3a:f2:28:3a:e2:9c:
30:f5:a4:a8:56:e4:6b:a7:dc:59:69:ac:ab:ba:79:
27:eb:2a:a6:65:54:a3:7c:28:ad:5f:5d:26:68:40:
bc:ba:13:24:f4:1f:f8:e5:81:75:38:9e:82:3d:81:
42:37:4b:b0:da:c0:e0:d5:25:5c:d5:f9:5c:92:33:
9b:0a:ca:b0:13:db:79:de:92:12:1c:af:4b:92:de:
6e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DA:12:61:84:24:C3:25:7D:01:4D:AC:6C:03:4B:2A:36:F2:9C:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/668D858CC27311EF91F279A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:cd:bd:ee:1e:fd:dd:03:c2:60:42:eb:bc:9b:e7:ee:f4:47:
33:ab:61:50:24:52:40:0d:0a:0b:6b:66:03:2b:3a:a7:9e:aa:
f0:34:54:77:66:4f:08:2f:6f:85:2f:66:bc:a1:76:f3:97:6a:
94:88:1b:61:46:f6:91:80:31:ba:98:71:bb:9a:ec:f5:08:1f:
89:db:1c:a2:8b:4c:46:62:17:24:09:d4:01:a4:b7:95:e6:16:
db:2f:a5:26:e9:2a:10:2d:f9:c6:3a:c2:92:2b:ff:1a:e2:cd:
d2:e7:f7:b2:b9:33:a5:83:39:66:f7:b5:40:c7:61:bc:34:68:
18:8d:63:74:39:fc:3c:2c:de:2b:66:9a:9b:b0:02:11:cc:1b:
26:99:46:8c:22:01:78:b8:4a:42:99:08:02:34:13:33:17:81:
9e:74:b6:a5:b2:7c:03:e0:ff:a6:d3:04:8e:c5:27:14:3d:40:
85:4f:fd:fa:48:f9:11:58:c9:94:5b:f9:ff:6c:4d:a1:e1:bc:
08:8a:35:61:ea:77:23:69:d3:27:de:7d:92:cc:e6:d0:81:39:
dd:a9:68:73:36:05:20:5e:22:20:04:b2:c2:d3:f4:21:05:b0:
1e:07:83:42:ab:e8:59:ee:ae:df:0d:a2:77:54:bf:c7:f0:6f:
1c:4c:ae:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:06 2025 by rpki-client