Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66AEE66AC27711EF8D8133BD762E951A.roa
File: 66AEE66AC27711EF8D8133BD762E951A.roa (raw, json)
Hash identifier: hzX+Eg+icm3g8QUCtAh1bTC0HXK7A6EGvS9z9ybMRWc=
Subject key identifier: 49:CC:67:B3:FC:C6:29:F4:72:13:E5:6E:EF:74:01:6E:37:38:89:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0124AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66AEE66AC27711EF8D8133BD762E951A.roa
Signing time: Wed 25 Dec 2024 04:19:15 +0000
ROA not before: Wed 25 Dec 2024 04:19:12 +0000
ROA not after: Wed 10 Dec 2025 04:19:12 +0000
asID: 984
IP address blocks: 154.211.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74922 (0x124aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 04:19:12 2024 GMT
Not After : Dec 10 04:19:12 2025 GMT
Subject: CN=676b87c3-9bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:56:80:99:40:e4:a9:3a:1b:b8:24:af:9e:
10:f0:d4:2e:a2:73:9d:6a:52:26:1e:bb:f2:01:bc:
32:50:1f:0f:94:8c:8d:30:99:87:e6:79:5d:ad:f2:
f4:46:79:8e:6e:6f:64:cd:26:6c:94:37:43:da:51:
bb:a1:65:c0:71:50:d7:f0:a5:a6:e9:c6:97:bd:13:
fd:62:8a:c5:b6:0d:7d:d5:1e:08:0c:25:72:c6:79:
53:2a:d1:6f:41:92:8d:0f:64:9d:e8:85:5b:2e:f2:
b2:55:e4:79:7a:25:df:72:22:82:5d:54:63:a0:23:
e7:d0:71:e9:c7:71:70:46:7b:d4:8e:16:23:87:46:
43:1f:c1:2b:30:fa:a5:7d:fd:ef:c9:d8:5e:38:9c:
8c:02:8a:69:fd:7a:82:04:b6:59:61:02:76:db:e2:
55:c5:94:1d:9f:46:4c:a8:ad:9f:70:4e:8d:d4:72:
e5:16:21:4f:21:a5:10:9a:66:0a:21:24:56:1f:a9:
0f:1a:67:74:af:7e:99:79:f6:2e:d5:03:82:0d:1c:
4f:64:60:9c:62:90:9b:7a:bd:f2:95:86:4b:6a:29:
2c:1b:5f:b8:29:41:61:87:4b:e3:28:4b:d0:01:23:
61:84:58:e5:2a:3b:ce:0e:24:80:eb:ae:35:86:a6:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CC:67:B3:FC:C6:29:F4:72:13:E5:6E:EF:74:01:6E:37:38:89:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66AEE66AC27711EF8D8133BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.242.0/24
Signature Algorithm: sha256WithRSAEncryption
36:65:7d:d5:de:04:7f:df:09:4c:1e:b2:f7:d0:05:fa:ab:d9:
41:b9:2b:d8:67:5f:f7:1b:28:e4:90:58:63:3a:5f:7d:53:d8:
4f:71:50:9c:a0:3b:ed:c6:c2:f0:23:fd:24:5d:c0:8d:bd:75:
9c:74:e9:87:22:a5:44:32:1f:dc:79:b3:0a:64:11:76:53:c0:
07:25:a5:89:9d:41:b1:cd:cf:97:6a:62:d7:62:4d:85:c3:17:
5c:ef:90:46:9c:5a:0f:b7:b9:1e:17:e5:10:18:a6:42:ec:72:
f8:d4:b3:8e:58:42:5f:36:0f:29:9a:c6:9f:ef:02:b7:59:78:
72:2d:fa:a3:37:9c:17:bb:34:f6:df:67:63:94:c7:2a:7e:14:
37:28:86:d3:2e:01:7b:90:fb:43:92:a4:e9:ea:2f:dc:33:6e:
37:f9:70:d0:f9:7d:de:f0:f2:ba:27:13:5e:37:0f:9d:15:2f:
e3:aa:52:4d:86:10:81:e9:ea:45:30:ff:e8:a2:bf:09:89:cc:
13:90:02:6e:dc:27:c4:5c:0e:f1:d1:6e:20:43:9f:f6:78:80:
7f:11:1d:23:6b:09:7b:00:3e:82:df:de:6c:73:5e:05:45:72:
9e:ff:18:70:f4:a4:b3:d7:39:33:a7:ed:80:74:a2:7f:61:34:
af:01:0b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 02:21:13 2025 by rpki-client