Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68D56A04C26811EF81AECE58762E951A.roa
File: 68D56A04C26811EF81AECE58762E951A.roa (raw, json)
Hash identifier: PhkjXsvFxu5sBB0ocnMY+2YNk10Qzqd6qHyitlfTHOE=
Subject key identifier: FB:6C:1E:4D:AC:74:9C:37:4F:7E:A1:2B:86:53:6B:DB:F5:66:2A:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012404
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68D56A04C26811EF81AECE58762E951A.roa
Signing time: Wed 25 Dec 2024 02:31:56 +0000
ROA not before: Wed 25 Dec 2024 02:31:53 +0000
ROA not after: Wed 10 Dec 2025 02:31:53 +0000
asID: 984
IP address blocks: 154.211.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74756 (0x12404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:31:53 2024 GMT
Not After : Dec 10 02:31:53 2025 GMT
Subject: CN=676b6e9c-6cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8c:2e:2d:fd:ea:8d:c0:59:95:e3:83:e2:92:
20:b1:e4:4a:0d:59:45:df:05:ea:46:6b:35:ce:26:
06:1f:4e:ea:ec:9a:92:da:c3:d1:7d:9e:e4:9f:f5:
62:ae:ed:57:16:de:8b:b4:9f:c2:c6:49:d1:89:87:
03:b5:88:56:2b:e0:0d:19:2e:8c:e1:c1:a8:d1:6b:
d6:46:df:ab:f9:77:bd:63:2f:b8:c2:35:22:f6:5a:
3b:51:85:e5:75:59:47:2c:66:50:4b:4b:83:71:62:
7c:35:62:58:d1:9b:26:a2:e3:5a:8b:d3:b9:87:01:
e3:27:59:e7:5c:e0:73:38:28:16:26:72:95:28:b4:
7d:56:f3:44:20:7b:ef:74:40:aa:f0:65:55:8a:59:
30:7e:ee:52:fb:5a:ad:29:fd:da:bb:39:47:63:90:
2e:00:3c:6c:79:d3:3f:ad:b1:ef:8a:58:a9:50:69:
a6:f2:9c:74:fc:eb:27:a8:b1:43:77:42:a4:ff:86:
b0:dd:40:c2:99:2a:94:ff:64:c1:7b:8c:2a:9b:0f:
75:1a:bc:0f:e2:73:04:25:e7:3c:a9:f5:1a:9f:68:
26:21:4b:db:b4:e7:ec:b0:13:a3:c0:77:b3:d3:25:
c8:d9:e0:ca:f0:3a:fa:af:00:98:40:f7:4f:8d:b8:
fd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6C:1E:4D:AC:74:9C:37:4F:7E:A1:2B:86:53:6B:DB:F5:66:2A:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68D56A04C26811EF81AECE58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.137.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ce:c4:c2:74:85:83:a3:c8:dd:50:19:e3:d7:4f:e5:43:7c:
a2:23:de:01:a0:7e:00:35:c8:cf:c7:01:9b:66:2f:e9:24:49:
58:5f:b7:dc:d0:8e:45:14:48:47:fc:a1:c5:ae:81:b3:03:c9:
4d:69:6f:e2:02:09:9d:89:3c:30:b3:dd:43:7c:a3:d2:27:88:
da:0b:27:d8:88:b5:aa:fa:39:64:4d:eb:87:21:1d:82:6c:f0:
3a:ae:4b:81:06:a1:02:a3:5a:61:cd:b6:0d:50:f6:09:37:7c:
58:af:d6:5d:74:e2:ed:74:af:c1:c6:dd:f2:fb:cc:4f:03:3b:
6c:ad:b7:e2:8a:a6:f6:b8:1d:b9:8f:de:1c:8e:80:55:08:46:
25:23:fb:67:c7:4f:8e:13:91:91:f7:fe:52:b5:0b:78:37:14:
b0:b3:f8:73:95:ef:42:b0:ba:5f:92:b2:48:9d:2e:9e:76:ee:
dd:c4:85:e8:b1:0f:69:fb:ff:ed:48:fa:e7:86:e7:11:fe:9d:
3e:c5:ea:bd:d1:21:53:00:d9:8b:07:b5:61:34:4b:b3:65:e5:
31:60:ae:bd:22:a6:59:2f:f9:3d:12:71:e2:7f:83:2b:fe:19:
94:6b:72:80:d4:c5:06:21:54:89:4a:40:70:10:ae:4c:5d:cb:
65:ce:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:27:37 2025 by rpki-client