Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/966086D4C27711EF88EF34BF762E951A.roa
File: 966086D4C27711EF88EF34BF762E951A.roa (raw, json)
Hash identifier: 4KDeJ1u7my3Qnas2N8XGJz2gui8okIpoE8Ek6BT0woY=
Subject key identifier: 37:B7:88:95:0C:15:53:47:54:15:3B:3D:A1:66:29:E0:07:84:98:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0124AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/966086D4C27711EF88EF34BF762E951A.roa
Signing time: Wed 25 Dec 2024 04:20:35 +0000
ROA not before: Wed 25 Dec 2024 04:20:32 +0000
ROA not after: Wed 10 Dec 2025 04:20:32 +0000
asID: 984
IP address blocks: 154.211.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74924 (0x124ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 04:20:32 2024 GMT
Not After : Dec 10 04:20:32 2025 GMT
Subject: CN=676b8813-d925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:36:57:6e:7e:f1:f6:d9:54:fe:0c:2a:1b:
b1:91:a6:ed:5d:e7:e5:c7:0f:45:83:ec:a2:ef:8e:
20:98:b7:06:ef:41:0a:63:df:ab:87:ca:62:4b:b4:
50:aa:33:eb:a7:91:a0:8d:99:db:c6:b8:0e:a6:83:
0d:82:fb:16:e3:bf:b6:d5:f6:44:eb:85:47:f9:46:
ff:86:e8:08:7e:49:9c:17:1b:45:61:b9:90:aa:95:
7b:4b:3a:10:33:2b:f1:e1:17:c5:5b:b4:44:5d:a5:
dc:9f:fc:fd:8f:a3:78:5a:b4:01:c2:fb:41:59:18:
e2:ce:4f:d9:2c:42:f1:37:a8:da:a8:d4:d9:3f:57:
40:df:0f:c1:c0:75:de:22:ca:de:bf:3f:e2:78:e4:
44:ca:58:9a:98:63:d8:09:e3:9f:3b:ed:a9:07:9e:
f4:07:24:5a:6c:ab:5b:d5:a4:87:e1:d8:46:44:e6:
00:9a:96:a5:af:d8:fc:8d:39:6d:cb:b2:fe:b5:29:
07:a0:7e:5c:57:fa:6f:3e:93:d6:3b:87:ce:83:27:
e2:65:ea:2c:05:61:2f:bc:f3:cd:dc:c8:67:3a:6b:
c4:1d:44:88:4a:53:7f:00:c2:f4:a5:09:6d:4e:ac:
57:e3:0a:f7:c9:25:8b:f4:16:75:d8:4e:f7:c8:b0:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B7:88:95:0C:15:53:47:54:15:3B:3D:A1:66:29:E0:07:84:98:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/966086D4C27711EF88EF34BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.243.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9a:0b:27:e7:60:e2:e1:c8:7b:35:9e:dd:5c:f8:6a:ea:76:
ba:fe:e5:a5:29:91:86:d5:32:48:98:f9:e4:d2:11:a7:1f:d7:
7e:e1:cd:61:53:90:d4:d2:63:34:57:d8:0d:dd:9b:06:97:ce:
12:9d:8c:d0:39:b5:69:8e:3a:b3:50:7a:7d:aa:11:25:86:f6:
9c:d7:41:a6:b9:be:2c:e7:6e:18:6a:42:c9:25:13:b2:b5:13:
50:4f:da:99:bc:c8:04:3a:fc:c6:24:b4:4f:33:1f:ad:80:b3:
dd:04:54:89:05:9f:e9:01:53:05:cf:c4:27:7d:b8:b5:74:17:
0a:9d:fb:eb:6c:8d:16:c4:07:62:e8:88:32:9c:c7:89:ac:cf:
8b:5e:f9:2d:cd:bc:96:c5:e2:be:15:5c:81:dc:2a:c5:58:90:
e6:24:f9:42:23:0e:3e:d9:44:2e:35:d1:f3:5f:a3:4b:47:dc:
46:f2:0d:41:06:ba:f7:12:5d:d1:b0:e4:2b:d3:61:a3:1d:24:
4e:a8:36:38:6e:12:ad:0f:95:d0:20:ff:09:25:7e:89:d3:5a:
40:f0:11:13:a0:6a:51:6d:60:8e:25:4b:d0:cb:96:9f:e8:53:
2b:72:17:8a:42:7a:9f:3e:1a:92:b1:2a:3b:21:9f:e5:47:91:
28:08:f7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:07 2025 by rpki-client