Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/969A3582BEB211EF82BC2E61762E951A.roa
File: 969A3582BEB211EF82BC2E61762E951A.roa (raw, json)
Hash identifier: /UjWA4ukFwgIkLV67SRj30majf3zhmh1uULgzeM1bHo=
Subject key identifier: 98:D5:CA:61:D7:53:19:E2:62:38:2A:44:05:3A:FD:15:09:DE:43:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/969A3582BEB211EF82BC2E61762E951A.roa
Signing time: Fri 20 Dec 2024 09:12:51 +0000
ROA not before: Fri 20 Dec 2024 09:12:48 +0000
ROA not after: Wed 25 Jun 2025 09:12:48 +0000
asID: 201411
IP address blocks: 154.84.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72866 (0x11ca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 09:12:48 2024 GMT
Not After : Jun 25 09:12:48 2025 GMT
Subject: CN=67653513-81a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:f9:e0:8e:ce:c0:92:e9:e8:b5:46:53:38:
1d:c7:ba:4c:88:fe:dc:ce:1a:32:51:74:1b:77:a7:
6e:26:e9:99:d7:ac:39:2c:45:8a:a2:00:86:88:38:
9f:27:e3:22:31:ed:85:f9:0c:75:bf:ab:29:5f:ed:
87:f9:b3:36:4e:c6:5a:ab:b1:e6:2e:d7:22:0d:6b:
9e:f2:d7:d5:a1:5e:77:4c:2f:f2:6b:92:5d:38:82:
13:e9:c6:7c:9b:9d:3a:2c:d4:59:0e:28:38:53:47:
d6:84:4b:5d:32:17:3a:f9:a5:4f:26:6e:26:e1:a5:
d4:f5:82:87:35:c5:9a:f5:9d:a9:45:a2:e7:d8:f2:
b7:74:a6:95:80:b3:aa:8a:0c:72:94:e6:63:ae:f2:
1e:d8:1c:94:4a:72:b0:bc:78:24:c7:82:4b:ae:d9:
8f:4f:f3:59:e9:e1:40:00:cf:0c:20:38:e7:a1:da:
df:a2:25:0c:d8:bb:43:51:da:a6:d0:77:ea:d1:3c:
51:d0:76:7c:5e:0a:34:d9:71:37:c0:c6:69:de:e5:
2c:6b:be:a7:2f:59:d9:1f:d7:8d:33:cc:9e:1e:c1:
b7:46:60:30:3c:73:78:b9:48:fe:7a:2f:79:28:66:
c3:a4:17:b2:24:ba:5b:83:69:b6:7b:b3:d6:d3:05:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D5:CA:61:D7:53:19:E2:62:38:2A:44:05:3A:FD:15:09:DE:43:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/969A3582BEB211EF82BC2E61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.156.0/24
Signature Algorithm: sha256WithRSAEncryption
13:65:f0:68:c4:e8:aa:d8:49:df:e5:a0:8e:39:3a:96:b7:53:
e0:2b:f6:61:04:a5:db:69:3f:93:8e:c8:30:74:cf:0d:99:f5:
d8:8b:bb:82:a6:db:46:2e:5e:1f:92:26:ce:29:5e:a7:ea:a0:
cd:af:a9:0a:ab:ab:50:c8:0e:01:02:ee:4a:0c:19:a5:b6:9a:
7d:af:e7:85:f6:b6:b6:6c:f9:ea:bf:aa:51:5b:bf:29:ac:e5:
b5:19:af:df:0c:0d:29:27:66:5b:5c:b4:96:06:80:bb:20:74:
dc:e8:9e:9e:a5:a9:4c:54:51:f0:34:24:0f:ec:44:ea:15:0f:
28:7c:5f:d5:30:96:01:ae:b0:4f:9b:49:91:b5:0d:07:d1:ed:
ab:e9:7a:26:bc:bb:fe:24:92:2f:ee:b1:2a:8d:0d:09:91:52:
ad:3f:cf:e8:fb:99:3c:ca:82:c2:92:d7:53:75:1e:b7:9c:41:
b4:c7:97:e9:b0:c2:6e:75:d1:5d:85:95:49:be:28:60:27:11:
53:c1:ae:46:58:ae:70:43:42:44:93:85:dc:26:47:b3:72:a6:
00:9f:06:28:ee:b3:16:47:6a:83:a3:ea:e3:14:44:be:94:36:
3c:d8:e8:00:49:bc:f4:f0:65:f3:a4:58:34:9f:2f:14:64:a2:
cf:5e:d0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:03:35 2025 by rpki-client