Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EA11EBAC27911EF977BE14D762E951A.roa
File: 9EA11EBAC27911EF977BE14D762E951A.roa (raw, json)
Hash identifier: qFO6p1YryhHTpJ9AuC3uV4roA6nYuKsZZJvmXsl70GA=
Subject key identifier: 4E:F3:68:60:FC:0C:7C:80:A9:36:C0:CD:EC:E6:6A:B6:AB:91:CD:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0124C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EA11EBAC27911EF977BE14D762E951A.roa
Signing time: Wed 25 Dec 2024 04:35:08 +0000
ROA not before: Wed 25 Dec 2024 04:35:04 +0000
ROA not after: Wed 10 Dec 2025 04:35:04 +0000
asID: 984
IP address blocks: 154.211.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74946 (0x124c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 04:35:04 2024 GMT
Not After : Dec 10 04:35:04 2025 GMT
Subject: CN=676b8b7c-a650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:e2:d5:25:1f:6f:2d:3a:98:27:09:c0:9d:
8a:98:ce:7b:8c:6e:5e:b3:86:4d:e5:e5:1c:17:a6:
a2:c7:33:71:31:16:c2:10:73:7b:95:76:1f:1e:ca:
e0:dd:ab:38:41:23:1a:61:cd:6a:41:87:25:eb:a1:
cf:7e:51:74:d8:54:e7:01:6c:a6:cd:f1:b2:ce:58:
77:69:aa:d8:1e:7b:92:fa:75:2c:43:d3:35:35:28:
d3:da:aa:99:ec:e8:6d:f8:dc:3a:a5:97:11:f1:08:
79:de:82:b2:85:2c:5b:64:0d:44:0e:02:9a:51:46:
6d:d5:6c:f1:4e:bf:66:df:06:d2:cc:57:44:76:46:
75:62:48:3b:09:f2:93:75:b7:93:f0:01:1e:ed:48:
64:88:36:e6:c5:dd:d2:82:61:8c:5f:10:74:a2:45:
61:88:3b:6e:74:07:a2:6d:26:1d:12:9f:a3:28:2c:
1b:d3:a2:53:f5:b2:15:e1:3b:49:3a:50:24:43:4b:
97:9b:e1:c4:21:69:8b:72:8a:0b:9a:aa:94:06:77:
74:98:00:92:84:a5:2b:f9:cd:ba:2c:4d:d1:bd:82:
50:26:d2:a0:8d:29:03:7f:1f:04:51:3f:2e:65:63:
94:78:45:19:bb:dc:70:49:fb:dd:9a:29:69:0f:8b:
1f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F3:68:60:FC:0C:7C:80:A9:36:C0:CD:EC:E6:6A:B6:AB:91:CD:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EA11EBAC27911EF977BE14D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.254.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:07:77:e8:d5:fb:22:fb:aa:b1:56:89:d5:51:57:e1:77:a1:
19:0e:f5:65:1b:f8:67:68:e7:80:00:ab:9d:a5:14:45:43:22:
2f:0c:1c:bf:5b:4c:da:bf:f9:2b:fd:90:40:79:92:37:94:e5:
94:f8:f4:e0:9a:d0:1f:8f:4c:0c:4a:2d:a8:7c:61:06:1a:a8:
f4:3f:57:0e:d5:98:38:76:f6:6f:ae:4a:fa:50:ae:eb:a5:c1:
bb:de:97:0f:24:dc:48:1c:af:b9:8a:64:3e:47:14:98:e7:32:
fd:10:2f:6e:5d:af:be:ce:93:40:27:31:53:fd:51:55:4d:0e:
1f:fc:16:88:79:e0:6d:d6:3d:68:27:2e:72:18:ec:c3:7e:1b:
89:7f:d1:5e:17:13:68:a2:32:2d:70:93:83:c3:5c:55:5b:49:
68:83:94:ce:9f:2e:64:08:c2:cf:44:8f:ec:d6:ef:72:76:7a:
54:bb:ae:7b:63:78:a9:79:7c:38:88:fb:f4:d8:ff:26:59:af:
d4:e6:de:fc:07:8e:26:43:38:7b:36:dc:a3:7e:19:a2:5d:82:
1d:ea:e8:36:23:a3:8f:18:a2:35:a9:4e:41:cc:6b:73:5f:ea:
5a:06:bd:e8:09:d5:28:1f:19:3e:9e:ca:44:1e:21:26:33:8b:
94:74:42:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:07 2025 by rpki-client