Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C60D3DDCC27711EFA8188ABF762E951A.roa
File: C60D3DDCC27711EFA8188ABF762E951A.roa (raw, json)
Hash identifier: dnmduFZoIsM0qk1FMXUnHs4IRp2Q/8jvGmmYZprzhYw=
Subject key identifier: 49:16:A4:09:18:C4:3D:42:85:0C:AD:96:A6:D2:73:2B:BA:A6:34:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0124AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C60D3DDCC27711EFA8188ABF762E951A.roa
Signing time: Wed 25 Dec 2024 04:21:55 +0000
ROA not before: Wed 25 Dec 2024 04:21:52 +0000
ROA not after: Wed 10 Dec 2025 04:21:52 +0000
asID: 984
IP address blocks: 154.211.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74926 (0x124ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 04:21:52 2024 GMT
Not After : Dec 10 04:21:52 2025 GMT
Subject: CN=676b8863-8cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:31:b6:f9:50:56:ee:e4:98:e7:f0:3b:c7:
0d:d8:f5:df:3b:10:92:b5:72:4c:ef:8f:44:f0:0d:
8b:ab:07:0e:37:8f:2e:71:25:37:2e:e7:71:2d:1f:
cb:9f:d4:45:4c:c9:ed:12:f1:52:28:dc:c4:29:28:
53:6c:f9:46:5b:c4:4f:fa:01:83:91:d8:e1:0f:52:
21:a5:10:6e:79:ce:a9:55:aa:29:64:f3:40:bc:00:
a8:da:f9:a9:62:c1:4e:44:ac:b8:96:7a:2b:a5:24:
19:27:fb:b8:97:03:60:d7:e2:0c:ed:c5:83:9a:66:
c2:30:42:81:de:9a:0d:de:b6:75:a0:eb:28:d2:39:
6f:92:c6:88:1b:9a:d0:a0:ee:de:7d:dc:77:0e:a6:
97:ef:3e:2b:d3:c2:ca:7b:e0:a6:aa:6b:30:e3:d0:
16:a3:48:3f:e4:9e:1b:71:cf:ec:25:9d:60:59:b5:
cb:46:20:0b:30:38:05:6e:b8:9a:e0:1d:e7:b9:a8:
62:94:5a:f9:46:97:2c:ef:d1:09:65:c5:e6:62:c5:
cd:28:07:3e:28:78:fd:9e:db:ef:3e:f2:9b:d9:44:
77:e4:76:31:27:ce:e2:3c:ed:3d:1c:fc:94:a5:89:
0e:be:bb:a0:80:d6:cb:72:1e:b4:f3:50:d9:23:8b:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:16:A4:09:18:C4:3D:42:85:0C:AD:96:A6:D2:73:2B:BA:A6:34:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C60D3DDCC27711EFA8188ABF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.244.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:24:3f:75:77:3a:84:a2:72:ab:89:5b:68:01:45:f7:14:48:
cb:50:66:d8:c1:6d:f3:32:67:b0:a9:78:50:17:4d:04:f3:bc:
88:50:ec:91:fc:05:32:fd:5b:2f:21:96:25:77:48:26:1c:4d:
52:3b:20:a8:19:c4:02:e6:92:7d:88:62:00:4c:f9:38:14:46:
2f:ff:ac:c9:57:2c:a3:8f:99:92:10:62:d0:c7:ea:eb:11:78:
c2:90:99:2b:d8:15:f9:d1:f2:1f:d2:11:28:0d:c8:43:41:f0:
00:7c:72:d6:2d:0c:ef:69:ff:9f:74:2f:b1:aa:c5:db:ca:6f:
91:03:59:dc:73:bb:ad:a0:dc:3e:b6:ca:f9:ee:30:4c:97:04:
ec:61:08:60:f5:9e:a5:e7:20:23:63:57:18:6d:7b:d8:03:1c:
8e:68:62:1d:64:0c:61:69:d4:6e:fc:a9:dc:b5:cd:3a:07:90:
32:b0:3b:0b:13:b1:ff:d6:ac:0a:d0:4b:ab:3c:47:f1:8a:7f:
3b:5b:f6:be:60:b6:35:ae:d7:9e:02:38:cb:e1:80:90:e8:a3:
3d:25:45:85:71:af:d2:88:7e:2c:24:45:27:0d:c2:69:9d:06:
2d:c2:98:97:04:52:01:41:e1:67:bc:b1:26:5b:2a:5d:1b:a3:
4a:62:ab:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:46 2025 by rpki-client