Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF73630EC5F211EFB5EF6154762E951A.roa
File: DF73630EC5F211EFB5EF6154762E951A.roa (raw, json)
Hash identifier: YT9zfhpHxKcgTGYFdean7bShShXdDu/zGGkhRmXUo28=
Subject key identifier: 2B:80:F6:D8:BB:AA:74:67:25:40:C3:AF:B0:59:6E:8A:86:D9:EF:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF73630EC5F211EFB5EF6154762E951A.roa
Signing time: Sun 29 Dec 2024 14:40:39 +0000
ROA not before: Sun 29 Dec 2024 14:40:36 +0000
ROA not after: Fri 12 Dec 2025 14:40:36 +0000
asID: 984
IP address blocks: 154.211.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77286 (0x12de6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:40:36 2024 GMT
Not After : Dec 12 14:40:36 2025 GMT
Subject: CN=67715f67-7de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:e3:af:96:85:f0:17:78:09:0e:95:34:63:
8a:f8:6b:cd:c5:57:fc:0d:3d:f5:15:e8:5a:a9:d4:
87:31:31:ae:2c:95:5b:ca:13:23:0a:69:1a:a9:de:
45:eb:4d:31:88:33:83:15:86:dc:86:35:78:ba:1c:
f7:31:0b:c2:57:e4:61:77:80:48:4d:02:0b:3a:7d:
80:a2:3d:a1:3c:a8:65:a1:77:3a:1f:33:c1:66:a4:
1f:75:26:a4:43:92:1e:d1:14:2d:61:6d:80:60:23:
19:53:8e:cf:74:f1:f9:ae:e8:b3:c1:77:9d:22:41:
e7:bb:23:5e:23:29:77:6f:ee:45:69:a3:e0:5b:04:
8c:a6:3f:29:7a:11:4d:4a:f2:bf:52:dc:c6:a4:3b:
ae:27:ee:4e:80:94:17:4b:72:5b:5e:c5:84:18:4a:
77:22:26:f0:3d:e9:2d:c4:12:b2:eb:98:bf:9a:9e:
39:10:b9:ae:da:9e:3b:ec:65:47:b7:4a:df:e5:75:
96:cd:11:95:66:03:95:e2:1f:fd:16:bf:67:3e:99:
6b:2f:30:1b:48:dd:0d:d3:8e:10:79:a6:6d:66:36:
d0:62:fe:45:ef:e5:f4:bb:84:cd:2c:13:11:33:59:
11:1d:bd:7e:46:ca:ec:dd:36:36:27:0d:e7:2e:ee:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:80:F6:D8:BB:AA:74:67:25:40:C3:AF:B0:59:6E:8A:86:D9:EF:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF73630EC5F211EFB5EF6154762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ce:64:b6:4f:aa:f7:5d:1a:89:53:8f:25:2e:56:7d:61:ba:
bb:60:2d:9e:d9:19:e2:90:95:fe:8c:12:7f:67:2b:5e:ee:f0:
05:21:f5:4d:42:98:e5:cd:6f:17:10:b2:38:90:7b:29:0e:e8:
14:8a:ab:cf:3d:65:7d:c1:66:65:20:a3:09:05:6e:1f:84:26:
55:af:39:ff:95:77:d5:57:f6:fe:aa:88:d5:d6:15:9f:5b:0f:
21:fd:d5:0e:a9:1b:29:9b:71:f7:a2:e6:8d:21:8a:66:50:33:
d0:e6:bc:f6:e4:9f:6f:c7:b5:65:58:b6:25:2c:09:31:4b:4e:
e7:a6:e5:7f:7d:17:56:44:c6:c0:b5:70:c3:e3:27:95:53:59:
86:8f:77:7f:2c:dd:73:4f:b8:ef:d0:76:30:cb:d9:12:c6:af:
16:62:0a:7d:90:25:32:0d:c9:8f:e4:53:d6:05:7d:91:52:6c:
ae:39:82:21:46:b6:78:fb:36:a3:09:91:b0:69:22:f8:e6:c3:
55:1e:2b:f5:88:b3:5f:60:59:66:52:b7:b0:f9:75:c8:b5:f5:
0d:5e:20:ca:97:5c:ef:33:02:31:bd:fd:ff:98:c2:52:a1:7b:
3b:06:0c:23:f4:f1:50:b4:92:31:a9:83:36:34:59:b1:ea:6f:
11:d1:16:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:57 2025 by rpki-client