Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B32A20CC3E011EFB1D86FA2762E951A.roa
File: 1B32A20CC3E011EFB1D86FA2762E951A.roa (raw, json)
Hash identifier: VhVKQmvNs0NeFsE52YXEV4zPqv6pkfj59CkQl20NoSg=
Subject key identifier: 1A:5F:C8:9F:9C:0E:0A:C2:15:32:CE:C7:79:76:CA:80:E6:A1:4F:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B32A20CC3E011EFB1D86FA2762E951A.roa
Signing time: Thu 26 Dec 2024 23:21:17 +0000
ROA not before: Thu 26 Dec 2024 23:21:13 +0000
ROA not after: Sun 12 Dec 2027 23:21:13 +0000
asID: 17561
IP address blocks: 154.86.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75992 (0x128d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 23:21:13 2024 GMT
Not After : Dec 12 23:21:13 2027 GMT
Subject: CN=676de4ed-bc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:de:2f:aa:e5:bd:d3:a5:07:9a:76:e6:45:
39:8c:55:7e:b4:46:52:55:a7:ca:42:fd:87:9f:7b:
ae:8b:f7:be:51:48:e0:b6:5d:61:01:2e:14:2b:72:
ba:66:4c:d9:23:82:ef:b4:59:0a:15:3c:0d:bc:6f:
7f:06:0e:73:1d:f9:0c:f2:e6:47:69:90:b5:b0:80:
f9:3d:1b:58:3d:6f:74:1d:d6:6e:a8:49:ab:48:f1:
1f:25:a1:8c:dc:59:3a:65:da:98:41:c3:6d:c1:51:
2d:1b:c9:68:da:ac:8b:97:9f:ba:74:09:13:48:da:
c8:ff:13:7f:7f:29:e4:a2:af:ec:82:60:f0:3d:4f:
bc:6d:69:27:03:bc:94:83:55:0e:a7:3f:ca:b3:68:
44:0d:e2:de:9b:8a:6c:03:e1:ce:dc:87:79:f3:e7:
f9:b1:c3:d7:6b:f2:3a:1a:57:31:be:2b:3e:08:65:
f4:da:a1:2c:97:55:60:0d:00:c3:35:2f:59:58:b6:
52:09:7a:e9:e9:ce:ec:66:0b:61:c9:79:63:bb:bb:
1f:1f:6e:67:c5:d9:a3:0f:45:e6:72:f3:e8:52:c8:
3d:99:a4:48:8d:c2:a6:b6:1a:63:dd:55:23:1c:eb:
18:0b:a5:8a:7b:bd:0f:f9:7b:df:5a:f2:35:0c:86:
e8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5F:C8:9F:9C:0E:0A:C2:15:32:CE:C7:79:76:CA:80:E6:A1:4F:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B32A20CC3E011EFB1D86FA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.126.0/24
Signature Algorithm: sha256WithRSAEncryption
be:96:f4:b0:6b:8b:4f:84:8a:e6:f7:87:01:8c:13:45:3d:91:
4b:a8:eb:17:c3:bf:8f:86:a1:4b:dd:5e:c1:cd:3c:5e:de:de:
ce:52:55:4d:79:24:12:de:1e:30:df:af:75:8d:de:58:f2:ff:
af:cd:f4:45:72:1c:2f:8b:fe:cd:b7:18:b0:f1:de:30:75:6a:
f1:24:88:c0:d6:e4:33:d6:16:d7:3c:21:b9:46:16:03:ed:88:
8a:1b:4e:7f:69:94:e8:bb:41:e0:8d:84:7a:43:1d:f2:ce:4e:
74:c9:22:9b:6c:23:ae:b6:68:cf:0d:38:80:2a:bb:d6:c8:51:
cc:37:38:1e:99:84:df:84:e8:59:e5:85:f2:9d:7e:66:c0:3b:
4d:7f:c0:e1:06:cd:c6:50:cf:0c:43:85:43:e0:a3:96:4f:d4:
5c:c6:bb:23:8f:a3:d5:13:bc:6e:98:cd:d8:ed:ca:05:be:77:
c3:88:b4:65:28:a3:97:c1:ad:9d:3b:6f:9d:6e:9d:38:7d:3e:
0f:38:7f:7d:4d:4f:54:81:0d:85:cb:e4:5b:13:e8:ce:ad:6b:
dd:30:ee:54:ff:25:3a:b7:03:cc:b2:61:f5:ef:fe:eb:ae:15:
b9:e0:10:fc:16:52:04:15:f2:8b:75:af:c6:ee:f5:6b:fe:23:
5d:17:00:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:49:34 2025 by rpki-client