Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26026CB0C38311EF93709E5C762E951A.roa
File: 26026CB0C38311EF93709E5C762E951A.roa (raw, json)
Hash identifier: 8iERj0oVbTv0TvJU9GYslFhqTwAX+1Cbs62RhweDO0E=
Subject key identifier: 0E:4E:7E:11:B7:64:C1:14:39:14:C3:96:42:68:D7:76:F6:86:D9:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012774
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26026CB0C38311EF93709E5C762E951A.roa
Signing time: Thu 26 Dec 2024 12:15:52 +0000
ROA not before: Thu 26 Dec 2024 12:15:48 +0000
ROA not after: Sun 12 Dec 2027 12:15:48 +0000
asID: 17561
IP address blocks: 154.94.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75636 (0x12774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:15:48 2024 GMT
Not After : Dec 12 12:15:48 2027 GMT
Subject: CN=676d48f8-6600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0c:a3:af:f6:65:db:09:6b:5f:14:5f:a8:d0:
a9:f2:c1:33:e5:47:03:7c:e4:b7:11:92:b0:18:a9:
9c:0c:4c:d9:39:17:be:62:cc:25:ec:37:cc:97:f2:
4a:6e:73:99:05:77:2b:34:be:f6:9a:84:1a:44:da:
67:f2:bd:f8:08:25:4c:6c:e2:27:48:3d:4b:d0:ca:
7e:c9:7f:eb:fb:71:aa:80:99:0b:0d:a5:6e:4a:8c:
91:52:1e:dd:97:04:d2:72:b4:bc:dc:00:db:63:01:
b1:ad:b9:bb:aa:78:11:d2:e1:25:37:7c:b5:23:05:
24:40:7a:83:3a:81:ef:c0:09:df:c7:a5:f6:bc:82:
4b:d7:16:9c:99:45:83:db:2f:d6:52:1b:32:2d:c3:
28:b5:d8:84:cb:5b:bf:97:8f:86:8b:54:d7:b5:d5:
0b:c9:f6:87:f1:95:cd:77:4b:6d:18:39:6b:d8:bf:
50:6d:11:44:91:ae:2a:ce:8b:aa:60:ad:4d:67:7b:
23:4b:b2:f0:d2:9f:36:3e:82:2f:15:7c:fe:50:86:
b1:12:74:b1:96:6e:1b:f3:95:dd:9d:a6:ec:53:11:
6d:42:61:99:03:c9:d0:c3:88:57:87:48:d9:47:e4:
5b:b0:94:67:08:05:68:8a:37:71:8e:31:4d:54:bd:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4E:7E:11:B7:64:C1:14:39:14:C3:96:42:68:D7:76:F6:86:D9:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26026CB0C38311EF93709E5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.209.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b7:91:f9:83:dd:92:37:2a:32:59:19:ac:4f:bf:16:9d:21:
e7:ee:4e:5f:4b:65:dc:f9:d7:33:1f:52:62:b0:9c:b1:04:a6:
0d:07:23:db:1d:f3:7b:99:fb:e6:45:e3:06:ad:fa:92:73:d6:
9d:10:19:36:4f:31:b9:70:d1:2f:38:25:0e:6d:85:59:ab:49:
d3:96:fa:cd:5b:e1:56:7b:b1:a5:5e:bc:fd:55:38:fa:bd:d8:
e8:62:4e:b7:b3:06:ce:dc:56:88:a8:ad:a1:02:ee:7c:f0:86:
df:1f:fc:a2:0b:3a:1d:22:0a:ee:87:09:30:eb:b7:da:03:4f:
2d:9c:3c:a3:47:69:6a:17:5d:8d:42:38:56:7b:c6:a9:1a:84:
aa:1b:40:1b:d5:64:22:b1:77:35:af:04:73:1a:e6:40:40:a8:
7b:d6:35:2f:43:f0:cb:48:8d:a9:b0:2c:5c:ab:8c:a6:e3:80:
5f:ec:5f:92:1b:6a:22:fd:d2:82:38:50:4e:33:6e:88:51:8f:
7c:ee:88:36:67:67:a2:44:41:79:a6:c5:fe:49:1e:89:56:72:
87:01:fc:6e:56:7a:7c:d1:af:8e:47:62:c0:43:be:08:ab:a6:
cf:b7:e8:28:80:ab:3b:00:6f:b3:9c:9f:be:c4:85:ad:74:4e:
62:4e:af:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:58 2025 by rpki-client