Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26BB1B14F3DC11EF8C81FE83762E951A.roa
File: 26BB1B14F3DC11EF8C81FE83762E951A.roa (raw, json)
Hash identifier: ujJKqrs6MqC+3irn8Gm71s+H2iUnwWYIXx+ogFKYfL0=
Subject key identifier: E1:3C:4C:A9:3C:2D:F2:F3:BA:47:6F:3F:E5:52:ED:E9:57:D5:BD:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01604F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26BB1B14F3DC11EF8C81FE83762E951A.roa
Signing time: Wed 26 Feb 2025 00:53:54 +0000
ROA not before: Wed 26 Feb 2025 00:00:50 +0000
ROA not after: Thu 19 Feb 2026 00:00:50 +0000
asID: 984
IP address blocks: 154.92.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90191 (0x1604f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:50 2025 GMT
Not After : Feb 19 00:00:50 2026 GMT
Subject: CN=67be6622-9ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:1d:65:1a:aa:73:8e:2d:11:9a:1f:7a:78:
00:84:05:84:7f:27:32:c8:0c:fc:dc:53:1e:ec:a4:
93:4f:3d:16:af:3d:e8:12:a4:11:26:0b:8e:a1:9d:
84:19:d4:d9:d4:28:77:70:79:b5:0f:9a:04:3f:e5:
ee:e6:43:2c:b1:e4:aa:b1:d3:e5:36:0f:93:76:15:
da:aa:4f:7d:08:33:08:37:f8:e3:50:2b:98:a4:63:
25:46:35:11:1a:0e:62:4f:7f:14:75:e6:ec:75:a3:
24:80:3f:7d:75:cc:e0:31:ca:72:19:d5:fb:f3:f4:
35:94:59:27:07:bd:b6:4b:df:bd:f5:07:e1:ff:0e:
a1:2e:85:44:08:80:9e:cb:c0:a3:2f:1c:91:b6:32:
63:5b:d2:4c:72:6d:fa:cb:2f:e3:03:d1:3a:cd:e4:
82:39:99:24:5e:dc:12:fb:b0:45:54:0e:b6:c3:e5:
4c:e5:06:ca:45:11:0b:be:44:9f:f7:83:94:e7:f4:
e7:33:ce:0a:f8:15:c2:5f:0b:0a:6e:6e:58:f3:d6:
fb:c1:e8:aa:e2:e1:ca:ba:c1:2e:06:29:ff:a7:75:
b5:37:e1:42:2b:7b:a3:5a:64:a6:6e:6c:b2:cf:80:
ae:96:8c:f8:2d:c9:0d:d1:13:29:fd:6e:61:e5:b0:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3C:4C:A9:3C:2D:F2:F3:BA:47:6F:3F:E5:52:ED:E9:57:D5:BD:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26BB1B14F3DC11EF8C81FE83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.229.0/24
Signature Algorithm: sha256WithRSAEncryption
39:14:3c:16:88:d5:72:f5:e6:ec:f0:f0:63:83:ac:c0:a7:72:
4d:7b:f2:63:fc:01:aa:f3:9e:06:0f:65:db:cc:50:b4:88:de:
ca:0e:1a:8d:20:91:02:b0:09:24:c3:80:bd:a2:ab:85:ba:e5:
6f:11:48:2e:14:de:3d:9e:87:d0:1b:30:da:8c:8e:5c:61:3d:
63:76:ad:d4:59:e0:f8:8a:ce:30:43:f5:09:38:82:2e:18:60:
d7:47:82:6b:84:0f:de:53:13:95:09:a3:cb:92:cb:f3:76:b6:
8c:79:77:2b:52:81:0f:d9:e0:16:56:3a:f1:25:04:9b:ee:57:
4c:b4:c4:e1:fd:4e:c6:33:7f:84:e8:a5:64:dd:b1:54:ff:c9:
0e:70:5c:69:26:c1:91:49:a3:d2:bd:0d:5c:dc:29:23:ef:de:
92:ce:fc:85:53:ec:43:2d:e2:41:2b:42:35:fd:d7:50:43:a7:
98:af:e2:cd:57:51:5a:ad:f7:ae:be:d3:9d:89:e5:51:c7:20:
90:ca:81:04:fc:d8:33:b2:7b:9d:c5:61:69:91:45:d3:e5:7c:
f3:d9:03:77:dd:d9:6f:12:b7:1b:3f:a0:41:01:dd:36:f1:a2:
c9:52:16:46:21:3d:60:0f:f8:cb:13:7c:c4:ad:d7:d7:a3:d1:
5d:5e:b8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:36 2025 by rpki-client