Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26C09780C41911EFA4961F9F762E951A.roa
File: 26C09780C41911EFA4961F9F762E951A.roa (raw, json)
Hash identifier: PtI+iQFeNrhHgb9nKDAj1eNfa8XSqtA2Pvlaa4Ot1IE=
Subject key identifier: 2B:A9:92:04:F2:72:A1:21:8B:A9:5C:0A:8A:F6:6F:65:14:03:E7:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01297B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26C09780C41911EFA4961F9F762E951A.roa
Signing time: Fri 27 Dec 2024 06:09:38 +0000
ROA not before: Fri 27 Dec 2024 06:09:34 +0000
ROA not after: Sun 12 Dec 2027 06:09:34 +0000
asID: 17561
IP address blocks: 154.198.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76155 (0x1297b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:09:34 2024 GMT
Not After : Dec 12 06:09:34 2027 GMT
Subject: CN=676e44a1-a584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:1c:dd:22:06:64:d7:c7:28:c9:6c:91:3c:
7f:15:05:98:f5:2d:4f:43:87:2e:02:34:3a:04:da:
4f:50:54:89:ed:4a:2c:9f:10:67:f5:e5:e8:71:58:
cb:ac:95:e9:67:5f:2e:02:5f:e0:2a:bd:bf:c0:cc:
01:12:1d:bc:fa:e9:fe:ab:93:0c:f7:56:be:2c:03:
7c:e3:4f:b8:3b:d7:35:f4:b8:84:b9:e7:ff:b8:f3:
77:7f:45:d2:ea:a5:92:41:c0:9f:fa:9c:d0:5e:7a:
c0:77:42:2b:1a:bd:b2:b0:d0:a4:87:e8:56:7c:51:
e0:4d:8b:e5:a3:13:55:b4:fd:21:52:ea:3a:8a:07:
b6:ce:8b:25:2b:83:ec:30:cd:1a:e0:5f:c4:74:ba:
79:d4:7f:3d:78:60:49:69:88:7b:2c:5f:e9:00:c3:
ce:28:0f:ed:a3:32:d3:50:93:5d:11:d7:59:7d:1f:
b3:70:d3:e5:94:37:6d:2b:b0:66:42:7b:40:ba:cc:
85:e0:54:22:d9:52:f7:bb:ec:31:ba:29:4e:8a:b6:
27:85:e0:82:ce:2a:fd:eb:80:08:7d:f0:38:2c:61:
ba:78:d6:5e:e6:b2:7c:87:21:0f:69:11:5d:6c:d3:
5e:96:4a:35:5b:40:da:15:59:f9:57:d0:c5:ba:f2:
70:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A9:92:04:F2:72:A1:21:8B:A9:5C:0A:8A:F6:6F:65:14:03:E7:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26C09780C41911EFA4961F9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.160.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:13:8b:27:60:a3:79:73:60:85:5c:3b:3c:41:ec:a8:4c:3b:
30:47:8b:6b:f0:b6:68:58:06:55:cc:3c:59:99:67:bb:99:af:
c4:63:02:45:ff:3f:6a:c6:16:d8:75:9a:cd:f0:08:b4:97:f4:
7f:e2:7c:73:fe:fc:45:cb:5e:10:be:e7:d7:ad:6b:20:bf:df:
25:7e:a9:60:a5:f9:5f:d0:90:50:34:97:5c:c9:bb:37:1f:ec:
9f:c2:bf:60:f7:f8:12:f3:4b:12:03:94:04:0b:9d:c3:f3:0d:
4d:2a:df:83:11:5e:02:25:d7:23:3c:2e:a7:38:64:35:6c:a4:
df:7e:8a:52:a4:37:43:ed:a5:db:78:97:f2:3e:2e:57:c9:0a:
3e:3b:8b:7d:86:86:fd:7e:e4:97:e4:01:02:04:e1:6f:4d:e7:
10:ec:87:f3:c7:62:22:0d:c1:4a:fa:3c:f3:96:22:6a:32:e4:
0d:51:03:ef:25:ff:ed:c6:3e:8a:8a:8e:58:fc:bc:c8:90:57:
ad:15:ab:40:23:4a:5d:5b:e4:17:ff:ad:3f:02:73:a9:b7:00:
a4:d0:19:c8:4d:f9:18:23:ba:4f:9d:a2:6c:c7:cb:88:b0:4c:
ec:43:1f:cc:a0:1d:ed:e4:26:5a:8c:9a:e7:a8:81:33:32:79:
5b:59:26:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:48:25 2025 by rpki-client