Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26CAE53EC3C711EFB0C88C85762E951A.roa
File: 26CAE53EC3C711EFB0C88C85762E951A.roa (raw, json)
Hash identifier: 3RidYTAowcIkUTALKZdLnZYHjN2Az//YCWnKM/Fty4k=
Subject key identifier: BC:B4:D0:EC:23:61:72:19:19:99:7E:D4:8D:1B:78:C1:3C:14:91:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26CAE53EC3C711EFB0C88C85762E951A.roa
Signing time: Thu 26 Dec 2024 20:22:39 +0000
ROA not before: Thu 26 Dec 2024 20:22:36 +0000
ROA not after: Fri 12 Dec 2025 20:22:36 +0000
asID: 984
IP address blocks: 154.83.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75740 (0x127dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:22:36 2024 GMT
Not After : Dec 12 20:22:36 2025 GMT
Subject: CN=676dbb0f-80bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:0f:25:36:86:9c:48:03:2f:c2:9f:c1:05:
35:18:0c:d3:0d:1b:c7:22:b4:ff:eb:ae:93:54:b6:
b5:39:9c:25:95:e6:86:99:5e:5e:8e:43:d1:a9:fd:
f8:25:ef:52:5e:3f:da:58:0e:ef:f7:d1:01:ef:6d:
6a:a7:14:c6:66:38:11:f9:ef:5c:36:38:bf:a5:76:
ba:a3:1a:bb:de:66:cf:49:6f:7f:5c:d7:a5:f4:81:
18:5e:ed:9d:8c:fa:b4:e8:1e:64:2d:c8:9a:49:05:
d8:db:09:74:4b:34:57:7d:53:43:bc:49:20:3f:cf:
ca:2e:9f:7a:34:b6:2a:44:e2:ec:a2:7a:ef:f4:b1:
6e:46:1f:10:bb:c3:55:1d:f1:60:e4:62:09:24:87:
a7:05:d2:17:68:1f:8a:49:4d:b4:29:07:b4:56:ce:
b2:ca:11:94:2a:b7:c9:7f:90:43:5f:ee:88:a3:14:
07:ad:92:a6:57:69:11:09:dd:d9:7b:be:3c:ee:eb:
5d:d2:4a:38:4f:05:63:76:55:93:67:6c:6b:33:24:
99:64:a3:fb:13:9b:a2:71:d8:d2:27:dc:a0:43:54:
98:a5:f3:5a:3d:cc:aa:5a:d8:6e:d0:a8:bd:f0:ab:
74:d8:a6:a1:8a:41:05:31:6a:8a:6f:d4:58:b3:c0:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B4:D0:EC:23:61:72:19:19:99:7E:D4:8D:1B:78:C1:3C:14:91:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26CAE53EC3C711EFB0C88C85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.131.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f1:de:f8:ee:b8:d1:6b:1c:a7:a4:c9:ea:36:74:27:c5:80:
32:40:60:05:87:2d:b2:f7:79:6c:15:8c:6d:79:17:7c:b9:8e:
a6:15:68:dd:dd:26:60:57:3a:89:0a:42:9c:a0:8c:68:0b:69:
a9:2b:83:4c:52:6a:d5:d1:cb:3a:86:0c:e5:be:a4:9b:0c:a4:
08:24:bc:06:98:6b:68:d4:fa:e8:29:3c:ca:be:3c:b9:8f:6f:
d1:12:9f:47:68:bb:29:38:1e:7a:47:c7:50:3c:30:0f:e8:fb:
8e:3f:f7:9d:cb:08:d8:d8:a2:06:c2:3c:30:be:1e:2c:ae:53:
43:78:ea:a7:b1:1a:01:32:ac:21:69:05:f1:0a:bd:10:c9:b7:
95:4e:35:44:31:a0:35:7c:0c:59:75:d2:7b:22:81:0d:f0:1d:
61:a1:51:93:cb:08:e8:7b:63:fc:d8:0f:85:9c:32:48:73:ed:
0c:9f:45:5f:98:e7:7e:10:81:ed:ff:e9:68:72:6f:ab:8b:99:
da:a0:84:2c:9b:8c:be:3d:a1:4c:6f:cc:dc:cb:b3:52:a7:81:
b1:a2:5f:6f:10:f2:a4:eb:68:ba:b6:ee:27:0a:44:56:20:45:
9f:86:bf:96:39:d0:a1:1b:0b:96:40:85:24:e2:92:aa:e5:77:
e2:ad:17:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:13 2025 by rpki-client