Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3155D75CC54811EF87E02C97762E951A.roa
File: 3155D75CC54811EF87E02C97762E951A.roa (raw, json)
Hash identifier: 2UEotvoooQcFMeGEDwqx5mHOfBsyMxhbK+J9FCYhbl4=
Subject key identifier: 73:68:A6:D4:50:0B:10:DA:B8:6E:DA:66:FD:D7:9B:0C:CA:C8:B5:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3155D75CC54811EF87E02C97762E951A.roa
Signing time: Sat 28 Dec 2024 18:18:53 +0000
ROA not before: Sat 28 Dec 2024 18:18:49 +0000
ROA not after: Sun 12 Dec 2027 18:18:49 +0000
asID: 17561
IP address blocks: 154.209.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76991 (0x12cbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:18:49 2024 GMT
Not After : Dec 12 18:18:49 2027 GMT
Subject: CN=6770410d-2caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:5f:03:8c:06:35:89:15:eb:7d:bf:24:81:
a6:fc:58:99:69:a6:b2:d7:e4:fc:2b:ec:54:ae:14:
c9:e9:43:1f:a9:0e:80:aa:ba:4e:26:c3:63:46:a6:
b3:5a:a5:d5:b0:2e:c2:5f:75:e7:3c:8b:43:34:00:
96:92:6b:e0:47:48:28:f8:79:f8:fc:29:6d:2e:90:
c3:4a:23:6e:9a:e7:7a:97:03:74:6a:05:4f:4e:a3:
b6:b8:ab:3b:be:4e:e2:52:31:fa:14:3e:c0:96:6a:
ba:ea:c8:99:f5:2c:95:eb:9d:97:30:0f:bc:82:e3:
af:b6:2e:26:38:09:3f:21:19:f7:11:35:cb:52:f0:
89:26:f6:76:f5:0c:29:30:51:a5:aa:81:06:19:02:
09:40:0e:31:7e:8b:cd:5c:9e:79:ed:40:c6:fd:e9:
01:b2:02:55:bf:ab:ad:ea:67:9c:1a:43:b9:d9:ce:
60:48:70:0d:45:c0:84:bf:42:9d:15:d2:90:d2:65:
8e:07:97:68:d8:ae:25:05:c9:ff:5a:62:9e:ba:17:
a7:65:37:92:61:b1:28:98:4a:11:00:4f:eb:7b:92:
0f:92:23:b9:94:54:0b:67:82:2f:19:e8:dc:87:6e:
de:f8:e2:2b:1f:9a:70:85:d4:4f:88:49:cc:25:d3:
53:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:68:A6:D4:50:0B:10:DA:B8:6E:DA:66:FD:D7:9B:0C:CA:C8:B5:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3155D75CC54811EF87E02C97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.26.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ea:a9:24:77:43:83:a8:e8:bc:8b:24:c9:1a:96:3d:4a:9c:
ec:a1:67:02:74:9c:8c:57:9e:b9:98:63:b8:d0:9c:fe:cd:74:
8b:83:0e:2f:6d:08:9f:b5:39:0a:ca:92:70:21:a2:6a:0e:00:
12:b1:41:38:0e:02:6d:85:06:cc:ae:25:7f:23:ff:c8:56:ce:
43:e3:9c:66:0b:a2:ef:37:b8:43:94:38:c9:5e:07:00:3f:f8:
eb:f4:15:8b:4e:8b:eb:1b:f0:ef:e2:38:b4:1e:65:60:96:41:
7d:a7:a5:5f:88:39:49:a0:31:95:2a:d6:6e:a3:2c:f0:36:06:
e1:b6:8d:8b:de:f7:a1:fc:bc:55:12:56:87:63:33:e0:6c:fb:
f8:25:6a:00:0d:c2:f4:e6:22:88:53:b1:44:43:db:fe:2f:c0:
a8:e7:ac:18:92:07:fa:92:aa:69:81:3d:86:eb:7a:26:23:56:
a9:8a:e1:8b:b0:b8:a7:c1:df:09:6a:92:89:9d:be:94:9f:b0:
40:2c:8e:2d:93:f6:4b:c5:91:12:b1:90:17:a6:de:7e:1e:b4:
f7:55:42:66:ba:5e:c4:56:61:b5:6d:8a:e1:8b:e4:34:ef:b4:
fd:5d:1e:a5:a1:8d:ce:7d:05:43:82:1e:8b:86:db:fe:7f:7f:
d2:ee:7c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:23:59 2025 by rpki-client