Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F5A7D0AC5EB11EF86B79CA3762E951A.roa
File: 3F5A7D0AC5EB11EF86B79CA3762E951A.roa (raw, json)
Hash identifier: slGDCoopxWb1u1OW0MHaJsXBWKerqrapwkAJvNnq6Fk=
Subject key identifier: 14:FE:B6:BC:D5:73:D0:D1:35:B9:08:BD:B7:15:FC:96:B2:36:DF:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F5A7D0AC5EB11EF86B79CA3762E951A.roa
Signing time: Sun 29 Dec 2024 13:46:04 +0000
ROA not before: Sun 29 Dec 2024 13:46:00 +0000
ROA not after: Sun 12 Dec 2027 13:46:00 +0000
asID: 17561
IP address blocks: 154.211.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77222 (0x12da6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 13:46:00 2024 GMT
Not After : Dec 12 13:46:00 2027 GMT
Subject: CN=6771529c-e478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:61:5a:b4:a6:77:e9:93:ce:2a:70:88:32:
1b:12:74:9d:0c:5a:23:f1:f5:96:0a:d7:29:d1:85:
42:24:30:0f:dd:34:e7:65:83:6e:f7:e2:c8:a6:e2:
69:8b:f7:65:9f:82:cb:93:8e:76:7a:e2:65:ea:25:
d5:89:a4:7b:b6:7c:35:0d:84:10:c5:67:f5:c8:74:
ad:6d:09:09:9a:0c:86:1c:fa:c2:49:ca:0d:09:d1:
3f:25:90:13:c2:d5:37:d3:b8:ac:af:d0:df:76:ea:
3e:75:be:60:21:40:b8:d1:1d:5d:3f:bb:f0:d0:b9:
c9:48:c4:19:c1:04:8f:db:a9:b6:6a:09:76:d7:e9:
b3:db:49:ce:22:5a:63:cd:c3:e8:31:f6:36:dc:fb:
26:0d:79:f9:c2:1a:0b:62:e3:a0:c1:9b:61:71:d8:
fa:65:91:23:ef:9b:8c:e7:06:c1:cb:a5:f1:2d:17:
0a:c4:0f:48:10:c6:8b:9d:a2:1a:32:82:a7:37:8f:
e6:98:b3:a8:e2:7a:da:a6:d4:3e:c5:cf:68:c6:a0:
20:31:9b:8b:8e:40:69:f3:33:b3:05:bb:10:2a:bc:
37:c6:d8:3c:7e:dd:83:a2:d2:85:4b:ac:19:d6:5f:
fd:67:50:01:7e:c6:a3:19:ec:76:fb:d0:32:81:fa:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FE:B6:BC:D5:73:D0:D1:35:B9:08:BD:B7:15:FC:96:B2:36:DF:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F5A7D0AC5EB11EF86B79CA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.26.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:7c:c7:c0:34:3c:b4:1f:38:e7:44:d2:1c:29:d1:b3:07:46:
0e:c4:8c:1b:19:bb:2a:d9:c5:87:4d:76:05:cc:a5:d0:49:79:
2c:3d:05:d3:20:3a:af:94:e9:39:6f:01:a5:4c:eb:a2:c1:37:
88:d5:e7:d1:34:e4:84:da:8f:72:c4:fe:f3:75:75:7c:b9:75:
21:62:19:e6:a0:5c:1a:f1:0b:8a:cd:c8:31:a8:6a:8d:62:8e:
b3:b2:cb:c7:7d:1b:4b:54:af:09:43:26:c2:4b:b1:4b:66:ca:
cd:ed:d7:70:34:4e:ad:62:74:91:52:f6:8d:3f:41:ce:56:cb:
03:af:87:bc:77:a3:70:13:82:af:c6:38:62:fd:b2:cc:0f:0e:
ec:87:5c:48:ac:17:b1:86:28:0b:32:f4:3b:d8:17:d0:51:8b:
b5:11:84:87:61:b1:1d:33:95:1b:3c:d7:c2:66:b7:4e:b4:f7:
eb:05:ab:a0:0f:24:03:f6:9e:1f:b1:b1:55:34:31:76:25:cc:
fb:ce:e8:c5:0f:4d:37:3f:d1:3a:0d:68:53:fb:e2:72:92:c9:
da:47:31:fe:66:ea:de:b3:41:42:f9:58:cd:25:d8:4c:66:14:
c4:52:39:b4:91:19:d1:4b:91:21:7e:c2:b7:04:b6:b7:c1:2f:
ae:40:83:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:43 2025 by rpki-client