Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2980508C52811EF9E9F3153762E951A.roa
File: B2980508C52811EF9E9F3153762E951A.roa (raw, json)
Hash identifier: ftN9mreudQEhJOkwuI1TgKPAu3+LEN835djl9WKGdRQ=
Subject key identifier: 4E:91:37:AA:B4:75:6D:88:69:EF:CE:CC:E8:A2:66:01:45:FF:8D:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2980508C52811EF9E9F3153762E951A.roa
Signing time: Sat 28 Dec 2024 14:33:26 +0000
ROA not before: Sat 28 Dec 2024 14:33:22 +0000
ROA not after: Fri 12 Dec 2025 14:33:22 +0000
asID: 984
IP address blocks: 154.204.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76703 (0x12b9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:33:22 2024 GMT
Not After : Dec 12 14:33:22 2025 GMT
Subject: CN=67700c36-ceed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:e7:63:23:33:02:3c:a7:3c:18:63:51:22:
4e:3e:36:f7:32:c3:c4:d6:d1:40:e6:b5:4d:a9:4c:
5c:50:ce:c2:21:d5:8a:87:10:c5:4c:60:22:9f:8f:
bf:27:53:99:08:43:9c:02:a9:11:f2:3a:3c:cf:b3:
4b:ae:c5:87:51:74:60:0c:e3:06:c2:97:30:ce:ef:
19:ab:d9:22:66:ab:ca:04:39:76:68:7b:22:bc:99:
24:91:0a:8d:a6:10:23:5a:26:24:87:0b:6a:62:4d:
e1:cf:11:eb:da:d4:d8:66:dd:11:3c:b8:c5:c1:85:
00:65:fd:a8:a6:1a:7a:ed:90:05:49:7f:f8:fe:8a:
d7:53:36:b9:3c:37:10:b7:4e:24:b8:db:44:02:f3:
12:de:8d:e4:ef:00:af:a0:16:96:1a:f2:b1:01:7b:
f3:8d:d4:28:53:92:40:85:32:6d:a7:dc:ae:4c:bb:
99:ce:bb:bd:f2:6a:11:26:56:04:97:bf:f6:61:57:
29:e9:3a:c5:29:66:fe:b6:dd:dc:d4:3e:a1:ad:c1:
63:3b:c9:27:b2:a4:32:a3:2c:29:1a:25:61:2f:6b:
49:c1:a7:55:4e:9d:c6:7b:8b:f2:ad:41:e2:49:7d:
ec:39:45:e8:aa:26:bc:1a:a0:56:85:89:25:4b:11:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:91:37:AA:B4:75:6D:88:69:EF:CE:CC:E8:A2:66:01:45:FF:8D:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2980508C52811EF9E9F3153762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.26.0/24
Signature Algorithm: sha256WithRSAEncryption
52:75:03:ca:a0:e6:c1:43:44:14:95:42:84:2b:85:94:76:c5:
27:71:a9:0e:fa:d3:e5:aa:2e:84:48:c6:f5:08:f7:6e:fa:70:
60:05:84:d0:2c:f9:70:5a:f7:7e:89:bc:26:92:cd:7b:61:a2:
d4:2b:d8:18:a7:f5:90:e5:37:1f:ea:d1:1c:7a:b3:00:00:2c:
b9:51:13:5d:50:93:75:da:d2:58:92:0b:18:c0:ec:1f:b5:96:
84:cf:d9:97:99:1e:e7:07:50:6d:64:af:7f:a1:a5:20:fb:3f:
9c:cb:ff:cb:df:71:c0:b1:4d:8d:0e:ef:73:28:d9:8d:a5:ac:
be:4f:09:4b:1c:cc:0c:72:25:25:d0:22:fe:59:e7:cd:ca:bc:
c2:23:14:5f:dd:0a:bd:c8:5d:8e:b5:6d:62:c2:c6:a6:73:2e:
be:de:95:09:c7:19:a4:d8:49:e3:de:3b:6c:c5:9d:2d:dc:e2:
12:03:70:75:2c:b7:12:c9:af:dc:73:75:fa:91:7f:6d:79:9d:
8e:8c:46:2e:9b:d4:87:07:54:4a:ce:b3:40:39:ea:e9:22:59:
1c:af:1e:54:fe:7b:f1:4c:fe:73:b2:2a:d9:81:aa:ce:97:1c:
f0:14:dd:77:1f:12:2e:85:a9:1e:b9:6e:0c:ff:8e:e2:43:66:
12:dc:ea:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:42:30 2025 by rpki-client