Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB7FAF20BEDE11EF8197E274762E951A.roa
File: DB7FAF20BEDE11EF8197E274762E951A.roa (raw, json)
Hash identifier: eyOXKvf8neIXBxxx9yuAlwrzp/0w9Vvx4bXX30tsfSY=
Subject key identifier: 1F:B3:AF:98:D0:46:89:85:D9:EC:64:0C:1A:B8:25:37:32:11:19:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB7FAF20BEDE11EF8197E274762E951A.roa
Signing time: Fri 20 Dec 2024 14:29:45 +0000
ROA not before: Fri 20 Dec 2024 14:29:41 +0000
ROA not after: Wed 24 Dec 2025 14:29:41 +0000
asID: 210008
IP address blocks: 154.199.26.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73038 (0x11d4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 14:29:41 2024 GMT
Not After : Dec 24 14:29:41 2025 GMT
Subject: CN=67657f58-35a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:58:5f:14:9a:24:1f:30:a9:7d:db:45:de:
c0:ed:88:f8:3c:32:e6:5e:4a:5d:c8:a9:72:89:8d:
1d:a4:a7:f4:f7:c1:f0:ae:9b:a1:af:5b:75:09:b3:
40:13:34:60:53:20:2d:c5:aa:99:aa:c1:ef:48:53:
b1:bf:c6:0d:c6:28:ea:46:dd:33:6d:f4:e7:16:dd:
70:bb:f5:85:a3:4c:9c:e4:26:8a:9b:b9:63:66:3b:
a3:bb:e5:34:03:c8:2c:75:5d:ed:2e:77:66:e6:c0:
32:1e:40:72:81:40:0a:e5:a9:80:78:ff:08:53:f4:
6a:38:c0:40:95:76:59:78:23:c6:0b:56:00:98:f2:
0a:94:ca:c9:38:69:f8:43:3e:13:cb:5c:db:3f:11:
c2:2c:1e:46:09:99:32:e8:f4:aa:17:fd:e6:93:84:
43:60:45:d6:2c:b5:ec:98:4e:80:36:99:4b:4a:df:
6c:cd:c2:49:f9:92:46:31:3f:ee:bb:43:f4:98:89:
56:24:24:d2:44:c9:2a:0d:5d:a7:c5:6a:cc:92:07:
2e:d2:1a:9a:66:fa:dc:b0:8b:07:0a:dd:69:0d:a3:
4f:e9:f0:b7:57:5f:4e:47:ad:d6:2d:a3:ee:c8:ee:
65:56:0f:1c:32:47:f0:a9:1c:eb:07:dc:a0:35:e6:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B3:AF:98:D0:46:89:85:D9:EC:64:0C:1A:B8:25:37:32:11:19:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB7FAF20BEDE11EF8197E274762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.26.0/23
Signature Algorithm: sha256WithRSAEncryption
37:24:36:62:9b:75:7b:0a:b7:ef:7f:46:ab:bb:28:8d:ee:f5:
b9:cc:ac:22:26:37:ce:3d:07:f7:fa:fa:ba:83:f9:88:79:22:
e9:e1:2d:5f:88:d7:49:d8:0f:92:b7:c5:8b:ef:41:7f:7d:35:
ac:d1:3c:fd:0c:33:d6:5c:5d:fa:20:75:31:42:3e:76:a6:67:
f8:d3:99:df:eb:68:d5:df:16:f5:4b:7a:7c:88:69:a4:b1:3f:
1a:ef:49:25:88:53:88:1b:e0:32:f4:f2:ac:79:b8:31:15:fd:
22:9a:8e:ea:4c:0d:49:c0:b5:08:72:c8:80:06:60:79:13:7e:
1c:e3:49:60:f5:c0:a0:40:46:ac:13:50:2c:78:64:49:02:3b:
d3:18:43:19:6e:79:0e:b8:0e:08:35:82:65:de:ee:01:c7:8f:
8a:f1:4a:7e:25:cd:a1:00:65:f3:74:18:9c:f2:82:cb:16:57:
43:b1:b7:35:69:46:83:0e:66:16:3f:24:f5:b8:55:aa:58:c0:
a0:59:cd:9b:fa:97:74:db:e3:2e:77:51:71:ef:ff:c8:be:12:
bf:83:c5:1e:f5:db:c2:3f:61:3a:60:a8:26:94:f1:0a:38:ba:
9e:06:06:07:bc:27:f9:1c:e6:7d:df:66:2c:0e:49:c7:90:8e:
f6:1e:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:40 2025 by rpki-client