Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB72C0CCC41C11EF91EAC9B7762E951A.roa
File: FB72C0CCC41C11EF91EAC9B7762E951A.roa (raw, json)
Hash identifier: qGtbaeBdIeRxucuPROepi6A22wiyOBdCTrP+jiyxXLs=
Subject key identifier: 60:75:7A:E4:26:DB:C9:46:86:AA:C8:3F:20:99:40:89:81:64:E5:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012997
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB72C0CCC41C11EF91EAC9B7762E951A.roa
Signing time: Fri 27 Dec 2024 06:37:03 +0000
ROA not before: Fri 27 Dec 2024 06:36:59 +0000
ROA not after: Sun 12 Dec 2027 06:36:59 +0000
asID: 17561
IP address blocks: 154.201.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76183 (0x12997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:36:59 2024 GMT
Not After : Dec 12 06:36:59 2027 GMT
Subject: CN=676e4b0f-28ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:ed:27:2a:e2:b9:26:c4:c7:93:1d:74:1d:
e4:fa:ae:c4:9d:47:aa:82:d9:ab:56:0a:40:68:43:
5c:11:be:4a:7c:78:76:9f:dc:53:f6:af:e9:2a:e8:
d3:19:0c:ec:b2:bf:24:c4:4f:1d:a1:d3:b8:79:ba:
55:53:85:d3:39:e5:c7:27:49:3d:96:a6:35:c7:33:
8e:a2:e1:d0:95:15:e9:cc:49:d5:af:ba:bb:ce:73:
1f:80:b3:bb:a4:78:88:2e:20:34:5f:cc:9e:6c:67:
00:43:17:fa:6e:38:2f:d6:14:83:c5:7d:b0:55:37:
ca:2c:92:78:3b:50:72:2d:65:5e:7e:f5:ee:c8:5d:
86:16:a9:c6:81:9c:fa:78:8a:77:52:6a:0a:52:7c:
4f:45:07:f6:24:18:9d:9d:a3:62:5f:35:38:c5:d3:
38:a0:47:cd:b5:71:34:ea:11:17:09:d7:e8:b1:15:
ef:22:b2:0e:5d:3a:67:6e:43:29:94:68:18:12:a0:
85:28:31:5e:4f:f7:2c:31:04:46:a6:6f:93:36:79:
4c:61:9e:42:e7:f8:11:3b:fc:b8:1c:be:00:57:dc:
e8:cf:fe:03:ac:f7:87:e6:33:ef:da:17:8b:83:60:
f1:70:b6:27:23:42:a0:82:ab:40:69:8a:b2:16:52:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:75:7A:E4:26:DB:C9:46:86:AA:C8:3F:20:99:40:89:81:64:E5:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB72C0CCC41C11EF91EAC9B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.26.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:03:14:77:b4:33:d8:68:65:f1:59:b0:09:f6:36:4d:5a:a8:
0d:4f:2f:8d:0d:54:a2:0a:a1:b1:a5:4e:71:06:6d:5b:92:28:
62:ea:d0:ee:bf:5e:17:f6:3c:6a:a7:ad:03:a7:82:70:46:9d:
8b:b9:c7:ed:05:6b:47:62:a3:0e:07:2e:ef:50:1e:ba:08:16:
7f:75:4d:b8:87:ec:74:44:89:2e:fb:bd:6e:7f:4c:72:f7:96:
ae:83:29:53:57:27:79:a5:75:45:fb:26:6c:18:80:5e:d6:df:
20:8d:e6:3a:b0:bd:69:92:41:fd:08:03:6c:da:4e:e7:77:72:
c1:2c:bb:a3:af:a0:14:86:ae:e4:22:17:ee:94:98:3f:b0:de:
22:45:7d:e6:ef:c4:60:52:1e:61:33:93:2a:7c:b2:b8:23:19:
94:98:a9:61:fa:45:cb:69:2b:4f:78:85:48:f7:f4:40:0a:0e:
93:86:69:57:d5:25:1b:d9:17:dc:93:c6:33:c1:fa:29:64:ed:
a6:74:82:3e:4d:c6:22:7c:b7:33:01:9f:61:af:04:0a:b0:c8:
92:c1:a4:a1:d5:17:c2:2c:1b:e6:d1:db:f4:b1:b3:2a:5f:84:
66:70:33:b1:dc:36:00:09:c3:f4:0c:66:4d:0d:42:12:1e:28:
9e:09:be:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:50:53 2025 by rpki-client