Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26467CE8D95911EF9F2AFE51762E951A.roa
File: 26467CE8D95911EF9F2AFE51762E951A.roa (raw, json)
Hash identifier: fbNzzoYulgHT+ZJnaRylcGF+8DQssj7923xx7RYM22Y=
Subject key identifier: 9D:3B:40:01:CC:B3:A5:5B:78:A6:82:F4:90:A8:6A:0D:3A:4C:E0:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014029
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26467CE8D95911EF9F2AFE51762E951A.roa
Signing time: Thu 23 Jan 2025 07:10:39 +0000
ROA not before: Thu 23 Jan 2025 07:10:35 +0000
ROA not after: Sat 08 Feb 2025 07:10:35 +0000
asID: 18229
IP address blocks: 154.210.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81961 (0x14029)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:10:35 2025 GMT
Not After : Feb 8 07:10:35 2025 GMT
Subject: CN=6791eb6f-28f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:65:cb:e0:67:4a:25:70:ae:9e:60:38:60:
f6:74:94:e6:9b:bf:a9:b9:e4:f2:cf:d9:79:e3:0d:
ba:8d:46:36:d3:39:57:fe:40:89:36:7d:5e:4b:64:
b8:70:84:ac:8f:49:2b:fc:fa:a7:67:b8:11:19:46:
44:7c:02:e2:bd:8c:63:c9:a4:b5:56:7d:22:d8:73:
fb:9a:00:51:c8:28:22:1f:e5:87:d5:e9:c5:f8:43:
39:40:10:b7:f0:44:5a:6f:75:b1:cd:1e:59:c4:2e:
9f:0f:0e:21:db:58:13:21:dc:b2:41:60:28:ec:f5:
61:68:80:e1:c0:01:6f:77:ee:3c:31:34:58:ac:57:
dc:b5:f4:5e:e5:c5:f7:19:5a:68:4e:94:49:2e:15:
25:61:1c:33:8f:ef:77:2b:d9:6b:f0:5d:b9:40:32:
b7:4b:75:a0:39:c1:fb:02:17:16:1b:76:d2:c2:6c:
59:87:80:0d:4b:8f:e3:57:15:ef:74:05:8f:6e:2d:
8c:ad:15:38:27:d5:0c:64:c8:62:7c:a1:8a:20:d5:
40:bd:ea:e1:a2:22:f0:2d:c5:0b:cd:aa:8e:13:9f:
a8:3c:b1:6e:7f:ba:e9:56:a0:01:55:4e:bc:7f:f9:
c6:d8:06:ed:e7:6c:ac:1c:38:23:15:da:48:27:f8:
21:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3B:40:01:CC:B3:A5:5B:78:A6:82:F4:90:A8:6A:0D:3A:4C:E0:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26467CE8D95911EF9F2AFE51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.150.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a4:cf:ed:87:46:9e:6f:c9:a9:bd:7e:5a:4d:36:99:7c:b6:
5a:49:21:43:ea:2d:87:42:d5:40:7e:09:d1:6f:29:69:1d:ee:
d4:73:8d:e8:bf:7f:98:73:4f:6c:33:ec:36:75:74:cc:9c:a6:
b5:c9:66:de:25:04:0f:bf:c2:26:09:bd:0c:c2:de:13:fe:62:
51:18:43:0f:cc:bd:9d:32:8d:5c:4b:f4:70:63:8e:5e:2f:c7:
2e:a8:8f:19:34:f9:4c:fe:81:25:66:80:a6:d4:1f:00:44:2f:
96:6e:29:ea:77:e6:10:7c:05:ce:b0:ea:8c:ad:5f:4c:3c:fe:
b2:4d:96:7d:dd:1f:fd:37:be:56:9e:49:96:92:3e:c9:f8:8b:
bb:e7:0b:b9:3d:a2:52:56:61:75:a0:d2:21:04:50:05:fb:18:
bf:81:7f:a7:4d:af:cb:b0:21:ce:c0:c6:64:70:1a:0d:e8:9f:
cd:7a:49:97:08:8d:6f:a4:60:1b:74:89:cb:97:3b:78:f6:1b:
38:af:84:7f:1c:24:5f:40:2c:9c:0f:03:9a:63:eb:d6:6a:cc:
6d:e0:b6:29:08:4f:62:71:ce:10:20:f6:33:ac:61:5e:5b:23:
d9:96:98:88:c9:22:d3:52:5c:c6:c6:52:c9:c2:84:2f:07:ff:
48:17:c9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:59 2025 by rpki-client