Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26DA6C6CDA6911EFA928DE7F762E951A.roa
File: 26DA6C6CDA6911EFA928DE7F762E951A.roa (raw, json)
Hash identifier: 3IfzPzl0cemno6dpK7GRDVnKxVHg4WVLyNAE4L8o9ZA=
Subject key identifier: B7:F9:36:C9:82:C2:11:40:93:91:E6:2E:BA:BB:92:C9:8A:69:0F:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26DA6C6CDA6911EFA928DE7F762E951A.roa
Signing time: Fri 24 Jan 2025 15:37:43 +0000
ROA not before: Fri 24 Jan 2025 15:37:39 +0000
ROA not after: Mon 03 Mar 2025 15:37:39 +0000
asID: 203020
IP address blocks: 154.205.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84147 (0x148b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:37:39 2025 GMT
Not After : Mar 3 15:37:39 2025 GMT
Subject: CN=6793b3c7-52b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:c1:04:41:7b:17:f3:42:57:5b:a3:19:7e:
e6:7a:08:ea:8e:cb:d7:7d:50:72:88:ae:06:8f:86:
c8:fa:33:b0:08:95:3e:4b:e8:f6:d0:52:f8:9e:df:
af:cc:67:6c:ce:a6:87:91:74:26:44:da:c3:c3:f9:
49:80:24:f9:f2:5a:24:e9:c6:3a:56:60:75:c6:c1:
9d:8b:3e:e3:a4:82:c0:7c:83:3c:26:88:23:96:2a:
a9:cc:9e:6b:f7:1d:cc:f8:2d:05:40:25:fa:a8:d9:
ef:e3:f0:b7:b5:8c:02:97:32:9c:6f:9e:a1:33:d8:
e0:6d:ca:70:c0:56:94:d5:9e:f0:c3:ce:e5:f4:4d:
2f:bb:2a:c7:dd:9c:0e:07:c4:cc:cc:df:88:ca:40:
d8:58:62:b3:4b:be:c9:70:da:13:24:ec:9e:25:d8:
f2:d1:84:a5:0b:64:13:8d:c2:e4:6b:4a:a6:da:51:
c5:ea:56:7a:e2:db:c2:e0:c2:7a:19:27:85:cd:28:
59:43:37:c7:05:7b:dc:f3:c2:b9:86:75:eb:01:13:
74:5e:e2:ef:9b:ac:4f:53:a5:94:e1:1d:63:24:07:
c2:b8:ce:35:55:a9:f5:ac:c6:49:fe:02:19:7a:79:
6a:d5:25:25:7a:64:8e:53:37:c8:d3:b2:bc:6b:b1:
3a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F9:36:C9:82:C2:11:40:93:91:E6:2E:BA:BB:92:C9:8A:69:0F:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26DA6C6CDA6911EFA928DE7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.186.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c4:98:45:ba:33:41:04:90:0d:60:d7:da:19:6d:3c:54:55:
22:59:ec:5d:7a:94:02:98:09:53:bc:75:22:cf:3d:f4:85:ac:
86:bc:cc:cd:3a:3c:7c:45:9b:29:fd:60:b2:78:da:be:3e:c0:
ab:d9:85:b2:ec:b5:5c:e7:a7:29:0b:52:4a:f9:12:ac:00:0a:
b2:a2:fc:26:fd:b0:13:c1:34:ae:a4:0b:b9:30:8d:a6:22:41:
6f:c4:72:b6:28:61:ea:17:da:b9:a1:89:e4:8f:b6:1a:f3:79:
9f:ba:65:26:41:f6:c5:df:db:7e:1b:a1:ad:06:9d:b2:41:dc:
2f:22:a1:15:39:da:e5:e3:25:d2:ed:a8:a6:93:0f:02:f7:65:
f8:c0:fb:6c:88:03:9b:c9:19:be:3b:c5:4c:78:7c:17:12:00:
68:43:a3:0d:37:03:99:f6:bb:03:53:5d:69:bf:df:70:21:cc:
04:a3:7d:69:b3:d2:7a:b7:e2:60:80:95:b1:b9:b7:ce:f4:cf:
57:3d:5e:1f:1c:fa:5f:4c:37:e1:4f:2c:52:59:91:cd:cb:7d:
fc:0f:84:f4:c1:1f:8e:cb:2b:9a:13:d1:79:7f:e0:5f:63:75:
66:55:65:da:49:6a:f1:47:a6:68:7c:aa:4f:e1:5c:ac:86:37:
13:49:5a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:11:42 2025 by rpki-client