Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26E2F55ED3F611EFB0A3F164762E951A.roa
File: 26E2F55ED3F611EFB0A3F164762E951A.roa (raw, json)
Hash identifier: G3rcTomnfgRALPihHaBt4BJK+0v/LJYU8dYjfuAp+rQ=
Subject key identifier: EC:F7:4D:48:1D:51:97:1A:9E:DC:B0:0C:32:BC:D9:E9:0A:5F:79:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26E2F55ED3F611EFB0A3F164762E951A.roa
Signing time: Thu 16 Jan 2025 10:39:24 +0000
ROA not before: Thu 16 Jan 2025 10:39:20 +0000
ROA not after: Sun 16 Mar 2025 10:39:20 +0000
asID: 17561
IP address blocks: 154.213.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80850 (0x13bd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 10:39:20 2025 GMT
Not After : Mar 16 10:39:20 2025 GMT
Subject: CN=6788e1dc-7bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c7:70:b4:f4:c0:57:62:35:d3:96:d6:53:48:
a4:c6:83:ae:2a:ee:ac:fd:a5:8c:e9:41:fe:f1:01:
9c:6c:56:b8:3d:be:0b:82:64:df:c0:21:5e:bd:86:
5a:a2:80:2d:ce:b0:56:70:79:ed:d4:25:da:5d:cc:
54:cb:1f:5e:38:e5:f7:ce:5d:2e:9c:5d:c9:ce:9e:
23:f0:1a:1c:06:19:a1:6b:d1:82:ba:d8:89:38:6f:
0f:bd:9f:bf:b7:37:e4:d9:53:cb:d7:47:68:b9:85:
f7:19:12:c4:a5:d9:12:a7:77:47:4f:ac:62:33:34:
4a:33:76:00:a4:8d:68:ba:d5:34:17:8a:62:17:dd:
15:ba:52:0c:3c:62:b2:35:cb:94:e3:0e:42:91:01:
d5:4b:0a:50:4a:52:18:06:fd:fd:4b:52:5a:82:09:
8f:26:ac:dc:89:e3:4f:02:f5:b0:31:c2:49:26:a1:
fe:3a:21:e6:f6:41:fd:df:7b:23:1a:9a:ce:b3:19:
4e:ed:b6:e3:6c:48:29:ac:b9:dc:7b:9d:21:8f:6f:
53:02:47:db:28:d0:dc:87:8f:26:ea:bf:dc:9c:e0:
28:81:52:6f:92:96:6d:f2:8f:e2:63:98:d2:e9:f1:
f5:53:58:12:58:fc:ea:a8:3f:f1:84:b3:2e:c4:57:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F7:4D:48:1D:51:97:1A:9E:DC:B0:0C:32:BC:D9:E9:0A:5F:79:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26E2F55ED3F611EFB0A3F164762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.26.0/24
Signature Algorithm: sha256WithRSAEncryption
81:89:8d:43:f9:e5:f7:6c:26:07:4c:1c:56:80:52:3c:a3:b7:
59:66:42:78:8c:0a:42:cf:c8:61:b0:93:6b:e8:db:2c:60:b6:
f5:27:f2:41:46:75:e5:21:37:dd:bb:b3:8e:08:b0:26:b5:db:
0c:b0:7b:4a:18:37:34:ac:08:77:52:8f:d2:b7:ea:4b:f9:65:
34:c5:fe:e2:1b:aa:5c:e7:1d:77:a4:28:8c:0b:31:55:a1:5a:
5d:91:67:7d:80:08:09:09:9d:81:2d:f6:13:9c:c3:d7:52:6a:
63:2c:a8:e6:33:7e:c6:10:b9:65:ef:2c:a3:95:31:18:ff:c3:
fb:c0:2b:b5:2b:3c:ec:30:5b:56:ee:96:fb:7a:61:54:23:f4:
4a:ef:c3:d6:26:78:c6:48:09:2d:ce:72:89:16:f2:67:1f:77:
3c:28:c4:c7:93:e6:5b:f6:a5:cf:f3:37:ea:f1:47:9c:57:53:
04:50:e7:61:8f:82:3e:a2:cf:b6:59:b2:44:28:2e:c1:cf:7f:
f7:56:16:1b:09:3c:35:db:8b:04:51:1b:fc:47:69:66:b5:3d:
b2:13:a7:43:f6:77:5c:cf:e0:11:da:b6:1e:4c:a9:56:93:fd:
c3:27:37:48:45:29:64:3c:6d:17:3f:c3:fa:03:2c:a7:4d:fd:
16:34:54:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:24 2025 by rpki-client