Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/278DE414DA4511EFAECB2889762E951A.roa
File: 278DE414DA4511EFAECB2889762E951A.roa (raw, json)
Hash identifier: ErfuGiuOI+p/5y9O7RLyahu68UwKB/qRcXohzw20ScE=
Subject key identifier: 33:7B:6C:F7:A2:F2:ED:91:24:B2:1A:3A:A5:FC:EB:6C:67:72:57:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014600
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/278DE414DA4511EFAECB2889762E951A.roa
Signing time: Fri 24 Jan 2025 11:20:02 +0000
ROA not before: Fri 24 Jan 2025 11:19:59 +0000
ROA not after: Wed 05 Mar 2025 11:19:59 +0000
asID: 202656
IP address blocks: 154.218.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83456 (0x14600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:19:59 2025 GMT
Not After : Mar 5 11:19:59 2025 GMT
Subject: CN=67937762-e1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:ac:0e:01:40:50:bc:80:5c:f3:f9:1d:bd:
a5:d4:fc:6c:43:98:43:73:c7:f5:48:91:e7:58:06:
26:71:b0:13:26:97:e1:e4:1c:ce:eb:1f:87:1c:2b:
0b:6a:fc:33:8f:ed:d4:74:24:a9:4f:ef:25:38:1c:
9e:f0:a4:83:ed:1c:ad:e7:5f:af:90:b1:73:85:4d:
f3:85:e6:50:57:fb:fa:6c:51:f0:67:08:8c:af:09:
91:d2:12:d9:26:a0:4f:ae:97:2a:6c:bb:1b:28:3a:
91:8e:52:83:29:6e:5d:99:64:dc:03:d0:55:11:97:
9b:b5:3f:4d:54:0c:b7:b5:9c:29:bf:2c:50:cc:1a:
c5:0c:a3:1e:c2:32:42:39:55:45:6b:b4:93:ce:d7:
35:fb:9f:c5:ef:41:6a:c4:f3:11:c2:cd:1b:8c:e1:
c8:c5:20:db:8e:eb:7e:22:26:43:18:ef:a9:37:4c:
95:f2:ec:a8:cf:6a:ce:8b:6c:52:6c:23:48:ff:00:
2b:67:2f:62:9a:75:bc:9b:18:64:0f:7b:05:f4:fd:
86:ce:d7:4d:ac:44:b3:67:01:05:bf:4d:32:c9:2e:
76:2f:35:cc:72:fa:f3:49:ac:5a:ae:f1:2e:a3:ed:
7a:4b:26:0b:65:3c:c7:6f:88:dd:97:e6:26:af:b4:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7B:6C:F7:A2:F2:ED:91:24:B2:1A:3A:A5:FC:EB:6C:67:72:57:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/278DE414DA4511EFAECB2889762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.26.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b4:c4:f4:73:d1:48:93:93:b3:61:0b:c7:43:24:eb:b6:da:
9e:d5:cf:10:c7:90:88:84:9b:51:af:75:50:2f:4e:e1:34:74:
59:07:30:2b:1d:18:02:94:69:6d:77:ce:5e:aa:53:5f:61:d5:
d1:17:5c:dc:12:72:19:61:df:be:6d:93:ef:b2:ba:4f:4b:26:
9d:68:a4:22:b3:05:42:72:7d:8b:cf:ac:95:3c:cc:e1:13:5f:
21:ab:42:6f:89:60:3f:6a:d6:65:89:1a:f6:9e:8f:57:3b:47:
34:1a:a3:36:b5:ae:48:15:fb:8c:b0:c7:ff:69:5f:ac:00:b0:
c5:0b:43:49:78:ec:53:59:bd:af:23:b9:88:31:12:0c:86:4e:
75:51:2b:65:d5:d8:c3:1f:3f:26:1a:c8:7c:6d:86:a9:69:5d:
2f:4b:38:2f:47:11:a1:3a:d7:fe:cf:17:41:40:83:ec:59:76:
27:d8:77:ae:3a:22:fa:4a:6a:a1:41:d7:a7:b0:61:90:03:48:
bd:60:02:e1:8f:dc:31:e9:6e:ed:61:f0:83:ce:37:91:32:01:
32:68:fb:a0:3e:61:1f:02:71:24:32:8b:9b:a9:97:f3:58:ee:
84:55:a9:fb:98:bb:10:57:e4:44:b6:fc:46:2b:4b:5f:b6:84:
0e:9b:cc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:54 2025 by rpki-client