Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EED190EC6C711EF8395B995762E951A.roa
File: 3EED190EC6C711EF8395B995762E951A.roa (raw, json)
Hash identifier: ADB24/yPc194F/3xpkJYUqi4oKOu96nMaQmwmBqj9TA=
Subject key identifier: 7E:36:78:F1:97:BF:9E:4C:06:C2:8A:64:C3:36:A9:BA:93:D2:7D:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0130D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EED190EC6C711EF8395B995762E951A.roa
Signing time: Mon 30 Dec 2024 16:00:53 +0000
ROA not before: Mon 30 Dec 2024 16:00:49 +0000
ROA not after: Fri 14 Mar 2025 16:00:49 +0000
asID: 142002
IP address blocks: 154.83.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78034 (0x130d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 30 16:00:49 2024 GMT
Not After : Mar 14 16:00:49 2025 GMT
Subject: CN=6772c3b5-576f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:91:f3:9e:fb:fd:51:b8:c1:c9:7f:33:e4:
ae:4c:dc:bd:81:39:19:5b:22:0e:9d:52:7c:3c:c5:
57:2f:38:2d:e3:3f:2d:1c:07:a9:2e:fc:c2:af:d8:
58:ba:fe:4c:9b:bf:d7:62:d7:84:85:0d:b9:ab:21:
48:b5:ce:17:4a:58:a3:05:15:d9:67:87:e2:2d:31:
3b:11:a7:0a:0e:8f:8a:0f:25:db:d9:fa:f2:0b:16:
21:7e:7d:0d:4f:f0:d9:08:94:d0:ed:4d:b4:ad:c2:
d5:bb:6b:90:37:28:69:c3:70:4b:4a:e4:00:01:62:
1e:72:00:cc:51:92:c1:87:8a:35:61:6b:97:3b:46:
fc:61:67:f5:d5:4a:8b:95:ed:48:cc:39:02:73:12:
59:00:2b:a1:98:0a:5a:f9:d1:ca:79:bf:9e:bd:08:
2a:46:d5:06:dc:0d:ff:48:c6:74:a4:ba:bb:c9:e3:
ab:e0:a8:86:d0:08:4d:1c:54:78:ea:1d:0a:98:a8:
0e:73:f9:62:da:26:b2:98:20:04:21:57:24:63:dd:
82:04:4b:70:cf:3e:1f:06:39:9b:a6:74:26:6e:ee:
f3:58:74:73:d1:bd:43:13:28:2a:b1:64:a1:d0:a2:
39:43:db:6b:e7:78:82:a1:b6:e8:93:24:5c:c8:ae:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:36:78:F1:97:BF:9E:4C:06:C2:8A:64:C3:36:A9:BA:93:D2:7D:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EED190EC6C711EF8395B995762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.26.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:93:a1:0f:5a:8b:7c:e2:31:94:ab:7a:69:31:d7:72:53:2d:
78:4a:fe:c8:46:8f:ec:49:b7:b8:5b:10:1b:5f:f0:d8:2b:b4:
0a:4e:85:46:e8:86:c0:7a:1a:8b:00:18:cf:d1:c5:21:fc:3e:
28:96:c7:cf:9c:cf:2b:d7:49:5a:24:c7:dd:64:5d:ea:ef:6a:
ab:29:02:3f:40:f6:c1:49:5a:42:32:6e:79:2a:11:50:95:ac:
31:9b:23:fe:71:35:98:d3:19:96:6d:84:2a:ba:e4:dc:cc:aa:
b7:9e:c3:1c:05:1d:dc:d2:19:f9:31:3e:d8:d7:84:ad:81:31:
9c:3b:fe:20:2d:c6:80:61:ff:26:d4:d0:ab:39:d8:82:2e:fb:
16:2f:bb:82:46:fa:d3:46:94:bd:21:d9:67:77:43:74:cd:4d:
3a:5c:f7:07:d4:c6:04:70:3c:b4:31:a9:ad:82:72:bf:2b:ae:
13:de:4a:23:cd:ab:3a:58:75:50:24:75:29:17:28:76:27:6d:
48:f2:eb:ef:c7:49:19:2d:f6:dd:35:ae:d7:98:72:bf:5f:26:
c4:6e:56:d8:0e:eb:f9:84:a0:db:71:1d:83:39:a8:17:4c:b4:
90:7d:24:29:56:9b:7a:ef:fa:6e:d5:b4:fe:29:9a:8c:df:5b:
50:64:f3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:18 2025 by rpki-client