Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/426F9636C32211EF9E3F5761762E951A.roa
File: 426F9636C32211EF9E3F5761762E951A.roa (raw, json)
Hash identifier: 8KJgSp5N57jzvSNrXR6cHrahyTSSPsaUOzssE4IF8rA=
Subject key identifier: A7:33:B4:5F:63:8B:7B:34:27:6A:8A:F0:68:89:3D:A7:A3:57:FF:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012576
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/426F9636C32211EF9E3F5761762E951A.roa
Signing time: Thu 26 Dec 2024 00:42:18 +0000
ROA not before: Thu 26 Dec 2024 00:00:15 +0000
ROA not after: Sat 01 Mar 2025 00:00:15 +0000
asID: 984
IP address blocks: 154.92.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75126 (0x12576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 00:00:15 2024 GMT
Not After : Mar 1 00:00:15 2025 GMT
Subject: CN=676ca66a-8e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:28:bb:73:e7:1d:24:49:fd:93:62:bf:e5:
74:92:32:e9:de:0a:3c:39:c2:2c:55:ac:fb:22:a1:
2b:ed:f7:18:50:63:17:1d:23:37:71:38:20:d2:77:
85:fe:bf:e3:e2:3a:2e:f8:c1:a7:f7:b8:a2:06:80:
0a:17:24:72:2f:5b:81:2d:44:2d:50:12:b7:f1:4a:
c5:f8:75:aa:fe:8c:9c:03:28:26:42:0b:b9:55:14:
7c:94:d2:02:05:e6:db:f0:68:8a:b8:35:f2:d7:46:
b2:9e:06:db:7c:3e:fe:d7:dd:50:9c:fc:09:45:d7:
ed:20:61:16:b3:f8:1e:f9:a4:32:35:a8:a0:f1:91:
b7:98:13:d0:2a:b6:8a:e7:d3:41:0f:92:25:a9:c8:
de:bc:6a:54:7e:55:b6:01:11:11:a0:79:7b:26:3f:
91:40:af:29:7d:f1:f4:e4:c3:8c:b6:2a:29:1f:04:
0d:68:21:63:6b:eb:45:1c:5f:c5:30:2b:6b:ed:63:
da:43:39:24:be:8b:5b:8a:b5:f8:f6:26:16:57:a0:
3f:36:50:90:0d:a5:11:07:7c:5c:39:e9:3f:e4:37:
f1:3c:23:dd:65:b8:7f:fd:10:63:c6:bf:94:9a:47:
b1:6b:e9:4c:82:f6:10:1b:ed:85:44:78:a4:94:af:
ee:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:33:B4:5F:63:8B:7B:34:27:6A:8A:F0:68:89:3D:A7:A3:57:FF:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/426F9636C32211EF9E3F5761762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.128.0/17
Signature Algorithm: sha256WithRSAEncryption
11:31:26:11:43:a2:88:16:5d:04:fd:9d:89:fc:21:ce:3b:92:
20:7c:38:5e:ff:4e:93:fc:b2:05:3f:db:6e:d4:55:40:40:31:
2b:8f:c8:3e:d8:b2:b8:d7:6a:10:4b:61:46:58:42:e6:90:ec:
7e:57:d6:3d:46:a7:51:e7:c7:e8:59:3c:f3:ab:e2:48:21:57:
8f:59:2a:19:40:00:36:b3:f2:39:bd:c5:78:ea:af:01:52:61:
d1:db:ec:27:9b:32:18:7c:ee:ad:3a:49:b1:3c:95:a7:41:e1:
5e:74:79:97:5e:59:d2:3c:a2:ab:54:16:84:55:8a:52:23:c0:
d8:cb:9c:13:d1:79:fd:e9:11:40:cb:9f:c0:e7:f6:21:7f:5a:
3d:ba:e9:5e:c2:d9:0a:78:fe:b0:e9:b4:f5:34:e1:3c:98:ad:
44:aa:3b:a0:6c:d4:5b:32:10:44:d3:09:1b:e5:24:a5:06:fb:
be:bf:2e:5d:1d:3d:70:2c:58:8a:0c:f2:27:4c:c0:69:64:c9:
c1:69:09:66:2f:df:91:2a:e7:20:74:32:17:6d:60:a6:58:fc:
31:6f:0a:c5:4e:9d:c4:6a:df:f5:f2:d3:8e:64:9d:d6:78:b5:
13:40:6d:00:2e:46:a7:98:de:a4:3d:e1:c6:0d:7b:bc:9f:a0:
cf:f3:70:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:34:14 2025 by rpki-client