Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/731B3476DC9411EFBDB7B4A4762E951A.roa
File: 731B3476DC9411EFBDB7B4A4762E951A.roa (raw, json)
Hash identifier: xyk8XKzM1AstQqavKyVmDUrZsEaiReoMbCUlDeKd/FY=
Subject key identifier: 84:8E:68:29:BF:59:86:F6:5E:EC:9F:46:A8:FA:A7:3E:30:F4:30:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B97
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/731B3476DC9411EFBDB7B4A4762E951A.roa
Signing time: Mon 27 Jan 2025 09:52:42 +0000
ROA not before: Mon 27 Jan 2025 09:52:38 +0000
ROA not after: Sat 08 Feb 2025 09:52:38 +0000
asID: 5065
IP address blocks: 154.212.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84887 (0x14b97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 09:52:38 2025 GMT
Not After : Feb 8 09:52:38 2025 GMT
Subject: CN=6797576a-230f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:0b:e9:d8:51:55:72:97:8c:b1:7b:0d:10:
6e:6f:37:40:16:f9:0f:c3:ed:5c:5e:2b:eb:46:e8:
6d:e0:f0:94:fa:ec:e8:3c:97:9d:31:dc:b6:4a:30:
75:5c:2f:de:c0:2a:46:be:f4:3e:b2:4a:38:1a:a6:
d7:4c:01:88:bd:51:83:55:f5:d3:3b:6d:74:52:45:
bd:03:80:23:19:02:1f:90:dc:4c:9b:60:1c:47:f5:
d3:b9:e5:e3:3f:6d:f2:8c:63:4f:66:6d:1c:31:0c:
61:7b:95:a8:7d:31:3a:c1:05:c3:6c:1c:8a:3e:98:
a7:fe:ad:2c:16:a5:94:61:9b:04:7c:73:88:29:ac:
07:44:b1:9e:4e:99:e6:14:a5:40:9f:ef:3d:32:05:
86:d0:b4:a7:a7:a1:c5:40:f4:03:d2:6a:5d:ba:37:
12:fd:8c:28:b7:93:cb:d0:10:af:9a:a9:65:40:77:
0c:75:84:16:a8:d3:27:a9:c5:52:4d:ed:e6:69:07:
51:97:e6:73:4e:da:bc:24:cc:e3:f5:ee:e2:e0:a9:
89:26:3d:22:83:b3:f4:e3:5d:4f:5f:96:68:63:f7:
f1:12:10:83:81:aa:ef:7a:c8:b9:db:ba:84:f8:db:
61:23:f1:4a:c6:47:39:b5:16:e6:1c:90:49:81:d6:
f7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8E:68:29:BF:59:86:F6:5E:EC:9F:46:A8:FA:A7:3E:30:F4:30:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/731B3476DC9411EFBDB7B4A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.26.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:36:fb:c2:7a:32:e7:98:97:94:24:8e:64:ad:e6:b4:f0:07:
69:81:a4:55:d5:8b:95:ff:77:ca:74:ab:34:f8:b3:56:29:bd:
14:2a:36:3e:9d:fb:cd:20:61:82:be:99:07:ae:60:ee:bd:e5:
34:b9:b2:06:d4:e1:b2:9b:8c:2c:28:92:d0:c6:24:71:a5:e1:
99:f3:62:3b:1a:5c:f5:4e:18:52:32:86:03:d1:25:65:c7:4b:
6a:eb:78:32:a5:cd:32:5c:49:3b:0d:65:80:00:30:7c:ab:96:
1a:ea:5e:b9:79:2b:4f:ab:8f:9a:5b:be:8e:5e:a5:57:02:66:
6c:bb:1e:11:0c:0d:20:be:73:49:91:cf:47:11:1f:b9:85:89:
2a:24:17:f1:f7:57:61:06:a5:2a:a3:40:a6:c5:e3:98:b1:f9:
af:6e:6c:77:95:3a:5f:d2:42:2a:12:9b:4e:bb:ce:6d:5c:44:
81:5c:df:47:68:01:ac:c1:b4:b3:07:b9:8e:f5:7a:3d:07:bb:
d5:dc:e3:b6:f2:11:bb:35:2b:be:ee:20:04:23:df:5c:cf:a0:
0e:e7:16:83:05:44:67:81:07:db:2b:00:08:f5:52:82:20:c3:
bd:f4:49:1e:4b:ad:76:32:c9:68:c3:ca:10:34:a1:43:a7:49:
28:4a:9e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:25 2025 by rpki-client