Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2E26974D3D511EFB0FC9B96762E951A.roa
File: C2E26974D3D511EFB0FC9B96762E951A.roa (raw, json)
Hash identifier: vjYYbwmOhc6IVHDSPrSsDfYBbM1cE8MSjpNCrgLmZvk=
Subject key identifier: 3B:29:07:6B:D5:D3:1D:1A:F5:4B:D4:31:18:CD:16:7C:89:43:07:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2E26974D3D511EFB0FC9B96762E951A.roa
Signing time: Thu 16 Jan 2025 06:47:32 +0000
ROA not before: Thu 16 Jan 2025 06:47:29 +0000
ROA not after: Sat 01 Feb 2025 06:47:29 +0000
asID: 18229
IP address blocks: 154.210.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80832 (0x13bc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 06:47:29 2025 GMT
Not After : Feb 1 06:47:29 2025 GMT
Subject: CN=6788ab84-60ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:10:34:32:0a:09:86:e7:18:6e:a8:88:53:
08:88:ae:b6:84:1d:d2:c2:c3:76:8e:c8:39:7e:e5:
6b:9b:99:9e:c3:16:0f:95:79:06:a4:15:b8:a6:24:
ee:90:e0:68:b5:63:c2:ff:b0:81:24:be:b6:56:61:
c6:c1:72:20:79:69:85:86:26:12:6f:06:43:f0:fe:
2e:fd:d2:55:d3:75:44:4e:24:a4:71:e7:9b:63:ad:
48:9b:19:d5:e6:c8:78:1f:b6:e9:1b:fc:d0:f4:c1:
50:6b:2a:d8:0a:2d:35:72:16:cc:3e:90:29:b3:a5:
3e:a1:1b:2a:41:74:3f:0d:94:33:d7:21:18:92:12:
ef:07:a8:62:2a:74:ce:b8:ef:07:e5:79:b2:51:d2:
55:dd:f2:fe:0f:cc:ef:36:3a:15:af:e2:aa:b8:8f:
68:04:86:93:a2:40:43:61:c5:ff:36:15:09:58:ef:
07:04:17:9f:6f:88:15:2e:bf:4f:fa:ef:00:77:ba:
b0:9e:f6:19:4b:ef:68:b0:fd:41:58:3e:5b:63:d1:
82:44:6e:5a:11:2e:7b:e8:af:28:a4:1d:c0:f1:f6:
38:c1:41:01:a6:fd:15:4b:7a:ce:0f:96:31:27:3d:
b0:48:56:b3:05:aa:04:7c:cf:14:d5:33:8a:67:6e:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:29:07:6B:D5:D3:1D:1A:F5:4B:D4:31:18:CD:16:7C:89:43:07:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2E26974D3D511EFB0FC9B96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.226.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:b9:4b:4a:46:e0:35:e9:ae:cb:ea:42:e7:f8:bb:04:fa:38:
69:39:30:29:48:99:58:50:8d:1c:10:2c:c9:8a:2e:a8:53:d2:
e4:71:8d:7d:7e:c8:cb:1d:12:4a:db:f6:af:38:5c:fc:69:db:
88:b8:f1:1f:15:dc:c1:15:d0:3d:68:05:85:6c:f6:19:fc:08:
d6:a4:2e:f7:d1:4c:0f:f1:c5:e5:aa:26:f0:d3:95:4f:22:18:
3c:22:08:f0:d4:cc:bb:ed:aa:e4:38:0b:95:ad:38:a6:f2:71:
40:57:bd:0e:35:52:60:d5:e4:6a:6d:d2:4a:eb:77:6f:d4:33:
73:d7:2b:00:74:ac:ec:43:33:3e:71:30:5f:70:c0:e7:5c:25:
d2:1b:08:3e:63:e4:c0:5e:7a:b7:67:b4:79:2c:30:ab:e2:8c:
8b:3c:89:05:58:4b:34:4c:0b:9c:8a:3c:7f:1f:48:a0:84:8e:
8b:04:4a:c6:37:23:27:a8:06:2f:1c:cd:ec:36:2f:91:82:4c:
11:49:49:bd:08:27:81:5f:31:e2:61:9c:fe:8c:42:b1:46:b9:
7e:b0:dc:37:36:ac:ee:0a:21:71:cc:fe:27:1e:c8:bf:c7:30:
81:f8:70:4f:db:67:2e:ba:5e:01:37:e7:b0:07:ca:13:dd:a9:
7a:3b:88:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:43:03 2025 by rpki-client