Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E26AF4EED9C211EF998F6491762E951A.roa
File: E26AF4EED9C211EF998F6491762E951A.roa (raw, json)
Hash identifier: 8l+4JHbBlItIxiDtikfNbvgzQRN3m+fnerU64CEk240=
Subject key identifier: 26:8C:0E:E5:B2:40:51:E6:97:4E:E3:2C:38:E3:42:C2:ED:7F:67:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E26AF4EED9C211EF998F6491762E951A.roa
Signing time: Thu 23 Jan 2025 19:47:32 +0000
ROA not before: Fri 24 Jan 2025 19:47:28 +0000
ROA not after: Fri 28 Feb 2025 19:47:28 +0000
asID: 62240
IP address blocks: 154.196.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82600 (0x142a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 19:47:28 2025 GMT
Not After : Feb 28 19:47:28 2025 GMT
Subject: CN=67929cd4-c558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:2d:b7:7f:a8:9a:26:33:a2:87:dd:18:d4:
02:00:62:30:16:e4:f9:9f:5e:e7:60:48:94:df:b7:
fa:5d:e5:ad:7f:43:71:04:2d:76:5a:eb:81:97:e1:
2f:70:a9:b5:5c:35:22:32:45:6e:3a:5c:1c:4e:ad:
e1:f6:2a:7f:5c:f9:19:c5:09:d1:4e:03:4b:e7:a0:
fe:6d:18:ee:66:b6:4c:41:7a:80:8a:8d:03:c7:0f:
ea:f2:57:31:40:ca:33:6a:22:11:85:70:f0:1c:6c:
79:f0:9e:2c:c8:86:71:e0:2b:35:88:f3:04:ff:10:
90:c9:2a:32:9e:d2:e6:29:aa:43:16:07:d0:a8:46:
1f:72:87:1c:0c:db:4b:16:5c:e0:e7:ad:c1:e1:f9:
1b:c1:ee:24:19:f4:b6:63:60:af:13:1f:b6:19:e4:
1e:9e:86:ef:e4:70:e4:6a:78:dd:0e:ae:80:a3:cb:
4d:96:b3:80:b8:6c:9d:df:37:1a:f5:52:8d:9e:73:
14:52:1e:84:4c:e6:3e:4c:61:48:17:aa:25:89:ed:
b7:16:00:d1:6c:12:cd:b9:5a:3a:01:a2:d7:ee:66:
da:cd:9a:9c:9f:79:49:20:97:ae:99:03:d7:a2:90:
ce:4d:1c:50:ec:11:37:e6:77:de:cf:5d:5e:70:1e:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8C:0E:E5:B2:40:51:E6:97:4E:E3:2C:38:E3:42:C2:ED:7F:67:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E26AF4EED9C211EF998F6491762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.32.0/24
Signature Algorithm: sha256WithRSAEncryption
be:e4:85:cf:6d:ef:65:8c:29:5e:4a:03:c8:7a:e3:73:94:ad:
d6:96:f5:fe:48:a7:a2:32:db:90:05:16:a2:0d:25:cc:bc:ba:
66:f9:5c:9d:d9:90:6d:1c:af:5b:ad:b3:7a:13:66:40:16:d5:
0b:e6:49:0d:b7:9a:fa:40:26:22:86:f3:f5:e3:c2:05:dd:14:
16:45:6c:57:15:1d:25:03:a3:e0:ef:50:65:0d:01:aa:90:af:
42:39:7c:00:aa:b9:da:9d:43:4f:39:d7:55:19:a7:f9:59:3f:
1c:bb:7d:68:f0:fb:dd:75:6d:5e:d9:4b:2c:6c:f0:ff:d3:14:
6d:e3:d5:6d:b9:91:40:91:e7:da:3c:30:45:61:77:17:30:9e:
31:59:f9:9c:d1:61:d5:1b:79:36:f6:a4:39:43:a3:a1:36:3c:
d0:fd:2e:12:d9:3c:b5:5d:e1:ad:af:ae:16:e4:23:00:c9:64:
d4:82:cc:f2:a1:7e:0c:be:c0:c4:8c:7d:05:9e:c0:4c:34:e2:
8f:91:6b:f1:64:db:f2:25:39:8c:55:b2:99:a9:42:54:e7:0f:
83:be:0e:91:d9:ca:c5:8b:65:4b:81:8b:11:c8:78:bb:a0:73:
49:35:1d:92:1a:c5:e3:37:c1:af:c0:ec:27:cd:a5:04:61:9b:
6e:bc:28:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:04 2025 by rpki-client