Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/457F1B84F5A011EF8212CD49762E951A.roa
File: 457F1B84F5A011EF8212CD49762E951A.roa (raw, json)
Hash identifier: iE168J6iAkyR5r6BsGl3mpTb176oQKl3RAMRmNEgXdk=
Subject key identifier: 95:26:8B:FD:B3:A3:91:9B:89:BF:65:C3:68:8B:7B:C5:8B:AE:0B:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/457F1B84F5A011EF8212CD49762E951A.roa
Signing time: Fri 28 Feb 2025 06:50:18 +0000
ROA not before: Fri 28 Feb 2025 06:50:14 +0000
ROA not after: Fri 29 Aug 2025 06:50:14 +0000
asID: 45474
IP address blocks: 154.197.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92647 (0x169e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 06:50:14 2025 GMT
Not After : Aug 29 06:50:14 2025 GMT
Subject: CN=67c15caa-68f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:a1:0a:75:b3:53:ea:e4:c3:2f:9a:43:5f:
78:87:5b:7a:74:9c:b2:92:b2:78:ee:bf:f6:d7:83:
40:fe:72:99:d7:9d:dd:1b:6d:a9:70:71:1c:32:34:
b9:06:66:03:b4:d2:33:46:16:16:b4:6a:5d:24:35:
c1:0c:14:2e:90:54:89:6e:b6:0d:a6:d0:0f:aa:26:
73:e8:00:9f:f2:1a:ff:e7:c9:d8:ed:ae:51:2c:b2:
07:e4:a0:38:c7:10:c5:36:b0:b1:55:05:36:96:bb:
4d:a0:1a:b5:86:bb:28:d9:e6:48:45:72:be:99:4c:
14:b3:e8:88:29:e7:bd:b6:00:2e:36:c8:84:87:b9:
11:2c:75:49:1c:5f:46:75:5d:ce:36:51:27:32:c7:
f9:3a:f1:6a:db:0e:58:44:7a:e8:fb:8b:56:b6:c6:
a5:7d:0c:b1:b4:bc:c9:74:90:58:1a:87:eb:df:7d:
0e:7a:79:5b:a5:7d:6c:90:df:57:12:bf:1c:c8:3f:
0c:2f:b9:57:13:52:31:70:b2:84:0f:8d:46:61:be:
64:54:37:48:9a:c6:73:2d:6f:e6:83:8b:bf:96:b6:
53:2b:56:94:05:4b:41:40:8a:30:d3:0c:ad:e0:73:
02:ba:c2:55:4a:f6:03:b4:e5:4c:5e:1c:c4:95:37:
9e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:26:8B:FD:B3:A3:91:9B:89:BF:65:C3:68:8B:7B:C5:8B:AE:0B:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/457F1B84F5A011EF8212CD49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.51.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ba:16:88:d2:ed:ae:48:2f:3e:6c:56:a8:75:ee:6b:a4:ba:
6f:10:48:a4:72:4b:26:57:7c:57:d1:eb:11:1d:16:41:e2:a7:
b8:55:d7:bb:93:e9:b9:39:89:7c:ce:c1:46:65:b7:1c:9d:a0:
be:b1:f1:d1:30:73:9e:27:84:73:8e:bd:95:6e:cd:1f:54:c7:
59:e1:2b:1e:c3:74:7d:24:ab:43:61:02:00:77:84:d2:b4:ff:
19:c9:57:1a:6c:88:ec:80:ad:12:4e:1f:c5:b5:bd:9c:0e:4a:
57:90:37:a4:6d:81:10:b7:34:fd:58:5a:df:91:55:0a:fb:52:
73:60:b7:15:75:f6:dd:04:28:ae:42:79:8e:5e:4e:bd:a9:96:
3d:37:18:02:7f:6e:db:24:06:d9:10:82:13:d2:2a:56:fb:41:
c3:b3:24:6d:e9:ac:2f:32:71:97:fd:82:00:08:92:99:3d:dd:
7f:51:24:10:78:a0:25:5a:e7:1d:90:62:e3:27:1a:5b:33:1e:
e8:15:a5:92:72:6a:3c:e7:e4:19:e9:70:5c:88:b8:93:9f:90:
2c:c9:5b:c8:1d:be:4f:f4:b4:b7:6b:15:ca:39:a6:3c:c8:c8:
f2:7d:ed:f6:9c:5c:38:bc:d9:34:ac:6e:cc:4b:39:05:6b:5f:
4f:05:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:35 2025 by rpki-client