Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51086E8003F911F08C744A6D762E951A.roa
File: 51086E8003F911F08C744A6D762E951A.roa (raw, json)
Hash identifier: rV4e4b8lzH6fSUjXoWq8uC41+ZndiNzZ3DLdIdsRd1Y=
Subject key identifier: 82:F3:0D:5D:6A:DB:B4:E8:4D:D6:90:E0:79:2F:A0:FC:9D:59:85:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017492
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51086E8003F911F08C744A6D762E951A.roa
Signing time: Tue 18 Mar 2025 13:02:59 +0000
ROA not before: Tue 18 Mar 2025 13:02:55 +0000
ROA not after: Sun 27 Apr 2025 13:02:55 +0000
asID: 48031
IP address blocks: 154.92.12.0/24 maxlen: 24
154.92.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95378 (0x17492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 13:02:55 2025 GMT
Not After : Apr 27 13:02:55 2025 GMT
Subject: CN=67d96f03-4b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:9b:9c:07:88:78:23:4d:55:21:58:05:50:
e8:de:ba:94:4a:2d:72:cd:dd:e9:70:47:b1:be:bb:
0f:d5:49:25:82:7c:b4:fa:06:ca:cf:5c:30:3f:2a:
1a:4b:9c:9b:a0:49:19:0e:8f:df:cf:c1:9d:6c:d6:
90:49:11:a3:98:db:3c:56:de:e8:58:6c:55:68:50:
c8:29:8d:3c:66:0b:5f:3e:6f:97:38:ff:f2:0d:af:
d4:28:8e:fa:51:36:cf:03:70:0b:01:14:27:c6:ae:
b5:0e:99:44:e5:3f:82:ab:5c:56:c5:52:94:92:88:
b6:16:60:b5:9b:6d:e0:9b:4d:0b:10:b5:88:e7:8d:
9e:e2:c5:be:d0:94:8e:c1:82:e7:59:57:37:61:92:
cf:66:3c:c2:23:dc:b0:c8:7a:dc:47:e9:f3:91:5a:
90:32:b4:19:37:dd:34:f7:43:1b:96:14:f9:ec:6b:
08:cc:4f:39:e7:e8:1b:82:99:de:ff:57:cc:95:e0:
0f:67:32:ba:04:bb:2d:81:9e:5f:75:57:b2:6a:06:
95:e8:b8:1f:b9:4a:0f:e4:16:69:dc:51:ed:75:50:
47:6a:df:63:83:79:68:6e:77:09:a9:05:c1:da:9d:
16:25:4c:8e:a9:33:31:12:20:57:ce:fe:9d:88:8c:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F3:0D:5D:6A:DB:B4:E8:4D:D6:90:E0:79:2F:A0:FC:9D:59:85:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51086E8003F911F08C744A6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.12.0/23
Signature Algorithm: sha256WithRSAEncryption
63:1e:e2:08:a8:b0:46:db:7e:1d:61:d4:09:f1:26:16:5d:b0:
b6:e0:e9:29:32:07:74:aa:c7:70:58:94:4c:43:79:c4:84:92:
fb:d7:97:f2:13:88:5a:a1:18:d0:90:51:46:ab:ae:3d:32:15:
22:0a:fc:0c:8a:00:96:6c:77:88:9c:67:88:c9:3d:35:9d:fc:
2d:19:10:4d:24:e5:af:d1:d7:61:0d:fc:83:17:5d:5e:8f:6b:
1a:70:91:ef:d3:19:df:33:31:fc:72:f5:57:16:ef:22:f0:e6:
a3:ba:d2:1c:5f:82:3b:c3:cc:c3:93:53:f7:5f:e6:2a:a6:ac:
9e:f7:91:3d:74:91:87:c6:bb:e7:a9:5e:67:47:b9:f8:d2:f6:
73:6f:33:2d:21:59:30:49:71:3a:4e:34:a5:16:9f:4e:2b:d5:
44:b5:5e:60:a7:39:c9:d3:f9:d4:8c:31:6f:17:35:80:69:89:
a5:8e:00:04:87:81:cf:b5:22:13:87:56:15:b6:ec:50:36:27:
78:dd:54:99:d2:b8:83:29:f8:35:7d:24:d9:d4:7d:4a:dc:f7:
2b:af:4e:82:c1:32:9c:30:bf:52:5b:9b:b5:34:25:bb:5b:7c:
48:f5:e2:1b:1a:6d:5e:fb:8d:26:a7:03:5c:cf:77:3a:4c:4d:
6c:e5:6b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:36:38 2025 by rpki-client