Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51376728C35111EFA16B1CA1762E951A.roa
File: 51376728C35111EFA16B1CA1762E951A.roa (raw, json)
Hash identifier: KeRaeoMOFDLAydsqXbEkiSUqZlJSz58w+S6bOhk2QP4=
Subject key identifier: 3C:73:D7:19:1E:88:31:B0:A6:D2:77:C7:27:E6:22:69:13:B2:E7:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51376728C35111EFA16B1CA1762E951A.roa
Signing time: Thu 26 Dec 2024 06:19:09 +0000
ROA not before: Thu 26 Dec 2024 06:19:06 +0000
ROA not after: Sun 12 Dec 2027 06:19:06 +0000
asID: 17561
IP address blocks: 154.95.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75179 (0x125ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:19:06 2024 GMT
Not After : Dec 12 06:19:06 2027 GMT
Subject: CN=676cf55d-b15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:88:ce:21:be:33:dd:83:38:e8:40:be:8f:
c8:5f:36:94:8b:20:3a:1e:e9:c1:77:db:1b:c0:73:
55:ae:7e:c1:66:8b:4f:d5:a3:85:e8:3d:da:2c:01:
97:94:be:9c:7f:2c:48:e3:86:1d:91:a5:24:ea:36:
86:42:41:61:0c:17:88:f4:6b:6c:f4:52:6f:3b:23:
d3:7a:d2:73:ac:b3:bf:4d:39:1e:84:b6:b5:c2:3c:
a9:5a:01:a7:41:ec:61:18:bd:61:0a:8b:8a:92:c3:
5d:29:d3:89:1e:a6:6f:02:d8:d3:8d:ff:b1:90:2a:
86:d1:4e:61:19:b0:14:ce:f4:0e:4b:28:ca:b8:08:
5d:81:a9:11:07:de:f4:af:59:20:88:cc:f6:0a:6b:
de:0f:fc:d8:e0:22:91:2e:3c:cb:be:e0:18:cb:8a:
8e:89:49:ba:07:fc:71:a2:23:b5:2b:ac:e7:21:e8:
02:5b:56:2c:7b:18:1b:bd:80:19:c5:ec:f9:bf:40:
04:dd:4b:b2:14:23:9a:22:33:8e:db:0a:3a:17:aa:
c1:4c:be:f7:86:fb:df:d2:f7:92:85:52:8d:ff:ce:
95:70:22:a6:9f:5f:ec:7b:a7:4f:93:be:58:69:c0:
e6:c4:7b:5f:03:fa:30:50:9c:20:60:0c:dd:24:83:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:73:D7:19:1E:88:31:B0:A6:D2:77:C7:27:E6:22:69:13:B2:E7:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51376728C35111EFA16B1CA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:8a:23:8f:2b:a6:7f:d9:b3:4d:7b:88:3e:e0:66:93:e6:49:
d6:d2:c7:05:f3:f4:e3:4d:64:03:2b:c7:ca:ff:79:36:36:42:
57:c0:b0:63:29:30:7e:52:33:56:f5:9b:23:72:9a:32:bf:f5:
40:c4:5e:b5:bb:b3:70:62:a2:57:b0:47:51:d0:1f:5d:fc:09:
25:a5:cc:c4:0f:42:ec:29:85:2d:19:34:77:d6:4a:0e:89:64:
37:0f:13:35:f5:98:d4:89:75:68:8d:68:29:ab:5c:8f:0a:4e:
c3:df:d3:bc:c8:d2:c3:f3:b3:94:19:90:71:8b:c5:5e:22:03:
34:eb:70:f2:da:5c:80:df:b4:25:d8:a9:d1:19:bf:53:10:f1:
2f:31:a4:df:34:9c:94:f7:b8:3a:87:52:64:5d:6b:68:67:b0:
03:d8:b8:56:1f:ef:e4:e8:dd:a3:a8:6f:bb:82:e5:9c:5d:70:
9f:77:40:a8:97:65:66:a4:b3:7a:79:1c:4f:c6:d6:b6:65:52:
bb:4a:ad:a4:ea:3f:1c:62:de:ae:17:e8:de:75:20:b7:bc:54:
10:ff:d8:f3:28:cd:ee:42:7e:32:f2:f9:36:d3:b8:2d:d9:80:
84:66:21:82:f2:d2:04:bf:e4:25:c8:29:83:50:75:49:48:5f:
7c:8f:92:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASWrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDYxOTA2WhcNMjcxMjEyMDYxOTA2WjAYMRYw
FAYDVQQDEw02NzZjZjU1ZC1iMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs8aIziG+M92DOOhAvo/IXzaUiyA6HunBd9sbwHNVrn7BZotP1aOF6D3a
LAGXlL6cfyxI44YdkaUk6jaGQkFhDBeI9Gts9FJvOyPTetJzrLO/TTkehLa1wjyp
WgGnQexhGL1hCouKksNdKdOJHqZvAtjTjf+xkCqG0U5hGbAUzvQOSyjKuAhdgakR
B970r1kgiMz2CmveD/zY4CKRLjzLvuAYy4qOiUm6B/xxoiO1K6znIegCW1Ysexgb
vYAZxez5v0AE3UuyFCOaIjOO2wo6F6rBTL73hvvf0veShVKN/86VcCKmn1/se6dP
k75YacDmxHtfA/owUJwgYAzdJIMMFwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDxz
1xkeiDGwptJ3xyfmImkTsuc9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MTM3NjcyOEMzNTExMUVGQTE2QjFDQTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml8yMA0GCSqGSIb3DQEB
CwUAA4IBAQCgiiOPK6Z/2bNNe4g+4GaT5knW0scF8/TjTWQDK8fK/3k2NkJXwLBj
KTB+UjNW9Zsjcpoyv/VAxF61u7NwYqJXsEdR0B9d/AklpczED0LsKYUtGTR31koO
iWQ3DxM19ZjUiXVojWgpq1yPCk7D39O8yNLD87OUGZBxi8VeIgM063Dy2lyA37Ql
2KnRGb9TEPEvMaTfNJyU97g6h1JkXWtoZ7AD2LhWH+/k6N2jqG+7guWcXXCfd0Co
l2VmpLN6eRxPxta2ZVK7Sq2k6j8cYt6uF+jedSC3vFQQ/9jzKM3uQn4y8vk207gt
2YCEZiGC8tIEv+QlyCmDUHVJSF98j5II
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:41 2025 by rpki-client