Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51C021C2C62011EFAA502570762E951A.roa
File: 51C021C2C62011EFAA502570762E951A.roa (raw, json)
Hash identifier: pSYI1WPq/O1UweLEYu9Y1yklIt/VBFD0ow62qClP+/k=
Subject key identifier: 65:0D:5F:E7:11:DF:64:B3:AD:AF:0F:E6:44:FE:1E:00:94:FE:6E:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51C021C2C62011EFAA502570762E951A.roa
Signing time: Sun 29 Dec 2024 20:05:58 +0000
ROA not before: Sun 29 Dec 2024 20:05:55 +0000
ROA not after: Sun 12 Dec 2027 20:05:55 +0000
asID: 17561
IP address blocks: 154.217.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77670 (0x12f66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:05:55 2024 GMT
Not After : Dec 12 20:05:55 2027 GMT
Subject: CN=6771aba6-25fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:ff:9e:e8:7f:38:45:4b:96:78:b9:dc:b8:
e0:eb:3c:84:86:46:79:b7:61:0a:2d:21:76:ca:2c:
63:89:a6:93:3d:e2:51:47:f0:e1:93:56:da:88:af:
a3:d6:7d:d0:ab:05:6a:69:b4:70:78:09:b3:d7:fd:
42:0d:00:ce:b9:bd:09:71:10:7a:11:a8:3a:7a:2b:
21:ee:aa:be:be:b2:a7:fb:35:c4:70:18:e3:56:5a:
28:4c:e6:b6:d9:c5:59:9e:00:2a:f0:ab:36:6b:06:
32:36:54:c1:96:15:01:00:37:96:3a:6c:bb:e5:73:
a5:56:c7:19:b7:6c:4c:6e:01:99:34:44:99:96:27:
c9:8c:9b:12:59:1f:f4:81:6b:36:b1:96:e9:c2:95:
5a:6c:95:cf:2d:e1:69:95:cd:1e:76:1c:f5:dc:75:
43:74:55:27:81:67:ab:cb:93:ed:da:64:95:0e:62:
bd:8c:39:59:fd:3f:36:17:2b:57:2a:5b:0a:85:14:
5a:de:27:d7:2d:47:9c:87:51:11:b8:2b:f7:f3:7e:
05:c9:2a:4a:5f:b7:b9:8a:9d:29:08:63:19:10:27:
3e:26:00:c0:b3:7c:b9:b7:24:93:5a:4e:4d:31:95:
67:72:67:d1:7d:b8:bc:92:38:9d:ba:7a:a1:82:6a:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0D:5F:E7:11:DF:64:B3:AD:AF:0F:E6:44:FE:1E:00:94:FE:6E:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51C021C2C62011EFAA502570762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.150.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:c4:34:26:77:2c:04:d3:e9:3c:96:c5:f9:18:f6:31:a0:5e:
c6:02:8d:3a:96:52:68:1f:32:e6:a3:18:07:bf:a5:e9:6f:7f:
ab:a6:ee:6f:95:6c:b7:09:03:eb:7d:93:ab:d9:b4:6b:a3:e7:
de:37:71:a6:6c:b8:be:75:1d:82:18:33:56:81:0f:e1:f8:3f:
98:0d:dd:09:ea:7a:c6:09:e3:fb:20:1a:30:46:44:53:71:d1:
26:e6:fa:ff:28:25:d0:e1:04:87:fb:b1:d9:e1:9f:72:27:1b:
60:29:ed:9a:2b:e3:28:17:f6:be:58:55:d5:6a:51:2c:33:27:
b7:10:31:16:f1:3a:1f:04:72:71:78:17:1a:71:aa:3c:ee:74:
f2:27:cb:d2:d9:9b:d1:3f:db:9a:d3:96:47:4c:32:5f:b8:d0:
f7:d9:a1:b1:42:cb:96:59:5f:27:26:f8:f0:00:ec:a6:6a:7c:
62:1c:7c:04:37:ae:8f:04:a3:11:1b:ee:31:16:2d:57:9b:b1:
8b:c0:0b:68:7c:1f:6b:29:84:89:c2:f8:16:c5:e1:84:15:f6:
59:a6:f3:e6:bc:3b:d1:c2:fd:d0:fa:c0:44:2d:19:19:e7:8d:
c4:36:a4:26:77:dd:09:a4:8b:0c:16:f2:bd:95:95:75:ef:17:
ab:9d:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:54 2025 by rpki-client