Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51D13298C93411EF93B80E85762E951A.roa
File: 51D13298C93411EF93B80E85762E951A.roa (raw, json)
Hash identifier: WLKwrOdZB6StKTV1jzu58sqSaf5sl5gBrxEfN5/4Ox0=
Subject key identifier: 6F:FA:B1:B8:A3:EC:72:1F:90:CD:4E:0F:26:E3:DD:67:D6:D4:1F:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51D13298C93411EF93B80E85762E951A.roa
Signing time: Thu 02 Jan 2025 18:06:42 +0000
ROA not before: Thu 02 Jan 2025 18:06:38 +0000
ROA not after: Mon 13 Dec 2027 18:06:38 +0000
asID: 17561
IP address blocks: 154.222.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78789 (0x133c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:06:38 2025 GMT
Not After : Dec 13 18:06:38 2027 GMT
Subject: CN=6776d5b2-0298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:70:6d:73:1e:6d:cb:f9:17:10:15:86:85:
bf:da:9c:80:17:ce:c3:c9:66:0d:a4:a8:e4:42:65:
0f:81:96:34:9f:df:b9:b1:ee:49:c1:c6:83:83:a8:
2f:c2:6c:4f:43:e8:db:2f:68:d9:c8:0f:ab:ba:87:
ab:0a:34:55:ab:b3:fb:79:f8:0d:41:16:ea:72:e3:
ac:9b:16:18:2d:19:9c:14:e8:6a:33:c0:be:41:85:
f7:72:7f:ba:e5:38:15:57:d7:c5:6c:9f:6d:55:68:
1a:3f:bf:fa:5e:29:4b:b5:97:a4:24:1e:a7:01:b5:
01:c1:68:41:d5:8f:ed:33:42:e9:ad:87:5e:ed:d9:
93:b7:68:17:1c:00:c9:f5:85:2e:d0:69:0c:36:6f:
09:e1:d3:d3:cc:07:fc:91:cc:c1:22:3a:a1:2a:86:
95:47:1d:26:7e:0f:48:21:f3:af:3b:c9:f1:5e:f8:
30:7c:53:5d:44:45:86:a6:9b:21:ad:b3:e1:dc:d6:
04:3a:a9:92:bd:04:cd:9b:98:b3:ff:57:6f:e7:09:
d5:e9:73:c1:26:f4:e8:05:c6:29:4a:51:3f:26:45:
e6:e8:6e:18:26:dd:8b:d4:48:35:ad:a4:e5:4b:a3:
16:45:49:5b:62:b6:c3:8a:ae:aa:13:37:1c:ad:b9:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:B1:B8:A3:EC:72:1F:90:CD:4E:0F:26:E3:DD:67:D6:D4:1F:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51D13298C93411EF93B80E85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.177.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:98:40:08:17:b0:7d:7f:e2:1c:19:8d:96:b4:1a:f7:57:90:
36:1e:67:39:04:3a:1d:ae:23:89:2f:75:d0:b6:27:a9:fc:23:
08:43:25:ac:31:f5:d1:12:80:15:88:e4:a2:a9:5d:70:1f:01:
86:ae:15:f2:f2:79:0d:f0:0e:ba:73:f1:d2:e5:bb:02:63:e4:
ea:84:2d:e7:19:c9:5a:52:0f:58:ec:1c:e8:ad:be:8d:b8:3f:
39:1b:87:81:90:2a:19:e6:cd:ed:db:f3:f7:5d:31:f5:c0:c6:
c6:16:74:56:ce:6e:ca:e5:04:b5:44:8e:bc:4b:eb:12:ed:5f:
bf:fe:0b:b5:2c:2d:e9:7a:07:ec:27:31:38:7e:7f:2c:d5:e0:
7c:51:fd:59:7b:ae:57:b9:08:61:48:24:0b:c9:37:ad:33:0b:
80:c8:60:41:7d:45:b0:27:63:8d:97:36:fe:81:62:f2:f8:cb:
3e:75:a2:04:1a:44:ef:32:e4:c4:7b:d6:13:e3:a4:1e:8b:0c:
71:31:5c:ef:c5:d7:34:25:26:6e:ff:ed:48:98:e3:1f:8f:79:
61:bd:b9:26:e5:f5:81:67:96:b1:e0:21:76:eb:76:11:32:f1:
c7:48:94:d3:3e:2f:df:37:e1:c9:14:6f:82:48:97:cc:13:5f:
f9:23:20:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:31 2025 by rpki-client