Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51DC7506C94111EF9670FF58762E951A.roa
File: 51DC7506C94111EF9670FF58762E951A.roa (raw, json)
Hash identifier: 6ELP/DDrh61eRfDXjBQyrmU1RYKaCwa2eJFDv1aQaWk=
Subject key identifier: 1E:8A:0F:88:02:41:58:1E:1D:D5:33:68:00:89:DE:DC:54:4F:67:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01342B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51DC7506C94111EF9670FF58762E951A.roa
Signing time: Thu 02 Jan 2025 19:39:46 +0000
ROA not before: Thu 02 Jan 2025 19:39:42 +0000
ROA not after: Mon 13 Dec 2027 19:39:42 +0000
asID: 17561
IP address blocks: 154.223.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78891 (0x1342b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:39:42 2025 GMT
Not After : Dec 13 19:39:42 2027 GMT
Subject: CN=6776eb81-4f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:61:31:8d:4c:23:20:ea:70:35:6d:dd:b0:
83:e9:94:8d:e5:9f:44:24:f0:3f:73:71:aa:2e:b5:
ab:1b:81:99:de:39:47:22:0d:e5:ce:46:86:7e:23:
a2:e5:d1:80:f1:6b:28:6c:f8:a8:4c:ed:d6:c6:2d:
85:97:a4:4b:ff:ac:c8:39:c8:58:d9:60:1a:36:eb:
48:35:05:4b:b7:2c:91:05:99:af:50:6a:75:04:e8:
4a:1e:34:24:63:95:c8:a5:55:20:14:54:1d:71:e2:
98:64:d0:8e:04:7d:80:e5:6e:00:8a:81:67:ad:ac:
bf:d6:07:67:34:cb:d2:a7:0b:a3:a8:cc:70:56:f7:
ce:1c:33:1a:e1:d8:1d:b9:22:e3:17:1e:81:b5:5f:
4a:94:87:78:a7:a4:a8:58:cf:c5:29:54:e6:09:c1:
aa:d0:42:d9:3a:db:b9:9d:6d:91:c9:22:ac:4b:2e:
25:ea:6f:55:71:ca:18:77:35:d7:9f:05:94:d2:ec:
34:ae:87:14:3e:b3:54:f9:a6:ab:ef:96:f0:b0:89:
6a:49:06:bf:61:15:3d:4a:a6:f0:d6:d5:c0:21:0e:
82:e4:e3:2d:d1:f1:f9:8b:53:a0:77:b4:bf:03:bd:
aa:81:d2:eb:22:3a:12:7d:3a:99:23:92:3f:2a:0d:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8A:0F:88:02:41:58:1E:1D:D5:33:68:00:89:DE:DC:54:4F:67:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51DC7506C94111EF9670FF58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.252.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:27:5a:7d:ba:d4:94:c1:1e:3d:c2:4a:24:ad:ea:27:11:73:
18:93:0e:e1:3d:e7:ec:c5:84:7f:6e:e3:bd:f6:16:58:ce:15:
50:48:91:b6:e8:ca:37:f8:b7:94:ba:e3:d0:96:d8:92:0f:80:
8d:47:ab:cc:8e:76:97:c2:90:47:a4:af:f9:7d:b1:1b:f3:c0:
3d:01:55:8f:ae:55:c1:6f:10:93:f7:7d:7c:40:22:1f:7d:b9:
04:d8:34:6d:c6:f8:51:e4:7d:52:17:62:06:b7:4c:55:89:8d:
c6:3d:a5:76:73:7a:ca:7c:8b:00:fb:4a:e1:af:88:f8:6d:57:
ea:ef:54:61:2e:86:94:af:4d:3d:24:cd:f4:d7:ee:cd:93:56:
f0:da:cb:c4:19:51:99:e1:e9:5a:3f:a1:3b:33:35:92:c2:69:
99:9e:64:48:cb:4d:b4:c9:03:de:6e:76:9a:1e:09:12:e8:06:
ad:b5:69:ea:ac:1b:62:1d:ad:df:ac:7a:0e:eb:e7:cf:2b:83:
0b:6c:3e:be:2b:78:57:40:c3:9c:5b:51:bc:24:20:4b:06:41:
0a:a5:8f:2c:df:b7:29:32:fb:97:ee:d6:25:ed:d4:32:0b:d0:
95:aa:db:86:c5:ef:1c:80:4a:c2:f2:42:e3:bc:87:61:c8:27:
37:2f:73:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:40 2025 by rpki-client