Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51F02CDAC1CC11EF9AED156B762E951A.roa
File: 51F02CDAC1CC11EF9AED156B762E951A.roa (raw, json)
Hash identifier: ebWQTQnF42rOJ3DxWbEtXkwmZzGhiY0/ndaEz22GKco=
Subject key identifier: 32:59:17:B7:2F:22:3E:94:E4:A1:E8:78:47:1E:0A:D7:4F:4D:67:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01226B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51F02CDAC1CC11EF9AED156B762E951A.roa
Signing time: Tue 24 Dec 2024 07:54:36 +0000
ROA not before: Tue 24 Dec 2024 07:54:33 +0000
ROA not after: Wed 10 Dec 2025 07:54:33 +0000
asID: 984
IP address blocks: 154.193.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74347 (0x1226b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 07:54:33 2024 GMT
Not After : Dec 10 07:54:33 2025 GMT
Subject: CN=676a68bc-7365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:80:4b:28:f7:6c:50:6e:cc:2a:57:16:ec:d6:
3d:47:90:8f:06:3c:c8:ba:8c:aa:6b:39:67:e8:e4:
29:e4:ac:31:f4:ce:6e:af:38:81:7d:ae:d3:81:60:
1f:e2:f2:44:9d:34:fc:a6:fb:47:11:8b:84:4a:45:
a3:1e:85:0b:42:5c:e3:9d:73:e3:19:57:84:df:d2:
33:d5:1e:b5:79:2e:df:34:25:34:ef:00:42:83:ea:
4c:a9:73:7b:ef:58:4b:98:23:13:a6:8f:76:a1:b1:
35:86:e7:a7:e9:83:33:16:0e:55:a9:01:18:a8:71:
b2:a1:94:b3:d8:95:9b:b6:36:6a:db:52:8e:06:65:
34:cb:29:a6:e5:dd:1b:e4:67:f8:09:a2:55:12:01:
13:b8:30:bf:eb:e2:f0:9c:81:ea:18:02:c7:14:ce:
e7:10:12:81:ec:de:7f:75:af:50:26:76:24:98:1f:
13:c0:aa:32:de:9d:69:d3:42:d5:20:0b:f8:0e:12:
dc:fc:e0:6e:17:47:c4:41:47:b0:c5:f3:ec:80:4e:
e5:15:e4:21:18:d7:e6:f6:5f:16:43:f5:72:54:3d:
04:78:e0:f8:7e:27:32:4a:3f:b0:35:13:0a:f6:b0:
3c:67:c8:b3:71:1f:7b:df:a6:53:2f:43:8f:5a:a8:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:59:17:B7:2F:22:3E:94:E4:A1:E8:78:47:1E:0A:D7:4F:4D:67:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51F02CDAC1CC11EF9AED156B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.213.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:da:a4:87:0e:d5:17:d4:73:9d:60:97:97:fa:79:d7:01:28:
29:ae:da:a3:cf:84:82:5d:88:43:60:6d:5d:c7:a6:c2:3b:fb:
d4:d7:ad:c8:5d:13:58:1e:f7:f0:85:8b:20:ad:d2:d4:99:b7:
53:e7:07:52:74:2a:66:ee:36:d3:fe:33:52:35:b3:69:a2:96:
c1:10:40:06:a4:40:12:4a:fd:fd:79:77:b3:e3:e0:be:e0:01:
4c:d5:46:c6:1e:7f:9e:f6:de:29:65:1c:83:79:d0:89:24:88:
3c:57:01:f7:7c:45:01:7f:e9:99:b2:ea:4e:4e:cb:f8:17:fb:
fc:46:5f:bb:d6:79:b5:a3:a6:ee:90:59:46:98:7b:a6:95:8c:
7b:cd:14:df:f0:b3:d1:6e:ee:93:90:22:b9:ca:da:94:f2:49:
2b:77:55:12:c8:ab:be:a3:93:23:50:67:3d:c3:ed:f2:9f:3b:
6a:13:37:4d:81:40:10:aa:50:da:64:f9:1b:0e:0d:56:33:60:
61:57:04:53:b8:70:c8:9b:f7:e9:dc:32:89:32:0f:3e:9b:86:
af:70:d3:51:f6:2e:0f:fc:28:00:5f:67:c4:bb:a7:62:09:77:
10:9f:29:cf:96:0c:28:f3:41:a4:e6:97:65:f7:18:f2:38:9e:
d8:1a:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:39 2025 by rpki-client