Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51F72D54D57811EFB6359A4C762E951A.roa
File: 51F72D54D57811EFB6359A4C762E951A.roa (raw, json)
Hash identifier: RKXkuUXn9tE4USh2BBd7IAZ6T1lMH8GUv9DJqy97SP0=
Subject key identifier: 92:64:EF:26:E5:BD:D4:5A:7F:3E:61:BD:EE:F1:B9:30:A6:67:85:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51F72D54D57811EFB6359A4C762E951A.roa
Signing time: Sat 18 Jan 2025 08:43:42 +0000
ROA not before: Sat 18 Jan 2025 08:43:38 +0000
ROA not after: Sat 22 Feb 2025 08:43:38 +0000
asID: 400619
IP address blocks: 154.89.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81370 (0x13dda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 18 08:43:38 2025 GMT
Not After : Feb 22 08:43:38 2025 GMT
Subject: CN=678b69be-85e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:04:a2:2e:d9:a1:69:ed:83:29:8a:42:9a:
37:14:e2:96:4a:be:4b:ba:37:8a:fe:c4:02:f3:fa:
18:fa:20:0f:02:c7:74:60:d6:29:fc:24:a9:6f:ce:
6b:e1:70:14:2f:45:84:7e:b9:88:2a:33:0f:42:a3:
1b:2c:0c:91:3e:74:16:0e:b7:1e:73:d7:26:2b:c6:
cb:fd:b6:15:99:f1:ed:a7:80:6b:41:f3:e6:b4:90:
74:34:ce:c5:3f:15:e3:dd:2f:21:94:59:8c:b2:b3:
02:79:5c:08:53:08:91:14:29:6d:06:cd:03:7c:db:
14:cf:d0:a4:0a:85:88:62:82:e9:1c:bb:73:02:d6:
5a:c6:d3:2d:9d:23:d0:dd:0c:f1:56:ba:89:50:81:
06:01:97:e5:f2:2c:8d:38:60:4e:3d:cc:b7:d6:02:
50:6b:99:60:4d:60:d5:57:d7:84:e9:ce:52:dc:7a:
b5:0e:46:d8:85:73:9e:c5:02:b5:da:35:5f:90:25:
b1:8f:e9:34:a9:2e:9f:0f:f3:11:3d:66:4d:69:1f:
23:61:02:a4:96:1f:f9:fb:d0:75:27:0c:43:87:16:
76:9b:8d:e3:ef:4f:46:69:73:f8:fa:9f:ce:82:39:
4f:ef:c2:c8:36:9a:4a:a7:fb:5e:d6:79:cc:b8:79:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:64:EF:26:E5:BD:D4:5A:7F:3E:61:BD:EE:F1:B9:30:A6:67:85:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51F72D54D57811EFB6359A4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.192.0/20
Signature Algorithm: sha256WithRSAEncryption
17:85:3a:4e:5d:55:d2:b3:20:26:7c:95:7b:28:8c:05:40:f4:
17:c5:9a:7d:15:b6:e6:1d:9a:58:22:ab:1d:6b:99:d0:6d:80:
97:df:dc:c7:a9:e1:c6:0c:ce:28:32:3c:6c:f4:6c:2b:16:78:
84:4f:d5:7d:da:31:85:e7:e9:10:e3:0e:bb:be:2a:6d:64:cf:
50:15:80:df:e1:49:5e:19:59:a4:55:37:aa:87:de:c7:eb:44:
ff:a3:72:45:82:43:b3:a0:60:ad:db:c6:91:3f:24:eb:da:93:
94:eb:f2:0a:f0:d6:ff:02:ea:16:9b:42:50:62:7e:92:21:a4:
20:fb:eb:6b:29:4a:9a:67:b6:68:f4:cd:bc:26:e2:88:80:2d:
0a:f9:4b:d8:8b:01:42:18:7a:be:d5:44:b5:d9:11:70:bd:13:
59:ec:ae:71:eb:ae:29:b3:35:29:93:84:51:6a:3d:80:89:28:
aa:91:58:b3:ca:0c:e6:6d:89:61:c6:b6:62:b5:4f:c3:aa:89:
b9:8c:64:74:d6:40:39:e1:7d:80:1c:83:ab:73:03:cb:e5:54:
25:79:3f:26:40:5d:b6:91:50:c8:1c:4d:a0:38:fd:0a:c2:e8:
80:e8:59:5c:5f:06:ca:b4:e0:fe:e4:ae:8c:a3:e3:62:31:8b:
bc:22:b9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:15 2025 by rpki-client