Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66131E9EF35311EFBADF9470762E951A.roa
File: 66131E9EF35311EFBADF9470762E951A.roa (raw, json)
Hash identifier: fyp1uxBY4VtI+uwG4F4YuE2IK1ihqGqCvQEt7CSTbTk=
Subject key identifier: B7:98:18:F3:86:14:A6:10:13:45:80:2B:1B:76:2F:DE:27:F0:CE:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015DAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66131E9EF35311EFBADF9470762E951A.roa
Signing time: Tue 25 Feb 2025 08:34:59 +0000
ROA not before: Tue 25 Feb 2025 08:34:56 +0000
ROA not after: Mon 07 Apr 2025 08:34:56 +0000
asID: 138915
IP address blocks: 154.223.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89514 (0x15daa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 08:34:56 2025 GMT
Not After : Apr 7 08:34:56 2025 GMT
Subject: CN=67bd80b3-e2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:bf:25:f5:d0:36:c0:93:70:09:13:a1:9c:
28:20:b5:0e:0c:70:57:67:47:48:09:ea:94:48:34:
dd:05:c2:49:b3:8d:6c:95:4c:d7:3a:77:a5:d9:0b:
19:a6:9d:9d:78:82:40:8e:af:54:6b:d5:98:56:93:
67:6f:ef:73:4c:1f:9b:a0:88:be:33:88:c3:d1:11:
21:69:7b:69:a5:85:ce:c4:b3:d5:8f:62:82:bc:79:
dd:c4:f9:34:9e:a4:9d:16:fe:af:70:6b:24:6e:9b:
f4:40:03:ad:59:33:61:87:65:ee:84:92:15:03:e0:
07:8f:0e:e8:27:93:d9:6d:88:04:6f:ac:34:b6:3c:
89:17:a1:82:e8:12:04:0e:5c:65:c9:74:2d:09:b0:
25:80:af:ac:59:e8:4e:e7:41:7f:b4:40:68:41:fd:
fb:fc:31:a0:e8:0c:e8:6a:95:ca:1f:77:11:48:69:
45:82:f3:0e:15:f2:d5:fa:9a:fe:3d:c4:d0:ea:d3:
d6:0b:e3:27:f5:94:0d:b4:75:ba:58:01:ab:8a:34:
93:e7:a6:42:5b:de:eb:56:48:c2:ab:d2:87:41:7f:
1b:f4:e0:52:52:73:cc:8c:00:54:16:42:65:c2:30:
21:81:28:6f:62:d5:37:1b:18:35:42:11:69:30:a5:
83:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:98:18:F3:86:14:A6:10:13:45:80:2B:1B:76:2F:DE:27:F0:CE:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66131E9EF35311EFBADF9470762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.51.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:df:f5:50:d8:3c:08:3f:e5:86:2a:de:52:ce:42:56:38:3e:
97:ae:f3:1f:ad:ee:e9:d3:44:89:ac:ea:b3:52:d2:a6:c7:e2:
13:6a:82:fb:b3:3e:ce:51:9b:b8:16:04:70:7f:74:b9:2a:ff:
24:79:ac:3d:1d:80:0c:6d:c5:1a:e2:52:5e:94:33:45:05:02:
cb:3e:12:be:f6:15:95:e6:7b:78:36:62:f3:b6:7b:a6:ce:fc:
e7:5f:ab:ab:a7:03:6b:08:28:45:e5:ee:b7:02:a7:42:66:4c:
cb:b0:99:3d:a4:96:13:05:9d:c9:80:79:40:34:0c:f0:db:39:
4b:36:f7:57:e0:0f:23:8e:a1:e2:5d:48:b1:3a:d5:26:4c:4b:
aa:a0:fb:2d:ba:15:eb:23:b6:a6:85:1f:51:e3:a8:e8:57:7e:
10:21:8e:6a:61:5b:82:7c:ff:61:c9:04:43:a6:e8:9a:56:29:
18:de:31:c5:21:5f:01:9c:25:30:07:9a:6f:54:34:dc:2b:2c:
f7:bc:06:93:a0:f2:88:67:69:39:52:8f:34:c6:b2:1a:1b:4a:
73:d5:97:d2:d4:7b:32:8d:a8:c4:e1:d3:e3:2c:eb:e2:86:35:
2b:5b:9a:ea:33:6f:6f:83:14:36:09:77:d9:d4:6b:24:24:ea:
af:bd:40:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:58 2025 by rpki-client