Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/816761E6C35111EFA14425A3762E951A.roa
File: 816761E6C35111EFA14425A3762E951A.roa (raw, json)
Hash identifier: F0j/g4NL7hpMv3H7Jm6oXaF9moOCc4srjydudadHqRY=
Subject key identifier: AE:77:02:E9:04:95:A3:D8:F7:0C:CD:70:33:17:06:9E:F4:C9:4A:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/816761E6C35111EFA14425A3762E951A.roa
Signing time: Thu 26 Dec 2024 06:20:30 +0000
ROA not before: Thu 26 Dec 2024 06:20:27 +0000
ROA not after: Sun 12 Dec 2027 06:20:27 +0000
asID: 17561
IP address blocks: 154.95.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75181 (0x125ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:20:27 2024 GMT
Not After : Dec 12 06:20:27 2027 GMT
Subject: CN=676cf5ae-601c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:66:07:62:28:97:38:4e:3b:c8:f3:f8:ef:
b3:10:df:fe:0a:75:17:e0:18:5e:57:c5:5d:ef:73:
7f:09:14:0b:0c:9a:78:77:f3:7c:6c:71:ac:2b:c0:
f1:30:13:bd:cc:ea:a9:3c:ed:50:01:54:ef:9a:1c:
54:37:59:ab:da:21:46:57:c0:87:16:06:62:40:08:
98:56:a9:ca:90:14:2d:c3:ba:09:7d:86:12:d3:e7:
d7:95:7b:29:d5:50:d5:97:74:3c:6c:7d:ae:4c:15:
ee:38:b2:aa:3d:a0:dc:e0:5c:d3:c5:d6:58:b4:31:
22:c2:81:ce:e3:22:59:8b:76:0b:79:00:ef:42:80:
5d:b8:fc:f3:0f:4e:6f:98:4d:f1:6c:c7:72:ec:83:
f8:50:ea:08:f7:c7:f1:da:6f:fc:92:ac:19:2b:97:
9c:3a:3c:00:6e:b0:a4:64:0a:cb:b0:4e:55:67:71:
41:8d:b4:62:b1:9a:fe:0d:fa:6e:16:d5:7b:96:bd:
bc:4e:f9:48:28:af:a1:1b:ed:2d:a5:bf:f4:2a:d5:
c5:ad:01:e9:fb:46:aa:c4:76:0a:aa:e6:46:95:58:
40:b2:28:ce:0d:6d:dc:ee:66:25:6c:28:d5:2f:ab:
06:10:ba:16:80:fe:47:c0:8c:d0:f7:6e:c3:1d:e7:
d4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:77:02:E9:04:95:A3:D8:F7:0C:CD:70:33:17:06:9E:F4:C9:4A:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/816761E6C35111EFA14425A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.51.0/24
Signature Algorithm: sha256WithRSAEncryption
94:7a:30:59:80:32:65:0a:21:7f:9c:52:20:55:85:b5:83:6c:
f6:f8:79:f7:19:7f:cb:16:fb:c8:56:db:e3:c7:97:5e:5e:13:
48:7e:ac:25:58:06:b1:88:29:16:36:63:d6:13:57:ed:25:01:
f8:84:a9:0f:7b:6e:26:86:87:43:e8:56:ac:8c:cd:55:74:32:
fe:fd:0b:0a:25:78:e0:2d:50:0e:2b:1f:bf:1d:c5:1d:15:d7:
79:42:2d:0a:61:bb:dd:7a:7e:49:56:09:4d:5f:f4:85:07:c7:
97:6e:50:03:3a:ba:23:e9:f8:4d:92:00:71:d0:1e:79:ee:58:
74:57:d8:97:c2:e5:cb:0f:01:52:66:03:d9:55:a0:41:bc:00:
50:a9:2a:44:37:27:c4:66:6b:e9:5a:39:10:90:b6:67:21:67:
33:c7:f4:71:bf:93:97:95:da:78:60:ab:9a:15:79:7a:f7:5f:
3b:4c:1f:df:a4:75:54:26:fa:b0:b0:a6:a9:7d:85:85:a3:8c:
f0:38:79:ca:bd:c7:b4:8d:5f:6b:7e:a3:80:2f:e7:ac:e6:55:
ab:20:e2:ea:79:0f:06:b1:a0:53:f8:58:5f:3b:55:a0:54:54:
d5:11:f5:ee:70:b6:79:a8:c3:9b:31:bf:b9:4a:0b:8d:a7:e0:
54:9e:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:58 2025 by rpki-client