Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A51E6A94C52711EF8E2BC04C762E951A.roa
File: A51E6A94C52711EF8E2BC04C762E951A.roa (raw, json)
Hash identifier: MnhoHo3r3hckaA5jkNHyZ6I66tw7X0DlFNaBNgXj/SA=
Subject key identifier: 04:BA:C8:5F:FD:1D:AB:6B:49:DA:F2:9B:3F:F6:DA:D3:E7:CA:89:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B95
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A51E6A94C52711EF8E2BC04C762E951A.roa
Signing time: Sat 28 Dec 2024 14:25:54 +0000
ROA not before: Sat 28 Dec 2024 14:25:50 +0000
ROA not after: Fri 12 Dec 2025 14:25:50 +0000
asID: 984
IP address blocks: 154.204.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76693 (0x12b95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:25:50 2024 GMT
Not After : Dec 12 14:25:50 2025 GMT
Subject: CN=67700a72-9e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:48:01:3c:d1:d9:cf:a1:9f:ee:29:c9:89:
94:60:45:41:4d:57:da:f6:3f:93:41:ce:66:e5:f3:
8b:6d:0e:78:3a:ea:4e:48:be:b4:d6:46:d0:98:f5:
b2:41:80:6e:cc:85:35:b3:08:99:bc:51:67:44:4b:
94:44:21:59:9e:91:89:b7:dc:5a:35:4e:15:5b:49:
25:0f:b5:8d:0d:78:ce:35:2f:96:d4:29:21:3f:b2:
11:2a:c9:75:ab:5d:fd:13:45:41:4b:09:14:42:85:
62:1f:6a:5b:eb:23:c7:2e:21:a7:a3:f4:3c:b8:e3:
91:4f:e9:21:55:a4:d8:7c:2a:81:89:7a:63:34:8a:
dd:c4:eb:bc:fa:0e:f2:cd:0a:93:c5:1e:51:d7:9e:
7b:93:8c:e0:43:8c:03:17:e1:1e:53:df:66:85:4e:
30:c6:4b:66:cb:29:46:0a:8c:e3:62:af:9b:43:1f:
1e:3e:3c:6a:2f:a4:58:36:dc:5d:85:e9:f7:e7:c1:
b5:34:86:09:d5:69:db:df:30:49:3e:f5:ed:7d:0c:
39:04:b6:2c:4b:47:cc:52:a4:46:7f:d5:3a:f4:76:
60:46:90:99:c0:6e:fb:ce:21:4f:e9:e6:e0:ea:5b:
be:5e:b5:b3:e4:c4:8b:9a:8d:89:a3:a6:26:78:e3:
5e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BA:C8:5F:FD:1D:AB:6B:49:DA:F2:9B:3F:F6:DA:D3:E7:CA:89:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A51E6A94C52711EF8E2BC04C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.21.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e5:b2:51:52:9b:31:a0:ba:6c:d6:e6:c5:1f:a7:95:a6:29:
4d:9e:e7:9d:ee:86:88:57:f6:7d:56:cd:14:c7:05:6b:95:32:
8a:73:2f:b7:ef:bb:9f:3b:bf:8b:93:7d:9b:f7:5d:ff:ab:ab:
9a:86:46:b7:50:19:53:30:53:6a:46:d6:9c:3d:cd:1c:cd:c3:
bd:35:74:28:2b:1f:9d:ee:27:fc:7b:8d:bf:fe:3e:65:31:a0:
a0:cf:05:0b:7a:60:d4:5f:f4:8d:bc:3b:ba:d3:37:6f:78:06:
56:51:50:79:1f:3d:b3:ac:91:a2:f6:e8:9e:bc:50:3f:c2:15:
c7:87:a7:f8:8d:dc:45:b8:a9:c3:cd:3f:f9:d9:c2:59:c8:81:
13:38:9e:51:a5:14:3e:7e:f1:41:d5:ef:61:b3:49:b0:dc:b9:
28:24:5f:15:0c:56:39:92:be:6a:3a:8f:34:8f:f0:c1:95:6d:
30:4d:7c:b8:7f:e8:11:fe:6b:f0:fa:98:9a:92:2c:b6:03:61:
38:38:66:20:e7:e7:1f:43:b6:c9:b5:60:16:7f:40:35:60:91:
d0:30:45:06:f3:6e:c2:ec:f4:61:69:fd:a3:62:c7:9f:53:88:
3b:22:24:9b:09:3a:93:7b:2d:ae:8f:20:d1:d7:20:92:ab:9a:
ab:e5:c4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:26 2025 by rpki-client