Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDEE4B98C60811EFAF57155C762E951A.roa
File: BDEE4B98C60811EFAF57155C762E951A.roa (raw, json)
Hash identifier: zhJPTOiXDDBaEApkuSk5AWS+GDUKGdlhIv7zRgTVNXE=
Subject key identifier: 4B:5E:F9:C0:30:3E:05:AA:BD:3C:4F:C9:1F:88:DB:F1:77:AE:DE:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDEE4B98C60811EFAF57155C762E951A.roa
Signing time: Sun 29 Dec 2024 17:17:12 +0000
ROA not before: Sun 29 Dec 2024 17:17:08 +0000
ROA not after: Sun 12 Dec 2027 17:17:08 +0000
asID: 17561
IP address blocks: 154.217.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77472 (0x12ea0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:17:08 2024 GMT
Not After : Dec 12 17:17:08 2027 GMT
Subject: CN=67718418-db1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:d2:e5:d6:b5:51:8c:92:9d:c3:ca:a8:87:
5d:b4:0f:7b:17:f3:d8:48:1f:79:ee:7d:a6:8b:3d:
58:09:a1:ea:66:d0:88:20:01:c5:17:d7:9f:db:78:
8d:4a:f8:99:ac:7c:b5:45:5e:c8:79:3e:1f:6d:69:
50:65:47:8c:b1:f2:4c:22:26:32:f3:72:84:01:04:
5b:1a:d4:18:f3:d9:a8:ba:46:13:d9:a1:33:34:92:
ad:94:78:70:e5:8b:0b:32:4e:1c:ea:5f:23:7c:5f:
5f:2d:07:83:c8:f1:35:87:e8:a6:e2:f6:df:e5:32:
e1:5f:9f:06:77:e8:dc:76:16:f6:c8:16:6b:75:5c:
ac:64:ec:ee:d6:f9:b2:94:3e:f9:b0:82:c8:f2:8e:
40:82:28:a7:08:f9:05:ad:de:82:a8:3e:db:e6:c0:
67:f7:84:2d:b0:7d:21:ca:f7:5f:d4:b4:87:a5:61:
3c:84:93:ab:1d:82:d1:d0:5a:4b:5a:2f:11:5a:bc:
1b:8c:03:5e:91:09:b3:e3:a4:f4:37:37:31:dd:ce:
48:ba:84:e3:a6:79:69:cc:d4:ca:39:e0:1d:13:4d:
f3:81:86:f0:e9:07:ea:9a:eb:37:10:5b:54:69:72:
d8:e4:78:83:b5:54:dd:42:35:e6:17:f2:2c:41:fd:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5E:F9:C0:30:3E:05:AA:BD:3C:4F:C9:1F:88:DB:F1:77:AE:DE:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDEE4B98C60811EFAF57155C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.51.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d4:9f:ef:ed:12:dc:da:da:c2:0a:0f:7e:6e:44:5d:27:49:
7e:20:9e:bf:78:8e:3a:ee:cf:43:35:97:d6:09:63:9b:c3:60:
84:50:62:8a:85:ce:0e:1d:57:fe:2f:55:d5:c7:77:70:56:30:
27:ef:11:eb:b1:12:7c:b0:ca:5a:9c:29:1a:62:d5:b3:28:41:
57:b1:47:f9:2a:83:dc:d3:0a:1a:18:38:37:58:70:59:84:7f:
e7:11:a6:a2:eb:1c:ae:53:12:47:29:73:54:07:ad:21:57:2a:
48:01:4b:03:7d:c3:b7:e3:70:2d:e1:f9:3e:1d:56:cf:ee:23:
b2:fb:23:16:bf:c0:1d:af:86:78:d0:1f:0b:a9:36:07:02:52:
7a:4a:72:44:26:4f:00:99:72:7b:d3:04:16:c0:7b:d4:4c:d5:
84:99:b2:5c:0a:74:d2:9d:9a:28:1d:23:3d:33:77:dc:d2:63:
2b:67:9b:af:88:90:3c:b8:c9:d3:71:df:4c:30:a7:fe:3a:8b:
d2:8c:de:fd:63:24:72:67:bb:d8:2d:be:b2:3f:32:0d:ed:4a:
34:85:14:cc:30:d2:20:aa:e1:c0:26:73:54:93:6e:72:07:74:
fa:2f:0a:1b:a0:e7:52:0f:36:fc:39:3a:d4:66:b6:44:7d:cd:
8e:89:05:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:05 2025 by rpki-client