Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4677C8AF34B11EF8A8B95BB762E951A.roa
File: D4677C8AF34B11EF8A8B95BB762E951A.roa (raw, json)
Hash identifier: hPYZwaL4+OSw5rpYpIlvwdiDVuW2w2Hx7IlMQj2ZD5s=
Subject key identifier: DF:C9:FC:8C:BB:3B:80:A0:BC:65:87:AA:48:BB:87:F1:27:ED:DE:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4677C8AF34B11EF8A8B95BB762E951A.roa
Signing time: Tue 25 Feb 2025 07:40:48 +0000
ROA not before: Tue 25 Feb 2025 07:40:45 +0000
ROA not after: Mon 07 Apr 2025 07:40:45 +0000
asID: 138915
IP address blocks: 154.223.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89440 (0x15d60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 07:40:45 2025 GMT
Not After : Apr 7 07:40:45 2025 GMT
Subject: CN=67bd7400-cfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:29:cd:dc:19:1b:ab:20:b0:d1:c1:e5:23:
d2:6c:e0:6a:55:ed:33:ab:d7:a9:2d:64:67:d1:48:
60:8f:97:9b:17:b0:1b:2c:39:f3:32:25:82:ae:22:
4a:57:90:90:3d:38:73:91:b4:48:06:fc:da:22:bb:
0b:65:3f:dd:6b:83:51:f5:dd:98:1a:61:42:a4:39:
70:23:34:02:23:cf:5e:3f:68:81:84:fb:ce:f6:5a:
a0:2b:bf:32:54:e7:0a:ea:95:4f:b0:cc:0f:51:95:
6a:39:3f:ef:d7:84:96:98:1f:b1:00:df:1a:8b:15:
c6:8d:74:af:29:fe:2d:8f:00:09:5f:0a:0e:ca:9a:
41:31:a7:d0:5f:b3:ea:4a:c4:ba:e5:12:29:39:2c:
82:17:d1:f8:84:6c:bd:50:7c:51:f9:18:ee:fd:be:
ff:d8:67:b9:1e:81:3d:56:28:2a:15:3a:67:b1:e6:
b5:a9:5d:5c:08:ad:09:c1:a6:d8:62:8a:43:a6:35:
9b:a4:a1:2b:5c:c4:dc:17:70:59:8c:ab:37:1a:4f:
d6:6c:75:63:64:fc:ce:b9:b9:ad:e3:11:e5:95:ba:
1a:56:37:7e:01:dc:0e:95:88:3b:dd:4b:7d:4f:ac:
97:b9:26:6f:8c:50:dc:a3:49:36:ea:af:fa:28:17:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C9:FC:8C:BB:3B:80:A0:BC:65:87:AA:48:BB:87:F1:27:ED:DE:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4677C8AF34B11EF8A8B95BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.51.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:9d:c9:fb:56:97:77:9e:36:36:7e:c1:2a:be:bc:88:3a:27:
66:b1:c7:51:83:af:0c:8d:d1:d3:6c:01:8e:d2:60:b6:b4:b3:
fa:f6:e7:13:6d:f0:58:40:95:1d:06:6e:b9:03:ad:56:56:5c:
cb:01:d8:8a:df:24:29:2c:63:01:3c:39:51:c7:80:13:85:24:
2f:48:17:53:82:30:06:59:91:fb:34:d7:b2:35:68:a1:9a:84:
88:c4:38:3f:b2:00:e8:1b:70:2f:51:c9:07:95:34:a0:69:48:
3b:5a:7d:11:86:31:68:43:3a:c7:57:c8:92:8f:05:de:e6:25:
5e:de:21:0e:9d:73:53:51:1e:25:22:c4:be:83:c4:d2:38:7d:
f5:9e:00:a8:ca:01:18:9f:4a:41:b1:9a:a0:94:90:fc:d7:cc:
54:14:d1:85:57:79:5b:68:46:6c:2b:eb:a3:40:c2:6d:89:8f:
6a:85:06:02:a5:08:92:d7:f5:0a:c8:ac:d1:29:5d:d3:9c:98:
8c:fd:99:12:98:67:9d:c8:9a:b7:e5:8e:f1:d9:ad:e3:27:a2:
a4:0f:80:a4:71:6b:87:23:32:84:bb:34:f3:c2:7e:05:9e:60:
65:9a:06:44:8f:72:49:28:07:e4:ed:59:a4:18:a6:ae:50:4c:
16:33:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:10 2025 by rpki-client