Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/251FDAD0DA5311EFA6189569762E951A.roa
File: 251FDAD0DA5311EFA6189569762E951A.roa (raw, json)
Hash identifier: MZJXXgJtz3g6mIucu3XyUFmvQwO4MpzvJC/J7zeSvsk=
Subject key identifier: 60:97:4D:A1:38:FB:CD:0A:61:DC:2B:CF:21:E6:5A:D5:15:D8:F6:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014731
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/251FDAD0DA5311EFA6189569762E951A.roa
Signing time: Fri 24 Jan 2025 13:00:11 +0000
ROA not before: Fri 24 Jan 2025 13:00:07 +0000
ROA not after: Wed 05 Mar 2025 13:00:07 +0000
asID: 44559
IP address blocks: 154.209.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83761 (0x14731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:00:07 2025 GMT
Not After : Mar 5 13:00:07 2025 GMT
Subject: CN=67938edb-cc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:aa:12:b4:91:27:3a:86:ca:16:70:49:e4:
ed:72:37:c2:33:85:ad:95:81:9b:d2:7f:f5:13:03:
78:f5:2e:72:4b:c8:80:63:69:3c:5c:63:c5:b4:ed:
d2:50:2d:90:8b:d3:3c:04:8a:74:d4:39:24:fd:31:
71:c8:e3:ef:36:27:a5:81:9d:d9:fc:c5:b9:a6:79:
06:14:45:e0:e9:bb:e8:59:81:50:c2:88:c0:24:4a:
ae:95:ca:46:8c:9a:0a:27:3b:e5:73:03:fc:1b:87:
7b:eb:18:55:ec:3d:cc:f1:b7:34:94:a9:6c:e7:b6:
bc:30:46:99:d0:e8:31:68:11:4f:b7:5f:90:ea:a6:
f3:2c:99:b6:ea:c3:aa:c7:89:e9:7a:eb:4e:a6:9a:
22:9b:a1:49:7f:0b:6a:3a:a3:03:8d:83:59:5f:06:
5f:e9:ab:fb:68:8f:aa:cf:b4:a9:0a:e4:3e:4b:2c:
e5:30:95:7a:70:06:1e:19:13:a4:45:13:e8:f9:36:
bb:63:4d:26:49:c2:0d:f9:38:d7:b7:c3:8d:fd:e2:
a2:f3:ed:77:26:7a:5f:c1:ef:53:f5:3a:3d:8e:8e:
e4:32:d5:56:4e:84:01:72:81:b6:45:55:70:4a:cc:
08:96:08:e3:e2:32:e2:0d:b5:f4:56:cc:d9:56:41:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:97:4D:A1:38:FB:CD:0A:61:DC:2B:CF:21:E6:5A:D5:15:D8:F6:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/251FDAD0DA5311EFA6189569762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.144.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f3:fe:9c:3a:a3:3c:69:8a:12:db:5a:fc:cb:65:ac:dc:e2:
aa:6b:f1:2b:2c:7e:dc:d7:7f:c8:eb:f2:21:b5:14:44:0c:e6:
ba:80:e3:08:fe:1a:1c:ec:be:60:fe:f5:62:b7:46:99:52:d4:
31:48:d8:ea:a4:0b:3f:f5:cd:28:e5:58:e0:73:8a:f7:96:ee:
d2:60:dc:ed:cf:74:08:a1:cb:51:b4:a2:10:25:40:b6:86:78:
98:23:f9:69:60:1a:9d:fb:4b:e5:da:e0:36:b1:c0:8b:fd:b8:
46:c5:cc:3f:41:56:37:55:4d:0b:e0:8d:b1:ac:9c:9c:f4:e0:
e0:07:e0:fa:b1:d2:79:10:ae:1c:b9:07:a0:30:33:d5:c8:3c:
74:2a:89:2b:d9:0c:ba:a3:e5:34:b1:ec:d9:b0:f0:20:9b:fc:
2b:d5:7b:94:8b:e7:1c:2d:09:03:e1:b2:cc:56:23:06:71:dc:
5d:7b:20:ee:61:3b:77:11:cd:c8:87:66:cc:5c:a6:23:a9:b2:
f6:de:2b:bb:f2:f1:f7:c6:26:cf:db:35:7d:fc:cb:9b:cb:c3:
b0:d1:52:19:7e:23:7a:1e:a1:3f:8e:e6:b5:07:6f:ec:9f:ca:
74:5e:57:0c:80:38:61:b1:7f:97:a5:2f:9e:1b:b8:28:94:47:
d7:57:5d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:03:25 2025 by rpki-client