Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51AA2DA8DCBF11EFB9851F41762E951A.roa
File: 51AA2DA8DCBF11EFB9851F41762E951A.roa (raw, json)
Hash identifier: wuir/WIHguW0CFQaOOiykngjCBJ+74uupXkXneZBgmM=
Subject key identifier: 44:6E:2A:E8:24:80:73:8A:A8:3C:78:50:D4:99:65:A1:56:DE:DD:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51AA2DA8DCBF11EFB9851F41762E951A.roa
Signing time: Mon 27 Jan 2025 14:59:34 +0000
ROA not before: Mon 27 Jan 2025 14:59:30 +0000
ROA not after: Sun 09 Feb 2025 14:59:30 +0000
asID: 5065
IP address blocks: 154.86.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85033 (0x14c29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 14:59:30 2025 GMT
Not After : Feb 9 14:59:30 2025 GMT
Subject: CN=67979f56-5435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4b:16:51:86:a9:5c:40:28:60:5d:0b:a3:53:
7b:f9:1b:7b:6a:11:fb:62:15:b6:78:c4:ca:99:4c:
1c:71:81:3c:18:b1:df:5a:04:64:9e:35:23:73:5e:
6e:4c:5d:e5:5c:0e:d5:b2:d1:27:96:17:e1:cd:1a:
4d:69:95:c8:ad:7c:82:e6:56:50:f5:78:69:b2:8f:
35:b8:64:8f:8b:0f:a2:63:ee:12:52:b9:78:c3:1d:
85:74:52:2f:28:a3:05:1c:ef:f6:2a:ec:ac:34:88:
73:ba:10:46:b9:61:ea:ca:d1:a9:6e:54:f2:3c:c1:
e3:86:a2:1b:59:35:b1:85:a6:20:ad:2f:69:f5:86:
87:f3:4e:90:da:18:03:8e:a3:0f:ec:85:f5:65:c0:
21:41:19:ee:87:da:37:b1:e9:d3:a6:a2:b5:b3:23:
41:2c:43:2a:a3:51:2c:79:f2:d1:c0:eb:fa:43:4b:
ea:60:da:c2:13:9e:a5:e7:60:ca:26:7e:93:b6:f8:
78:a1:ef:7a:0d:ab:e5:a7:c4:dd:e8:0c:f7:5a:b1:
e1:1f:17:fa:23:19:60:f8:04:ca:02:49:a8:44:26:
a3:3a:1c:6f:b5:23:85:6c:28:cd:97:08:ab:13:23:
37:a8:0f:b5:b3:de:16:34:40:53:e8:a3:72:b4:95:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6E:2A:E8:24:80:73:8A:A8:3C:78:50:D4:99:65:A1:56:DE:DD:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51AA2DA8DCBF11EFB9851F41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.100.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:aa:fd:da:5a:c8:86:6b:6e:47:36:38:60:61:4a:63:4e:9a:
5d:21:f0:e6:37:5f:8d:b1:17:b5:37:62:dd:3a:88:48:e0:19:
eb:61:ec:a0:df:fb:5f:77:59:ef:91:e7:5d:35:00:dc:18:ac:
05:69:47:21:e5:ca:55:28:37:a7:2f:ef:00:a0:f0:cc:54:80:
a1:10:c5:85:64:d0:4b:5d:62:e0:4c:74:45:93:f6:89:f9:12:
7d:f2:d1:79:5d:4c:74:f3:36:c0:1b:38:7d:52:57:24:d3:2d:
eb:9c:31:5e:6b:22:21:16:4b:72:54:4d:81:1b:d8:45:a4:b3:
da:bf:f4:f6:89:3a:b5:0f:2c:d7:c6:db:90:8e:79:1d:9d:45:
0d:5d:9a:39:90:97:df:a1:f1:08:0e:6b:4c:08:a0:98:25:6d:
57:1e:44:15:e8:85:81:94:92:06:7c:9b:6c:df:20:da:f4:cb:
1d:a9:8e:3a:a2:58:34:e6:cc:73:7d:29:1e:ef:b4:8c:30:a2:
7c:9b:25:bb:c4:10:4a:00:c5:16:39:a8:ad:06:bd:ac:b3:ed:
7e:09:fb:b8:48:2e:42:61:7e:33:cb:e3:ab:5c:0d:2c:4f:f3:
95:9c:d2:90:dc:97:87:65:74:fc:50:f6:02:a8:53:38:e8:4d:
fb:f8:cc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:23:58 2025 by rpki-client