Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51B34AECC47211EF8F1F864D762E951A.roa
File: 51B34AECC47211EF8F1F864D762E951A.roa (raw, json)
Hash identifier: un4Abc07I2UXBtNlhARpSAdV8MULI8tEGBrTWgHL3Ew=
Subject key identifier: FA:9E:B9:BF:43:B3:86:F2:98:CA:AA:84:82:72:A2:55:FC:94:F1:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012AC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51B34AECC47211EF8F1F864D762E951A.roa
Signing time: Fri 27 Dec 2024 16:47:55 +0000
ROA not before: Fri 27 Dec 2024 16:47:51 +0000
ROA not after: Sat 01 Feb 2025 16:47:51 +0000
asID: 203020
IP address blocks: 154.200.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76486 (0x12ac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 27 16:47:51 2024 GMT
Not After : Feb 1 16:47:51 2025 GMT
Subject: CN=676eda3b-fa9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:67:5c:5f:a5:29:85:9d:92:26:99:35:5c:
de:b7:ac:f9:d1:09:d8:6d:5e:17:4b:bb:77:0c:6b:
93:39:ca:44:7c:d3:25:29:96:cf:c8:05:77:66:c1:
4a:f5:7f:0f:27:b6:4c:c0:2a:7c:84:f4:c7:c9:f6:
77:d7:7c:23:3c:58:ab:67:df:87:e5:01:3f:33:c6:
72:1a:5a:22:a7:e7:5d:bb:59:30:ec:0e:5a:c6:d7:
d2:0e:f6:1c:d1:b8:dc:81:1a:34:90:6f:21:e5:13:
03:23:c1:e8:d7:1d:89:48:a3:14:3e:bf:e9:32:fe:
00:f2:90:81:b0:a0:b9:95:b7:61:5f:55:9c:2a:10:
7a:f8:10:12:60:12:57:99:73:d5:49:72:b9:82:e0:
17:51:65:fc:47:d7:27:de:b2:f5:40:5e:37:62:cf:
db:8c:33:54:b3:5d:ab:46:b6:07:b0:26:7c:20:40:
9e:a3:e5:ee:54:92:8b:5c:a3:4c:84:13:5b:46:53:
7e:0f:59:c8:cd:f7:e5:4d:75:7d:7d:70:82:3f:3e:
7e:d0:5a:ba:0a:25:2d:21:d4:64:4d:b6:02:97:d8:
ee:4d:3b:ab:c3:a4:a2:63:64:ef:9a:35:dc:e4:6a:
96:24:17:59:1d:41:06:75:ce:0b:ba:99:5f:05:40:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:B9:BF:43:B3:86:F2:98:CA:AA:84:82:72:A2:55:FC:94:F1:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51B34AECC47211EF8F1F864D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.188.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a8:fd:ac:67:4c:39:d6:27:08:60:b4:95:20:85:5b:d7:cc:
4c:b6:45:b4:0e:f1:35:a0:27:53:c9:2f:7e:d5:bc:94:d6:ee:
04:35:fa:cd:f3:f8:c3:2b:e7:d3:84:7d:78:ec:1b:dd:ad:c7:
45:f6:a0:20:f9:eb:3f:2a:20:ec:e8:2b:17:e8:da:e5:35:f5:
8d:f2:49:53:54:a5:a6:af:3f:dc:62:f8:1c:40:c6:61:8c:82:
58:de:a3:53:81:82:56:94:c1:2f:c8:3c:56:ef:aa:32:b6:e8:
5b:4f:5f:b8:05:c7:ea:c3:5e:ac:ad:f0:3a:5a:9f:49:a4:60:
18:4b:f0:88:74:b0:54:10:00:f2:02:bf:82:b6:6a:3d:87:69:
6f:08:9e:c4:02:f7:2b:4a:57:24:68:10:7d:35:7e:b6:8c:1f:
b9:37:13:57:ca:f8:f9:16:6d:13:c8:9f:e6:38:4d:26:b6:50:
fb:2b:c7:b2:12:20:ad:27:b5:e6:9a:6d:d0:25:b1:c2:2e:80:
d9:0d:58:4a:7c:18:da:c7:56:99:32:e3:4e:81:46:16:c2:ae:
63:55:56:1f:ef:92:b3:c1:c9:03:ac:c6:30:1d:b9:6d:ab:a4:
dd:c4:7e:e1:4f:fc:3b:21:a6:ca:83:17:9a:4b:9b:a3:b2:e6:
19:bd:1c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:02 2025 by rpki-client