Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51C5870AD97811EFBA1DABA3762E951A.roa
File: 51C5870AD97811EFBA1DABA3762E951A.roa (raw, json)
Hash identifier: YRX/rmqBU6N099tpOeBChMMM49zyZ03EDaV9W0GiPbg=
Subject key identifier: 9F:16:52:C3:71:F7:33:30:AE:7A:BF:F6:31:40:32:0C:93:C0:6C:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01415A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51C5870AD97811EFBA1DABA3762E951A.roa
Signing time: Thu 23 Jan 2025 10:53:46 +0000
ROA not before: Thu 23 Jan 2025 10:53:43 +0000
ROA not after: Fri 28 Feb 2025 10:53:43 +0000
asID: 62240
IP address blocks: 154.195.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82266 (0x1415a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:53:43 2025 GMT
Not After : Feb 28 10:53:43 2025 GMT
Subject: CN=67921fba-a612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:43:fe:cf:42:89:ae:4a:d6:ff:98:81:e1:
e4:5e:5c:ac:f1:8e:95:6c:ca:9c:96:cd:62:a1:cd:
b7:07:32:79:7a:e6:58:ad:0d:8e:36:fd:13:75:9b:
97:25:10:33:b5:bf:c6:ac:58:2b:6e:19:b3:86:c4:
a2:73:28:a4:c8:b7:f1:ec:fc:e0:60:b4:de:62:31:
36:88:63:66:21:3f:2d:79:7d:24:f4:09:a6:20:3c:
f6:b4:e7:c8:d4:89:a1:29:51:a0:77:dd:ad:27:24:
b8:55:d8:d1:02:77:81:e5:69:7d:24:c4:bb:88:78:
c9:e8:47:40:dd:00:27:9a:bb:84:42:82:1e:a6:1a:
e9:bf:6f:cb:96:a2:a7:95:a6:3d:d2:49:2b:dc:cb:
5e:3c:c9:2f:8b:a4:f2:62:bb:fa:c6:e5:5b:80:56:
e0:1e:ab:d2:70:cc:23:f2:e2:68:77:5d:9c:c0:c3:
da:cf:81:ce:b8:09:f6:fb:29:a2:33:ea:a9:ee:bc:
90:66:06:9c:5f:47:4d:f6:81:17:7a:bd:32:a1:6a:
b5:03:0c:03:f2:b4:58:ab:88:7f:bc:f9:11:a1:e1:
ab:19:55:c2:d2:9d:5c:68:36:0b:4e:90:0b:06:9a:
30:57:8c:12:4e:11:b5:fa:3a:cf:c5:d8:39:2d:97:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:16:52:C3:71:F7:33:30:AE:7A:BF:F6:31:40:32:0C:93:C0:6C:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51C5870AD97811EFBA1DABA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.140.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ea:da:70:3c:f7:7b:d4:31:d7:da:9a:d7:34:86:86:00:1f:
d2:3e:0c:44:e3:38:fc:aa:33:d7:51:6a:25:f2:ac:7b:dd:ed:
09:d5:9e:93:c1:00:68:0f:d7:4c:e6:a0:9b:39:1e:57:f0:0b:
24:a0:b2:d5:f8:cb:3d:07:58:37:66:e6:6e:21:8e:a3:a2:c7:
5e:2b:0e:6e:1d:19:9e:83:3e:1e:fa:0a:33:c3:80:d0:6f:de:
aa:92:88:6e:b3:64:33:c7:28:7c:70:17:1c:1c:59:11:f8:41:
9e:ff:92:65:b2:68:92:8a:4e:ed:b8:9d:80:ed:00:d1:e4:6c:
71:3f:89:b1:06:78:ea:6c:0d:19:7a:4e:aa:ab:22:4f:de:81:
db:5d:35:e9:0d:26:21:b4:99:37:54:b9:16:b3:9f:9c:0f:f8:
1c:9a:15:00:c0:39:19:26:60:62:81:d6:76:1f:92:ca:4e:01:
34:dd:82:d6:49:b2:3d:f6:89:ee:02:a5:1c:a2:eb:7f:a8:12:
64:1b:93:02:3e:29:20:e1:a2:eb:4d:91:0e:1f:00:0c:d1:44:
02:a5:8b:70:4a:52:b3:18:a3:b5:09:07:85:39:ee:25:99:b6:
a9:3f:83:12:fc:f8:35:8b:05:1b:ad:10:ed:f8:f0:02:aa:08:
62:51:1d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:28 2025 by rpki-client