Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51E24D24D98011EFAD626B58762E951A.roa
File: 51E24D24D98011EFAD626B58762E951A.roa (raw, json)
Hash identifier: 1BfDolz0s/G6h7aUl0eCVchQL4TPUVDqg04Ty27g28c=
Subject key identifier: C2:0E:03:4F:C5:0D:0C:6C:E3:E2:46:53:A9:BA:63:65:46:33:E6:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51E24D24D98011EFAD626B58762E951A.roa
Signing time: Thu 23 Jan 2025 11:51:02 +0000
ROA not before: Thu 23 Jan 2025 11:50:59 +0000
ROA not after: Fri 28 Feb 2025 11:50:59 +0000
asID: 62240
IP address blocks: 154.195.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82378 (0x141ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:50:59 2025 GMT
Not After : Feb 28 11:50:59 2025 GMT
Subject: CN=67922d26-d0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:25:74:93:79:b6:5a:28:e7:4d:d7:5c:3b:
8a:d8:13:4e:66:06:30:88:e3:05:4c:d4:2d:04:6a:
7b:39:07:88:66:91:db:b0:b5:1f:a2:6f:d0:ba:ca:
3a:37:f9:b7:6b:af:5b:db:f0:97:f9:ec:f7:cf:27:
c9:6f:28:db:86:c1:bc:e6:0d:c5:09:ce:b0:b9:5d:
ba:fb:72:21:e0:d6:79:06:87:f2:98:9d:07:03:59:
81:89:14:ea:dc:c7:6a:83:37:23:f7:b5:db:74:dc:
e5:79:99:2d:cc:c2:44:91:e2:50:e6:a3:8b:93:e4:
48:09:c5:ef:04:7d:ed:19:33:d6:3b:d4:c4:1e:e0:
ee:2f:b2:60:8a:45:7c:1c:ae:f6:38:b2:f6:b5:49:
61:b6:97:cd:0b:50:1b:14:47:08:11:44:7d:11:9f:
02:c8:c3:4f:d5:51:a1:41:b8:f5:bd:21:60:d3:cd:
1d:81:17:07:dd:8f:25:41:e4:99:96:e1:41:94:cd:
d8:2c:12:af:58:73:85:bb:03:11:ec:93:53:79:b5:
80:bf:46:a1:c3:e9:92:ba:22:70:2c:7d:cf:66:11:
00:ef:be:61:c7:3f:c2:df:d1:ee:60:5f:74:89:de:
95:9d:1d:da:a4:08:cc:b4:52:0c:28:7f:39:a8:10:
d6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0E:03:4F:C5:0D:0C:6C:E3:E2:46:53:A9:BA:63:65:46:33:E6:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51E24D24D98011EFAD626B58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.123.0/24
Signature Algorithm: sha256WithRSAEncryption
31:72:8b:e4:36:14:d9:df:e5:3d:1e:df:7e:fb:70:91:72:5a:
23:3c:9c:f6:44:ee:7b:da:2b:17:3b:92:38:ff:23:eb:ef:92:
d7:a2:7a:a1:29:b5:64:d4:fd:fa:a9:fd:f0:8b:26:78:65:97:
a0:59:07:d3:96:77:3a:47:3f:2b:38:ec:9a:d0:6e:7e:3e:35:
bc:f3:31:41:4b:98:73:3b:ad:0d:00:94:7f:55:b7:7c:95:96:
5b:f7:30:24:d4:33:5d:58:30:41:8e:13:32:6a:6c:c8:95:fe:
0e:75:ac:92:69:90:2b:80:56:92:e2:32:a0:e8:8c:ee:54:b2:
76:5b:e0:2e:e7:e6:bd:ab:a5:9e:95:b7:25:1a:44:0d:65:4c:
b1:4c:ad:a0:81:f0:56:4e:d3:51:9e:73:89:8e:fd:4d:6b:00:
29:83:4f:98:5c:6a:dc:66:53:df:2e:a2:1f:98:04:35:48:98:
ba:a5:e0:9a:4e:f8:8f:2d:f1:06:f6:59:e2:cb:2e:1e:4d:12:
87:27:f6:b7:83:b5:a7:ff:26:a6:f5:0d:45:5a:03:59:da:32:
2d:42:5c:83:d0:e3:38:67:c8:7f:93:03:68:55:dc:ad:aa:d4:
5b:e8:8a:23:c5:14:3d:cd:75:e0:76:47:7d:b7:a4:4e:37:94:
9b:96:5e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:04:06 2025 by rpki-client