Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51E30898C29E11EF855C0BB1762E951A.roa
File: 51E30898C29E11EF855C0BB1762E951A.roa (raw, json)
Hash identifier: +XlyHhFkjHxT12aKe4vU4a2Fwyj6beNgBHYK6bLrLEc=
Subject key identifier: 73:E1:1A:A5:B7:56:BA:84:4E:96:63:E6:E5:6F:D1:47:6C:3F:3D:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01251E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51E30898C29E11EF855C0BB1762E951A.roa
Signing time: Wed 25 Dec 2024 08:57:51 +0000
ROA not before: Wed 25 Dec 2024 08:57:47 +0000
ROA not after: Sun 09 Feb 2025 08:57:47 +0000
asID: 63139
IP address blocks: 154.223.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75038 (0x1251e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:57:47 2024 GMT
Not After : Feb 9 08:57:47 2025 GMT
Subject: CN=676bc90e-5198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:48:8d:d1:5b:6a:60:e3:b3:f5:f7:0a:08:38:
47:12:c4:ae:ae:fc:36:89:97:fb:1a:1d:cd:8c:6e:
ff:33:67:61:df:b1:09:ee:3e:82:f8:3c:af:4a:d2:
d9:81:23:46:32:8e:cc:f3:6c:f0:93:6e:81:60:32:
42:37:24:09:7b:d5:24:ea:79:9c:27:26:92:4c:f1:
09:09:52:c7:b7:25:11:69:27:e0:98:68:11:b6:aa:
a7:ce:de:16:80:f5:24:81:44:c8:21:43:01:a5:fe:
eb:cb:e5:b0:cd:32:ae:b6:6b:40:db:f0:d3:ec:45:
d5:f0:cd:d0:9f:ce:24:2b:43:87:be:cd:a6:6b:e9:
97:ca:bd:23:d3:1d:e5:03:b2:b5:59:2b:91:b2:e9:
31:45:fd:91:7b:72:71:55:35:28:76:d3:9d:33:da:
f4:ea:ee:e4:c4:03:04:42:17:d0:30:81:1c:a2:72:
50:64:d5:66:50:12:e2:39:25:ca:1b:37:53:95:8f:
51:46:dd:da:58:a4:6a:79:8f:ff:c4:94:99:cc:92:
ac:cc:f9:b8:96:ea:f3:5b:89:42:c4:71:9f:89:ac:
d3:ba:60:a7:43:2e:8f:da:ad:f6:9c:34:f1:99:6c:
2e:b0:22:49:71:1a:e1:53:10:69:23:70:73:92:b3:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E1:1A:A5:B7:56:BA:84:4E:96:63:E6:E5:6F:D1:47:6C:3F:3D:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51E30898C29E11EF855C0BB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.25.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:43:57:9c:1b:e6:9d:5e:40:31:ea:97:64:5f:a6:64:5c:d0:
3e:37:4a:44:50:d1:df:e4:f2:4e:4d:5b:77:39:9a:28:b3:e1:
76:a9:74:35:2f:a9:91:fe:0e:68:d2:39:60:13:8a:3a:1e:b1:
31:60:63:18:4a:e6:01:0f:9e:e9:8e:dc:0c:2e:c9:81:0a:b4:
54:17:06:7d:6c:22:08:a3:36:29:77:69:ee:d3:bc:d6:eb:aa:
0d:36:1f:71:15:7e:62:92:f4:5d:09:e5:e9:76:8b:ce:d6:67:
29:96:79:fe:7f:58:42:4c:f8:43:59:f6:d6:93:b9:b8:d9:13:
86:70:74:e4:e3:25:0b:b0:25:3f:e7:f9:62:b5:55:59:c3:e6:
52:bf:09:76:cf:0d:94:8a:97:c9:9e:41:4d:0c:dc:86:f0:9f:
c3:5d:7d:a4:57:97:9f:5d:42:a7:2e:e2:eb:98:20:c2:cb:34:
19:a3:3d:b3:f5:19:5e:9b:d3:0e:b2:67:ed:a7:9b:69:9c:ed:
25:ce:a2:ab:0b:00:6b:f8:e0:d3:d6:84:b7:34:12:f9:4b:bc:
c7:08:fc:80:6f:ce:2b:05:c4:ca:47:21:ba:5b:89:f6:c8:11:
51:4e:83:be:34:ba:1d:a4:cc:7e:6f:cc:ca:f7:fb:56:79:4b:
7d:97:27:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:36:54 2025 by rpki-client