Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4D54AFCDA3C11EFA23D2251762E951A.roa
File: E4D54AFCDA3C11EFA23D2251762E951A.roa (raw, json)
Hash identifier: lRQAD200UdeiHz5bcreZzeqYSLO9Tp2wHgzEE3+A7kA=
Subject key identifier: 01:81:44:77:9E:DD:F5:D3:7E:C4:3F:E3:E1:FE:BB:0B:1B:FC:EF:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014578
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4D54AFCDA3C11EFA23D2251762E951A.roa
Signing time: Fri 24 Jan 2025 10:20:54 +0000
ROA not before: Fri 24 Jan 2025 10:20:51 +0000
ROA not after: Fri 28 Feb 2025 10:20:51 +0000
asID: 62240
IP address blocks: 154.196.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83320 (0x14578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:20:51 2025 GMT
Not After : Feb 28 10:20:51 2025 GMT
Subject: CN=67936986-47a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:15:68:ff:5c:0d:4a:30:7e:9f:2a:a8:50:
7f:d8:93:35:33:f4:17:ee:57:8f:1a:28:b1:18:00:
c2:55:0c:50:74:20:8f:09:72:ba:8d:49:4d:53:2a:
d1:99:02:3a:27:75:84:f5:ad:38:07:97:e6:95:8d:
d6:d4:e2:13:94:ab:de:c0:63:e4:4a:64:9c:72:bd:
2b:24:97:c7:9d:50:43:9e:98:af:c2:82:fc:ae:a1:
f5:11:65:c3:b0:60:50:c2:b5:f9:35:9d:3f:af:7d:
55:5d:a4:61:62:4c:2a:54:65:86:65:e5:ce:c5:ba:
66:d7:1a:99:fc:d8:91:cc:b8:6b:cc:58:a8:3e:49:
12:44:15:94:a9:86:00:bd:ad:1b:33:1e:56:9d:92:
29:72:f2:b2:79:47:54:65:11:a5:6d:cd:21:3f:73:
9c:2a:35:9c:86:63:80:04:01:13:67:0c:a5:8e:0e:
a0:b5:74:23:cb:fa:19:56:65:1a:63:6f:c5:6c:db:
db:72:1e:ca:68:eb:64:89:64:19:2b:59:54:6d:62:
9b:d8:2c:78:c1:43:07:49:f5:8b:20:8f:cf:53:31:
cb:be:29:0a:0a:f5:fa:c3:83:27:f2:32:6b:a7:3e:
3e:41:42:c4:2e:1c:bd:48:f3:c5:38:21:51:e1:d9:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:81:44:77:9E:DD:F5:D3:7E:C4:3F:E3:E1:FE:BB:0B:1B:FC:EF:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4D54AFCDA3C11EFA23D2251762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.51.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5a:4c:90:b6:ec:b1:5b:ae:65:23:ba:8e:a0:ca:ff:c4:61:
9e:cb:00:28:53:e7:82:4d:7e:63:4c:d1:46:02:d0:6e:35:ee:
35:90:fb:50:76:3d:6c:e7:8a:a2:36:40:2c:65:26:ca:e3:04:
8a:0c:51:04:07:32:7d:1c:a8:fc:10:59:2f:ca:a9:61:79:e4:
c6:1b:6b:a8:fb:bc:49:1f:d7:77:97:42:51:1b:91:3f:66:27:
a9:08:df:f9:ed:5d:81:86:31:29:1c:ea:91:9b:f7:4e:b0:ee:
0e:53:ad:a5:60:e8:99:62:14:20:86:04:df:6e:2c:3d:2e:ff:
78:63:78:ff:ee:5f:26:b4:e1:57:59:3e:8c:29:aa:c3:73:7f:
32:82:a1:0f:79:9b:6b:ab:55:6c:90:3d:36:96:f5:9d:38:02:
c4:39:a6:69:9c:92:57:aa:21:06:f4:8b:6e:2b:dc:6f:32:ea:
f8:85:5a:f0:c9:dc:c4:f5:06:f6:08:88:0f:b4:cb:53:97:f1:
78:7a:df:c9:12:0b:76:7e:30:a7:a5:b8:c1:4b:7f:04:e1:19:
25:1d:d4:c2:7d:6d:95:be:d7:91:66:0f:f4:58:7a:6c:9e:b4:
03:5c:2f:7d:2b:a8:b9:bf:e2:41:d2:bc:84:c5:35:2d:14:d4:
72:42:dd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:46 2025 by rpki-client