Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03CCD9A6DD6311EF84E47D94762E951A.roa
File: 03CCD9A6DD6311EF84E47D94762E951A.roa (raw, json)
Hash identifier: WpZx0ENJ1USXjBecMA3aDpDO7KqOI6VP2DZp/WEgF+U=
Subject key identifier: 83:85:F1:F6:04:E5:74:5F:4B:B9:7F:58:6B:B3:FB:CB:7D:7A:A4:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03CCD9A6DD6311EF84E47D94762E951A.roa
Signing time: Tue 28 Jan 2025 10:31:21 +0000
ROA not before: Tue 28 Jan 2025 10:31:17 +0000
ROA not after: Tue 11 Feb 2025 10:31:17 +0000
asID: 140869
IP address blocks: 154.81.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85188 (0x14cc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 10:31:17 2025 GMT
Not After : Feb 11 10:31:17 2025 GMT
Subject: CN=6798b1f9-569d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:6b:17:59:59:21:4e:e1:28:50:4e:b2:fa:
87:a8:01:1b:26:c6:81:b6:0c:2f:a1:0f:3c:57:31:
72:0f:0c:98:01:56:16:42:71:6f:8c:b2:73:9c:26:
2c:d0:82:40:96:09:d4:ce:3d:2e:6b:60:2e:db:30:
62:cd:aa:a3:02:8a:70:d0:17:29:e8:5e:93:c8:d4:
e8:2c:b5:95:88:f6:00:83:55:32:60:7f:9d:e3:d1:
13:ce:2f:c3:fa:f5:4c:f4:e3:09:3e:4f:f9:f4:de:
58:79:02:45:6e:1b:7b:37:a2:65:4a:d5:8f:f9:a8:
44:2b:9d:f6:62:df:b7:6b:1b:f9:6e:47:77:68:5c:
bc:99:ca:1e:fa:23:9e:1c:57:f8:e6:15:61:a5:f9:
08:b4:7b:10:7a:eb:85:4d:2d:9b:19:80:ca:8f:69:
a9:8d:33:f1:ac:ed:7e:33:d9:81:e2:da:59:ae:6e:
a0:fa:7f:7f:98:66:ed:4b:67:42:f5:49:d7:46:6a:
86:7f:5b:a9:ad:f9:e8:10:79:3d:2a:37:4c:ff:89:
d8:a1:17:79:5c:8a:b1:7c:1f:19:f4:2a:22:e7:51:
7c:83:04:9e:3f:67:54:6d:33:35:66:b8:80:34:0f:
25:0a:ac:74:f9:15:68:47:2a:7d:e2:d4:e4:9f:9e:
1b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:85:F1:F6:04:E5:74:5F:4B:B9:7F:58:6B:B3:FB:CB:7D:7A:A4:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03CCD9A6DD6311EF84E47D94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.33.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f8:24:ba:68:d8:50:a9:5e:8c:7d:67:2e:79:4f:81:4e:70:
e1:f0:07:4a:85:f7:36:97:4b:cb:d4:35:22:61:fa:9d:ed:df:
94:8c:0e:36:9a:31:27:49:08:70:3c:8b:d8:2c:78:d4:3e:e4:
a1:ba:af:78:b5:f6:3a:c2:1b:88:86:45:07:54:5a:2d:f1:96:
ea:de:ac:5f:88:58:1f:12:54:12:18:b7:54:ef:37:7f:f6:68:
fb:f5:db:82:41:d1:76:ce:88:d6:ed:db:f5:f1:cd:8d:4c:be:
48:75:c9:a3:0a:a1:09:75:76:39:45:e3:9e:28:41:af:3f:0b:
c6:34:11:b3:3b:82:e0:a7:b5:fb:93:eb:01:b0:5b:06:86:26:
ef:aa:5c:d6:43:b8:84:f0:42:95:70:70:16:f4:e8:5e:34:ea:
ed:10:e2:3e:52:9f:9c:c7:5e:5e:b3:6f:8b:11:69:fe:60:94:
f1:60:15:30:0e:49:a7:48:4d:32:23:58:a1:b1:e8:23:d2:7d:
6a:72:06:9a:cf:68:c1:bf:01:75:df:d6:df:46:57:5e:c4:f8:
a3:75:37:15:1d:30:2f:59:61:22:b8:28:45:78:59:ec:fd:83:
0b:8a:52:c4:48:6c:47:b2:8d:27:d0:02:42:22:ab:29:84:6d:
e0:80:2a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:13:05 2025 by rpki-client