Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B68D332DA3811EFB239DAAE762E951A.roa
File: 0B68D332DA3811EFB239DAAE762E951A.roa (raw, json)
Hash identifier: 4ixsqV/hxuYGTettsKicvSQ1yUjiDNxdA1TUCuc4bqU=
Subject key identifier: 59:B4:5C:B5:80:B1:72:A4:EC:7F:AF:4C:E3:2E:23:10:ED:51:84:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014519
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B68D332DA3811EFB239DAAE762E951A.roa
Signing time: Fri 24 Jan 2025 09:46:12 +0000
ROA not before: Fri 24 Jan 2025 09:46:08 +0000
ROA not after: Fri 28 Feb 2025 09:46:08 +0000
asID: 62240
IP address blocks: 154.196.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83225 (0x14519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:46:08 2025 GMT
Not After : Feb 28 09:46:08 2025 GMT
Subject: CN=67936164-8388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:87:1d:25:a0:58:c3:9e:2c:72:fa:44:0c:
71:dc:99:88:94:fb:b8:95:48:2b:4d:89:74:8e:b5:
cd:53:21:3f:3b:6b:00:2a:46:ea:20:bd:6c:c2:dd:
56:8e:8b:82:84:65:cc:f7:a6:96:24:38:67:f4:93:
c4:e1:62:cd:e1:5e:6f:20:fb:70:e5:82:c2:c5:c5:
04:8f:45:80:bb:ab:71:bb:df:d9:30:95:87:dd:1d:
2a:d6:e8:06:e7:e3:d0:6e:cb:ad:07:fc:e3:a8:a0:
39:33:ea:56:bc:92:d8:0d:8b:06:10:6a:5f:89:a4:
80:18:4d:74:f2:cc:2e:2f:a4:61:6f:1f:12:49:a3:
8c:70:f3:4f:8a:6c:e8:ac:99:1b:52:62:48:1b:b6:
a7:09:f3:ca:85:62:45:dd:da:86:13:ba:6a:be:45:
27:20:d4:7d:0f:f6:f5:21:78:b7:59:5f:07:02:ad:
b8:34:2b:c9:63:db:2a:4b:66:c7:3f:d1:29:5a:d6:
8a:f4:2d:6a:ae:8a:ef:37:d7:68:af:51:e0:61:41:
cf:0e:64:73:47:d6:ca:d2:eb:0f:39:36:de:86:05:
53:78:23:04:75:50:8a:93:11:60:94:56:43:11:ee:
33:ac:d4:97:cc:2b:77:37:98:c6:6a:95:a6:34:be:
c5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B4:5C:B5:80:B1:72:A4:EC:7F:AF:4C:E3:2E:23:10:ED:51:84:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B68D332DA3811EFB239DAAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.33.0/24
Signature Algorithm: sha256WithRSAEncryption
25:75:a2:bc:c8:9d:e6:2a:3b:ac:7d:53:3b:10:99:bc:d7:8d:
76:1c:0a:b3:34:51:2a:56:3d:dc:3c:6d:fe:18:75:ff:fa:c2:
55:cb:89:56:9a:7d:e0:f9:8b:f7:ae:d5:35:a6:1f:bb:ce:e3:
03:3d:e2:d7:76:ce:24:d9:a4:16:20:5e:d4:ca:54:cb:3e:5c:
bf:70:54:05:1e:18:07:8c:24:18:cc:84:fc:97:dc:0b:0d:de:
fe:77:54:b6:ef:0f:af:81:5e:e8:9b:d0:9d:46:bb:86:2d:58:
52:79:20:22:af:81:ed:5d:5f:e8:ca:1f:34:a5:23:8c:76:07:
e8:ac:3c:f3:5c:ae:9d:90:8c:9e:d8:2f:ae:a2:a2:6f:ca:34:
72:e1:1f:47:6e:f1:68:7a:c6:2e:d5:66:59:0d:98:e1:e5:ff:
eb:a3:e0:6e:97:84:c6:5a:3f:50:ec:f6:8e:6c:52:90:07:67:
fd:17:b6:bb:81:54:9b:21:85:58:52:18:09:85:9e:fb:2e:82:
07:84:19:db:0f:27:ab:50:d6:fd:d1:33:36:72:c2:e5:63:b0:
6c:13:b7:99:c9:f1:ba:f9:d0:b9:cb:ef:3c:66:02:4e:ac:fb:
16:4f:90:4d:07:51:93:5a:ae:98:24:71:0c:bb:86:b8:bf:23:
88:66:17:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:36 2025 by rpki-client