Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/286E6AACD9C311EF8A1DDA91762E951A.roa
File: 286E6AACD9C311EF8A1DDA91762E951A.roa (raw, json)
Hash identifier: 054r61r+g7tnbsi9qVX74adI7eFfMelxseYMmcgwDno=
Subject key identifier: 31:70:AE:C7:D2:71:21:04:B1:95:EB:42:0F:20:BC:F6:F3:82:63:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/286E6AACD9C311EF8A1DDA91762E951A.roa
Signing time: Thu 23 Jan 2025 19:49:29 +0000
ROA not before: Fri 24 Jan 2025 19:49:25 +0000
ROA not after: Fri 28 Feb 2025 19:49:25 +0000
asID: 62240
IP address blocks: 154.196.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82602 (0x142aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 19:49:25 2025 GMT
Not After : Feb 28 19:49:25 2025 GMT
Subject: CN=67929d49-6ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:8d:12:a5:98:30:7d:9c:46:36:c0:15:28:
7d:a2:c8:4b:5d:5a:9a:37:4f:fe:24:47:0f:e2:9e:
e1:c2:44:3b:53:ba:ec:10:9f:b4:34:4b:df:79:e2:
36:20:fa:a7:36:2f:24:58:56:c0:2e:15:39:c1:96:
c3:cf:88:b9:80:bc:f5:f1:3c:b5:e8:52:60:8e:73:
4a:43:b9:87:38:91:f9:38:15:28:33:4b:19:07:b0:
f3:7a:d5:f6:90:a9:0e:b8:ff:54:88:6c:fa:61:54:
71:77:4e:d7:65:11:97:8d:70:33:73:21:12:2d:bf:
49:8f:9e:2d:82:a1:8b:3f:ee:99:88:93:b1:9d:f6:
d9:d4:b3:d7:02:d7:54:be:dd:4b:50:a9:5c:14:21:
70:57:7c:f1:1e:b4:30:f8:7c:33:fe:aa:e7:d3:c0:
2f:e3:94:10:75:29:f5:2d:77:38:bd:4d:bc:b6:1d:
31:b5:8a:67:f5:ac:c2:0d:c8:fd:8b:a8:e3:df:d9:
c5:b9:0d:34:90:3e:57:f5:86:65:5a:ff:66:a7:aa:
4e:99:cb:70:71:dc:bc:5d:38:00:47:36:f8:1b:85:
a7:d3:d4:33:d5:08:01:7e:95:ad:ba:71:c3:0d:6d:
07:35:c0:26:47:19:56:c8:03:c8:8c:0d:b4:05:76:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:70:AE:C7:D2:71:21:04:B1:95:EB:42:0F:20:BC:F6:F3:82:63:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/286E6AACD9C311EF8A1DDA91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.33.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:8f:e3:8e:f5:ba:55:6f:66:c4:c3:87:63:fa:73:a0:59:1a:
6a:2e:ba:36:e5:a4:fa:df:ce:4d:9b:ab:49:70:e8:e8:d6:3b:
5d:c0:30:23:41:af:61:63:ff:a1:8b:33:a1:7d:b5:a5:07:22:
28:12:0b:e8:22:59:30:ed:1a:44:77:47:35:b6:74:7f:f3:7b:
36:6d:35:f1:b8:35:14:33:59:94:e1:a7:18:e3:e6:bb:67:6a:
82:ac:68:51:ad:5c:9e:71:c1:38:e5:1a:d8:71:26:e0:70:35:
54:c9:a8:d9:f4:9c:1b:c5:87:b3:0f:47:19:19:c3:f6:7d:3f:
b0:92:5f:e7:12:b1:f4:63:cd:95:57:f3:69:df:cc:72:87:56:
bd:2f:f4:4d:3d:13:93:96:33:05:b6:4a:00:74:24:13:38:c2:
e8:78:59:3a:47:99:2f:15:ad:de:5e:40:d9:23:6b:5d:e5:f8:
8d:88:83:ac:85:02:ef:45:e8:ed:37:51:08:5f:67:a4:64:63:
3e:01:fa:d1:88:a7:a0:f8:ea:a5:02:a8:fe:00:5e:71:f1:90:
fc:39:9d:85:4f:07:07:8c:ce:85:42:78:7a:ff:a1:6f:3d:39:
c9:c8:f0:23:f3:c8:af:44:ef:2e:68:a9:10:e2:71:6b:df:1a:
57:10:d3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:41 2025 by rpki-client