Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29885E9ADA5711EFAE72EB84762E951A.roa
File: 29885E9ADA5711EFAE72EB84762E951A.roa (raw, json)
Hash identifier: 6JqPqUiIa5mbZty1XAlUEbEx+93WxAElnfZ81Qqt5zg=
Subject key identifier: 17:8B:BC:8E:20:26:03:FB:9B:E0:13:FC:9B:46:96:A2:E1:3E:25:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014779
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29885E9ADA5711EFAE72EB84762E951A.roa
Signing time: Fri 24 Jan 2025 13:28:57 +0000
ROA not before: Fri 24 Jan 2025 13:28:53 +0000
ROA not after: Fri 28 Feb 2025 13:28:53 +0000
asID: 62240
IP address blocks: 154.194.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83833 (0x14779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:28:53 2025 GMT
Not After : Feb 28 13:28:53 2025 GMT
Subject: CN=67939598-fe5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:d5:66:f4:1f:fe:2c:ed:a7:14:8b:9c:4e:
25:e3:18:42:66:22:31:65:b0:79:77:e1:be:2b:c6:
d9:0a:ec:a5:52:61:94:bd:c1:85:7d:1e:5d:73:6a:
04:2d:5c:f9:53:89:83:96:0a:c0:1f:18:11:2f:af:
50:68:09:d5:bb:6b:3a:6b:5e:a1:09:37:29:fc:d6:
10:53:0e:65:db:d8:9d:35:87:23:90:3b:1a:8f:2b:
fd:2a:5c:69:a8:90:07:c9:0a:5c:ed:82:e1:ff:69:
65:a0:45:50:61:16:47:d4:75:41:f7:c5:58:5d:a6:
a9:9f:01:0e:3a:86:01:7f:e0:42:69:a4:7a:a7:b7:
75:83:79:e4:04:be:c5:06:4c:8f:16:f0:2f:2c:ce:
24:6b:2e:e1:c5:43:ad:b2:f9:7d:93:d3:ed:fd:34:
9d:2d:41:36:f4:8d:a5:f9:69:4c:62:bd:0d:dc:5a:
51:00:34:32:21:e8:ed:af:bd:b5:e3:31:50:60:5a:
1e:6a:13:65:3f:81:a6:47:08:a5:32:91:3e:57:95:
46:3c:77:b8:f5:c5:d1:17:e1:fe:36:e0:76:15:78:
d5:dd:2b:50:33:86:fd:d0:c6:c0:ac:35:e0:11:ab:
d8:ef:c7:ba:25:84:04:a8:5c:34:83:8f:2a:2f:80:
0e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8B:BC:8E:20:26:03:FB:9B:E0:13:FC:9B:46:96:A2:E1:3E:25:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29885E9ADA5711EFAE72EB84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.33.0/24
Signature Algorithm: sha256WithRSAEncryption
67:93:a8:6b:b7:5f:73:cf:25:33:8c:4a:04:ab:71:0e:00:a8:
06:25:d5:32:df:d4:7a:29:94:f2:2c:fc:10:94:f0:61:fc:04:
61:6a:58:47:dd:4b:ba:ac:50:1f:ec:ec:29:58:dd:12:39:88:
8f:ea:37:df:f0:eb:18:0a:8e:17:a9:8c:80:df:ff:0d:1e:84:
84:cf:39:cf:b0:3b:a0:06:e4:5e:b6:fc:a0:7d:1d:22:f7:52:
55:ab:de:e1:e6:08:36:34:b4:21:1a:f6:55:1a:d8:a5:10:d5:
bd:6a:ad:5b:fa:88:18:39:a7:e3:c8:52:cb:1d:bd:1b:aa:89:
89:ef:58:8b:4b:0d:b3:28:6b:a5:e0:e3:09:63:7f:bb:63:de:
c7:0a:4c:ad:90:ab:6f:5a:2e:3a:2b:e8:c1:5d:b0:7f:38:a4:
6d:53:26:17:6c:fa:0c:f8:4b:d1:e0:57:0a:a3:e1:ce:f5:34:
69:fd:fb:b3:e2:07:84:15:54:01:d6:d0:e7:13:c8:67:b1:2d:
ff:02:48:cf:00:c2:49:5f:f2:99:dc:6d:a9:9e:e1:4d:8f:d3:
01:40:93:ed:be:8a:19:95:a6:5a:06:cf:04:e2:39:a5:eb:79:
73:50:3c:3e:cb:26:9d:b8:9c:f8:02:e6:c8:ad:5a:05:12:bb:
96:24:15:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:19 2025 by rpki-client