Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33126440DA5911EF920AD492762E951A.roa
File: 33126440DA5911EF920AD492762E951A.roa (raw, json)
Hash identifier: IO7TwTEuflEh9UDwsjNehbGtECbcq46jH7zaPEw7OR8=
Subject key identifier: 15:67:DF:C5:C7:1C:AA:05:65:B5:99:60:5A:1F:09:77:37:ED:23:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33126440DA5911EF920AD492762E951A.roa
Signing time: Fri 24 Jan 2025 13:43:32 +0000
ROA not before: Fri 24 Jan 2025 13:43:28 +0000
ROA not after: Sat 01 Mar 2025 13:43:28 +0000
asID: 44559
IP address blocks: 154.198.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83876 (0x147a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:43:28 2025 GMT
Not After : Mar 1 13:43:28 2025 GMT
Subject: CN=67939903-9941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:86:0b:b6:e9:a7:ab:c4:f0:6b:e4:cb:b7:
70:ad:a1:ad:85:13:f8:4c:17:7f:ce:99:f3:eb:a3:
de:95:48:94:09:23:f8:4e:1d:55:4e:37:24:a2:82:
32:df:c8:6a:ee:62:06:87:59:ea:5a:cb:f5:84:64:
11:76:a0:e2:72:c8:72:10:b7:1d:1e:4e:90:2b:e1:
a5:21:cf:66:b9:b6:9c:b4:23:1c:0f:09:a1:a7:c0:
66:d9:fd:6c:0b:83:f9:dc:1e:69:47:e5:24:c5:14:
16:ac:a9:aa:a2:30:ad:93:37:8b:c5:63:21:3d:53:
5e:70:79:f1:f7:6c:e4:d0:ff:22:a4:b2:16:3c:21:
3d:84:35:2f:27:5a:54:ac:6c:26:8a:6a:b8:32:8d:
da:4d:a0:a6:ff:b6:ae:41:61:b8:4e:cd:f0:bf:a8:
39:3d:c1:b0:b6:0c:a8:98:ea:b5:cd:35:c5:c8:15:
79:1b:ea:71:f7:02:2c:66:46:2e:2a:d5:af:93:ec:
ed:b0:1d:31:43:e2:b2:2c:8e:a5:f0:bc:84:a1:ab:
73:18:18:25:06:58:ac:70:ec:02:36:7e:e7:87:4d:
3f:eb:0c:2f:68:57:ba:d7:c3:93:e2:1d:c5:44:32:
b7:52:e4:5b:cf:28:84:d2:a8:60:1d:d1:4f:46:c5:
43:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:67:DF:C5:C7:1C:AA:05:65:B5:99:60:5A:1F:09:77:37:ED:23:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33126440DA5911EF920AD492762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.36.0/24
Signature Algorithm: sha256WithRSAEncryption
22:73:cc:66:42:4d:f0:10:a1:f7:0e:28:ad:05:13:f9:c9:3a:
48:7b:c8:3c:94:f2:d9:44:5b:73:a5:65:31:92:ac:74:9f:90:
8c:1a:34:0a:54:0a:db:67:27:ee:56:6c:61:0c:2c:83:cc:38:
ef:b9:b3:6d:14:18:9e:2e:50:ba:52:e3:8e:7c:b3:ec:3e:0b:
0e:4d:86:8c:34:36:6c:8d:4d:ac:48:87:a6:6a:62:51:5b:41:
98:af:13:90:83:96:f7:32:1e:4a:d0:74:05:2d:b1:99:45:d9:
b7:21:ef:4f:7c:0e:e3:1d:b1:35:50:34:40:30:89:1b:8c:1c:
1c:51:eb:73:b1:3b:90:de:bc:45:e4:39:d3:ec:d7:da:72:fc:
0c:ea:41:23:e7:53:1e:c3:ac:26:38:81:ef:f8:ee:24:05:1c:
9f:79:65:e1:b2:ce:67:8e:33:be:e0:88:42:e6:f6:9c:d8:8e:
b0:19:21:9f:f2:1a:42:3a:7d:21:99:34:c8:28:bc:3e:46:9d:
62:0d:b4:35:59:4d:b9:1a:e6:51:9e:11:da:d4:46:6c:a1:fb:
a5:fc:11:3c:04:c7:1a:94:9f:4c:ff:27:79:e0:8e:0a:c3:50:
4e:e7:cb:6d:c6:7d:41:7f:70:ca:1a:e0:67:45:58:a2:0b:de:
b4:80:fa:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:50 2025 by rpki-client