Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33B5022ADA5111EFA516935A762E951A.roa
File: 33B5022ADA5111EFA516935A762E951A.roa (raw, json)
Hash identifier: anLymZZFECh9LKJD370sAzJslLfkDBDca8XqQ8a5eg0=
Subject key identifier: 03:77:47:02:D4:11:7F:70:79:E8:FD:CB:D8:76:FD:83:30:DB:46:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33B5022ADA5111EFA516935A762E951A.roa
Signing time: Fri 24 Jan 2025 12:46:17 +0000
ROA not before: Fri 24 Jan 2025 12:46:13 +0000
ROA not after: Sat 08 Feb 2025 12:46:13 +0000
asID: 18229
IP address blocks: 154.210.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83711 (0x146ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:46:13 2025 GMT
Not After : Feb 8 12:46:13 2025 GMT
Subject: CN=67938b99-c8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:64:55:e0:02:9e:11:a6:ae:d3:47:a0:02:
3f:11:12:4d:50:91:2d:ee:46:0d:99:13:99:f8:e5:
8c:68:c0:22:56:3f:2c:4e:a7:38:49:95:8d:69:6e:
5f:83:3c:e6:c3:ef:db:41:8c:55:57:e3:74:aa:ff:
b7:59:40:26:a6:11:8d:1a:c1:ab:4e:f1:0d:78:1b:
bd:af:32:b8:bd:b1:ce:24:b2:b5:02:80:cd:0a:4c:
1c:2b:cf:35:22:a9:2f:10:82:10:0f:25:48:3c:5d:
98:77:ba:e1:b8:1d:f5:40:f0:3a:08:ed:70:60:c6:
e4:b9:74:54:4a:0f:c1:fa:05:9c:7a:c3:18:b1:15:
ea:ff:7e:ea:05:b1:fe:e5:c2:9a:47:7a:7e:a6:98:
5d:a8:60:99:32:e4:31:e7:97:b4:c7:99:31:dc:1a:
8d:62:50:86:1a:61:12:f0:3b:32:a7:f2:be:a5:33:
2b:24:0d:37:38:49:0c:a4:92:c9:d2:65:cb:25:74:
df:17:ed:42:0e:72:64:5f:a4:3f:67:8e:8e:ed:b3:
2d:b7:fb:8b:c0:ac:f5:ae:df:1b:f3:f9:ee:7e:08:
fe:ca:52:6b:17:f0:e1:9a:75:7c:be:73:92:01:17:
6d:d2:0a:4f:98:5a:74:a4:65:48:a0:bb:77:45:b6:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:77:47:02:D4:11:7F:70:79:E8:FD:CB:D8:76:FD:83:30:DB:46:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33B5022ADA5111EFA516935A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.167.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:7b:a0:6c:49:99:9d:36:55:10:e3:83:ec:b0:43:0b:92:bf:
35:0f:d0:db:6d:44:08:2c:5b:04:59:42:48:9a:2b:19:5e:32:
eb:bc:4d:32:c7:9c:c2:a0:09:24:f5:f2:7b:2b:83:f6:89:0f:
9d:66:b1:c0:29:7b:b9:f8:08:d6:a0:45:c8:4a:c9:b6:59:45:
bd:eb:aa:03:b4:4a:cf:04:7d:de:4e:96:c2:e4:9d:6d:54:2c:
35:fb:3d:4a:2a:a3:2e:69:01:eb:78:df:24:41:43:79:df:ec:
91:2e:7e:bb:e0:a9:1e:8a:99:e0:22:28:77:10:11:d8:61:74:
04:08:a2:6b:b5:b4:c3:6c:98:9f:59:c7:19:38:7c:03:ad:7f:
fc:1f:18:2e:a9:7b:88:77:4f:df:69:65:66:fb:4c:aa:b9:8f:
12:45:cd:1b:cf:e1:48:3e:31:05:82:35:a3:00:ab:d4:47:15:
9a:42:17:4a:bb:5d:38:bf:58:3f:ad:be:59:ca:d7:d8:a9:2b:
ce:2d:96:c1:05:c0:0f:91:3d:fe:a1:67:56:96:a9:a7:2b:ee:
72:db:5a:e6:c9:28:7b:b2:11:a1:a0:19:da:ac:56:bf:1e:ca:
cc:2e:12:a5:cc:54:6a:e6:26:aa:d5:a3:98:7f:50:d4:95:42:
db:df:3e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:15:15 2025 by rpki-client