Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33F90C7CB21011EFA7B73168762E951A.roa
File: 33F90C7CB21011EFA7B73168762E951A.roa (raw, json)
Hash identifier: lPEPrzB7g2f6a0DYMWpMko5UM6siMfqJ3kQn4lI4xIo=
Subject key identifier: 57:1D:E2:8B:48:C6:B0:74:DA:6A:B5:68:F5:C2:27:F3:F1:FF:1B:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33F90C7CB21011EFA7B73168762E951A.roa
Signing time: Wed 04 Dec 2024 07:20:13 +0000
ROA not before: Wed 04 Dec 2024 07:20:10 +0000
ROA not after: Sat 01 Feb 2025 07:20:10 +0000
asID: 150008
IP address blocks: 154.210.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71592 (0x117a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 07:20:10 2024 GMT
Not After : Feb 1 07:20:10 2025 GMT
Subject: CN=675002ad-b090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:34:94:91:68:f5:cf:63:57:83:be:43:13:c7:
06:82:f6:4d:9a:27:1c:f7:e9:3a:b3:ac:15:13:1c:
19:1e:2d:e4:d1:e8:12:5c:dc:9d:a3:3f:42:4d:2e:
e7:5a:7f:2a:3b:90:3c:c0:e2:8e:cf:cd:1f:69:fe:
88:13:32:62:e2:37:68:6c:e5:b9:5a:f4:d2:41:f3:
13:3b:6b:96:0d:51:7f:fb:79:2f:ad:3f:da:f2:b1:
ba:6a:bf:1b:7b:34:ef:0c:04:8e:2a:18:df:84:0f:
3b:aa:d0:c7:49:ed:71:13:8c:8f:ed:d6:4f:da:9d:
0d:f5:aa:4a:1f:1b:a8:7c:a5:78:0a:74:c5:83:be:
1d:9f:09:ab:3a:a0:b8:0c:70:80:8d:7d:91:48:da:
eb:5c:7a:08:f1:23:43:c3:dc:7e:40:f2:89:39:18:
11:f5:ff:43:6b:73:f9:e5:fa:be:17:bb:b1:94:4d:
9d:e2:fd:39:ab:f2:11:d5:cc:90:ca:f6:77:d6:62:
89:79:7a:7f:71:06:be:7b:80:9b:f9:36:26:d4:e9:
90:52:52:bb:a3:5e:9c:a6:9d:97:47:09:c6:05:45:
62:bb:bd:27:43:cf:85:72:48:4c:f4:f5:f5:af:85:
c9:bc:20:39:87:2a:f9:03:cb:a3:0f:32:1e:60:4b:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1D:E2:8B:48:C6:B0:74:DA:6A:B5:68:F5:C2:27:F3:F1:FF:1B:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33F90C7CB21011EFA7B73168762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.224.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:03:f7:df:3e:39:04:59:00:62:e3:40:b6:8e:ab:49:e2:c8:
23:3f:82:0b:82:1a:bc:fe:f1:f6:6d:e4:4e:57:57:c7:8c:17:
39:64:7e:f4:c2:a4:08:44:d1:98:44:83:1d:39:90:02:54:0a:
0d:49:ea:cd:4b:f1:66:78:ae:5e:54:21:9c:0f:12:cd:de:99:
cb:5e:03:f7:7b:c9:cd:d8:f8:ec:cd:8e:51:8f:2c:dc:3a:60:
84:19:be:8b:4b:76:8c:4d:0e:23:bd:1b:79:c2:dd:57:06:88:
fe:3d:96:d1:c1:a5:17:cd:e9:57:7e:dc:5e:94:c7:89:82:d0:
c0:b4:54:5b:75:0f:f1:d9:32:71:e8:1d:d1:d0:c9:72:81:e2:
f3:03:43:82:38:db:5c:f1:06:ab:67:c7:d2:a5:83:b6:b8:14:
f0:d9:84:cc:ca:8e:97:97:5c:09:2e:eb:8b:56:71:c1:c0:63:
97:d5:5a:b6:1f:7d:bc:4b:24:81:41:42:5a:76:71:77:d3:80:
c9:3b:04:27:23:a4:67:60:09:d9:25:f4:27:28:11:5b:d3:7d:
6d:63:8c:5b:26:46:e7:37:ac:68:6e:d2:b1:a6:93:16:0f:a3:
f9:dd:d3:70:8f:51:41:6d:6e:23:0d:3b:2a:98:7c:c0:fc:53:
8d:e3:32:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:45:03 2025 by rpki-client