Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/933B39F2D15611EFB79D8BB2762E951A.roa
File: 933B39F2D15611EFB79D8BB2762E951A.roa (raw, json)
Hash identifier: d6UBDSIQWLTVRcFImlOqbdpKlZAMAFGSp/NIb8XIzhs=
Subject key identifier: 80:6C:D2:56:93:3C:6E:4E:4A:F0:A6:1C:18:CE:58:A1:CD:96:DE:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013ACC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/933B39F2D15611EFB79D8BB2762E951A.roa
Signing time: Mon 13 Jan 2025 02:32:04 +0000
ROA not before: Mon 13 Jan 2025 02:32:00 +0000
ROA not after: Thu 13 Mar 2025 02:32:00 +0000
asID: 17561
IP address blocks: 154.216.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80588 (0x13acc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 13 02:32:00 2025 GMT
Not After : Mar 13 02:32:00 2025 GMT
Subject: CN=67847b24-2354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ee:68:e8:55:6c:be:12:77:99:f3:93:77:dd:
55:30:21:5a:49:30:23:4f:9a:98:b0:d4:67:7e:72:
8e:c5:4e:e4:af:3a:33:56:aa:46:ef:13:75:3a:06:
4e:3f:ca:72:27:e4:f6:3d:3d:24:ff:87:f7:e2:fa:
37:19:0d:6b:e3:d5:10:72:19:d8:d1:86:d6:27:25:
59:b3:a4:fd:74:02:7f:31:3d:9b:c4:b5:34:b3:40:
19:5c:17:cc:63:7d:56:44:52:f8:23:62:02:5e:14:
42:51:37:98:b9:b5:e7:a8:3c:9b:0a:54:8d:62:84:
a8:13:b6:2f:84:83:2a:e0:e2:80:a8:d3:fb:f4:72:
a5:94:66:da:d2:e1:ed:96:be:8c:c7:72:71:2f:f3:
11:af:8a:ae:af:c8:4e:0f:04:85:6a:61:ae:6f:8c:
71:69:be:2a:22:83:71:5c:9d:ab:e9:2b:17:29:50:
24:5b:f6:84:88:0d:d5:93:f6:d9:cf:f2:e2:9d:28:
61:23:9b:b3:91:6d:12:c1:81:a0:f8:86:3a:aa:18:
8c:d6:91:28:88:80:64:56:42:f3:2a:6e:2d:a6:85:
5f:51:b6:ae:18:1d:48:18:36:5b:0f:04:e0:ce:db:
72:8b:52:7a:68:50:e1:fe:90:ef:1d:9c:d6:3c:1e:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6C:D2:56:93:3C:6E:4E:4A:F0:A6:1C:18:CE:58:A1:CD:96:DE:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/933B39F2D15611EFB79D8BB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.16.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c4:18:27:63:68:7d:b9:45:f4:d0:7c:51:2e:89:2c:a0:01:
10:ee:75:3e:c5:e1:ac:59:36:fe:33:0c:7e:cd:c3:41:11:5e:
5e:24:3b:25:ec:0a:10:9b:b2:a0:1f:c1:59:d0:d4:8d:c9:c9:
2d:66:f4:9d:f7:bf:85:55:96:4f:3b:18:a1:d1:c9:0e:ee:dd:
ec:52:b7:9e:4f:d0:04:37:5f:a4:fe:2b:ba:2a:87:f1:72:73:
85:05:10:c6:56:3a:79:2c:86:a7:2b:05:a5:9b:db:17:29:07:
2b:ae:db:8f:cd:dd:b2:73:ea:e8:66:ba:ca:09:00:1e:75:53:
10:43:4f:8c:ab:15:ac:0e:ba:b8:d7:e9:0b:20:26:79:b8:70:
35:c6:96:91:81:96:50:53:77:fb:41:76:dd:c3:f3:98:e1:1c:
25:9c:1f:40:63:68:31:42:5a:ef:d0:cf:ad:46:19:7c:ed:37:
b5:f7:1b:3b:e1:1c:40:c1:c4:1f:ba:59:1a:a9:b8:5f:76:e3:
9f:dd:6a:0a:cf:cc:06:08:d8:d1:8f:f1:75:99:05:4e:7a:48:
a6:2d:e7:23:09:ab:b6:f1:0d:07:72:b4:71:89:c8:3f:ea:a2:
01:d3:3f:fb:4a:a4:e9:ee:ee:df:06:9c:aa:41:8a:bb:eb:f6:
dc:9a:18:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:02 2025 by rpki-client