Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0CFD204D97011EFB75AB371762E951A.roa
File: F0CFD204D97011EFB75AB371762E951A.roa (raw, json)
Hash identifier: /CbR0Z/f+5H7vNC3LMxSSPZ5kR+TEN2CqR95HKP2RMw=
Subject key identifier: 6F:4E:CE:9D:7E:FA:75:51:59:85:BC:34:32:CA:9A:54:C8:58:B7:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01410C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0CFD204D97011EFB75AB371762E951A.roa
Signing time: Thu 23 Jan 2025 10:00:57 +0000
ROA not before: Thu 23 Jan 2025 10:00:53 +0000
ROA not after: Fri 28 Feb 2025 10:00:53 +0000
asID: 62240
IP address blocks: 154.194.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82188 (0x1410c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:00:53 2025 GMT
Not After : Feb 28 10:00:53 2025 GMT
Subject: CN=67921359-1c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:fb:25:6c:cc:36:0b:c7:64:fd:de:a6:94:
4f:71:cb:eb:c3:96:f1:7d:7e:a7:b2:9b:76:05:d7:
c9:8b:eb:ae:54:73:27:51:80:fa:29:fa:05:21:32:
1c:0d:73:83:fa:3a:cf:de:14:48:b0:0b:08:a1:26:
e7:df:fa:a5:c3:00:47:18:be:ab:55:72:82:96:cd:
8f:20:d7:f9:bf:59:be:6d:05:de:68:f2:4f:79:13:
15:e7:80:20:5d:d3:e4:cb:c8:01:33:b5:29:3a:8d:
ed:70:b9:da:67:f3:da:24:a5:5e:28:59:a3:b8:84:
1a:cf:33:07:00:40:dc:8c:fe:0d:13:67:6a:f5:01:
41:59:7e:b0:8f:94:34:54:24:cc:4a:36:03:5d:9a:
b6:38:e9:d7:12:c0:39:04:47:bc:a8:f9:9a:e0:e3:
0d:22:57:5f:eb:2a:0a:ba:63:fc:00:bb:8e:95:80:
20:fa:cc:55:a7:c4:07:97:59:80:b0:e7:18:b5:e6:
c2:31:12:07:7e:90:35:84:11:bd:26:14:58:fa:09:
cd:43:fb:35:b4:c1:8e:aa:5c:cf:da:58:0d:85:63:
c1:23:73:60:84:90:ad:d2:4e:ff:f1:63:aa:ea:59:
2b:a1:02:f2:ba:bf:fb:78:44:93:b2:ae:1b:47:3b:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4E:CE:9D:7E:FA:75:51:59:85:BC:34:32:CA:9A:54:C8:58:B7:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0CFD204D97011EFB75AB371762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.33.0/24
Signature Algorithm: sha256WithRSAEncryption
75:26:b5:a2:bd:90:1c:c9:cb:79:56:c8:8b:f5:6e:e8:60:8d:
83:dd:d0:22:ec:e7:dc:2e:15:75:86:e0:81:5f:9e:ea:18:c5:
d1:88:21:7f:c4:0a:a6:11:b4:14:6a:70:19:9a:4b:62:f0:82:
7f:0d:2d:6c:c8:be:ec:a9:c0:cd:50:c9:16:bc:ff:73:36:eb:
06:8c:33:dc:06:35:db:fc:05:e9:80:cc:28:2c:34:cc:b1:ae:
9d:ed:63:26:ad:75:c2:ce:9d:82:c4:6f:00:17:bc:f1:ed:9c:
6c:90:25:de:eb:34:88:e8:4e:99:f9:c1:dd:a7:dd:ca:4e:a7:
a3:d9:ab:9f:be:c8:bc:37:95:72:49:d3:fc:3b:ad:d2:4e:cc:
0f:21:77:69:48:7e:23:6a:61:c7:8a:bb:4a:4c:c4:c8:83:dd:
ea:20:7f:ae:0d:dd:da:6a:00:16:63:cd:00:52:06:7e:06:06:
74:7d:df:c5:ed:e7:b0:84:bb:05:fb:24:14:bc:1a:6e:0c:70:
ea:30:dc:d4:bd:67:60:23:68:be:8c:78:bb:9d:dd:c8:07:88:
84:d9:22:72:98:12:0d:a5:da:99:f1:ed:af:6e:b6:60:de:69:
11:dc:d2:14:3d:c3:7e:25:61:2a:ff:8f:d1:c2:53:eb:da:fb:
34:56:ce:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:24:11 2025 by rpki-client