Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33FF0976C5F511EFB9538F61762E951A.roa
File: 33FF0976C5F511EFB9538F61762E951A.roa (raw, json)
Hash identifier: o4XPe9NDiGltuZ3DtJTNRzWSwEnAsUXOJ6/1ewq9DQ4=
Subject key identifier: 56:AC:71:CB:FA:62:69:C6:A8:85:32:15:A9:37:BD:FB:18:FA:61:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33FF0976C5F511EFB9538F61762E951A.roa
Signing time: Sun 29 Dec 2024 14:57:20 +0000
ROA not before: Sun 29 Dec 2024 14:57:16 +0000
ROA not after: Fri 12 Dec 2025 14:57:16 +0000
asID: 984
IP address blocks: 154.213.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77306 (0x12dfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:57:16 2024 GMT
Not After : Dec 12 14:57:16 2025 GMT
Subject: CN=67716350-588c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:cd:53:31:e3:e1:b4:5f:ac:bb:27:09:75:
58:76:b7:ad:77:5c:ce:6b:b1:27:ea:1d:11:39:b4:
ce:1f:6c:38:59:b9:47:9a:b7:37:c8:99:41:61:89:
80:42:f1:5f:8c:79:b2:ca:f5:ca:7b:c0:c7:a8:f0:
ac:e7:7c:34:1d:bd:75:5a:0d:ae:94:73:dc:29:a9:
45:d5:74:91:06:90:25:b2:c9:49:bd:9b:27:63:6d:
d3:40:a8:c5:53:04:8e:3b:d8:43:18:82:f4:52:a0:
db:c3:10:b1:a2:93:32:21:41:1e:5a:67:0d:bf:19:
92:c2:c7:5b:55:62:be:bd:86:5d:65:98:c7:7c:44:
94:2a:1e:f4:6c:b5:4d:8a:64:c8:8d:e5:0f:a4:61:
a1:be:b3:a0:e4:d4:a0:2e:6d:f2:35:d5:a3:32:14:
ee:f2:69:ed:ba:5c:85:1a:87:7c:29:c7:e2:64:87:
c4:dc:3f:47:3d:c7:1e:81:c1:a1:7c:b3:cb:4a:56:
c7:76:fc:4d:3e:3e:63:48:92:58:93:fb:e4:83:af:
c1:06:91:3c:bc:09:28:9d:ee:5d:f2:b7:29:a4:23:
bd:92:07:b9:06:7d:98:91:49:2b:d1:16:16:49:cd:
8b:cb:aa:0a:7b:cb:2a:59:3e:5e:5a:a1:82:5c:e6:
0f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AC:71:CB:FA:62:69:C6:A8:85:32:15:A9:37:BD:FB:18:FA:61:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33FF0976C5F511EFB9538F61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.182.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:d5:df:da:34:32:82:f0:18:7e:45:41:3a:19:5b:3f:fe:42:
df:94:ae:23:66:c4:cc:5d:82:bc:6f:bf:e4:7e:f6:31:cd:eb:
5b:d5:a6:f3:02:ed:f2:f5:00:3d:1c:76:8a:ae:77:b6:24:3d:
70:40:9a:52:93:84:e2:2e:47:e9:0e:76:30:f4:41:ff:59:58:
aa:b9:92:b0:a6:46:ca:de:77:56:28:f9:cb:3e:ed:56:2e:7a:
d7:5d:bf:34:86:c1:e1:f7:19:8d:62:7e:14:27:0a:e4:ec:c8:
a9:32:42:b9:25:84:e3:a6:a4:92:a2:d8:50:32:dc:8c:7d:42:
6f:e7:4c:58:04:09:02:d9:58:9e:88:33:f1:81:cb:ce:bc:f9:
d2:e3:a8:58:26:7d:37:51:d4:fa:59:81:a4:91:4a:8f:0d:d7:
b4:91:ef:74:8b:cb:76:a5:1e:f7:41:28:bf:f7:c9:47:1f:ee:
69:28:54:72:3e:9f:c0:c8:6d:64:43:e4:5d:83:af:1b:12:fb:
42:f6:a5:ff:04:9b:1b:3d:68:a3:70:74:5c:d7:50:a1:2c:6f:
97:81:43:f7:d2:7f:8a:42:75:0d:27:84:28:c4:ad:a5:62:aa:
14:4f:72:e2:d5:c2:3f:33:74:83:39:29:15:36:5b:07:cc:e6:
7d:1b:e4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:13:30 2025 by rpki-client