Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3ECC6D32C51C11EFA0D64683762E951A.roa
File: 3ECC6D32C51C11EFA0D64683762E951A.roa (raw, json)
Hash identifier: OehwDDIhbUwxWzddX8iB9w0UY4Ptep1iDjR1fe1HHuI=
Subject key identifier: BD:08:7E:4E:A0:0C:24:69:07:EA:6B:10:3F:AF:E1:EC:8B:4A:86:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B2B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3ECC6D32C51C11EFA0D64683762E951A.roa
Signing time: Sat 28 Dec 2024 13:04:18 +0000
ROA not before: Sat 28 Dec 2024 13:04:14 +0000
ROA not after: Sun 12 Dec 2027 13:04:14 +0000
asID: 17561
IP address blocks: 154.203.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76587 (0x12b2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:04:14 2024 GMT
Not After : Dec 12 13:04:14 2027 GMT
Subject: CN=676ff751-1a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c3:9e:e3:19:dd:0c:5c:c6:39:cb:6c:43:63:
ff:c2:16:d8:94:83:d8:e3:83:72:82:4e:9b:df:44:
02:76:8d:5c:95:5d:12:88:bd:d0:58:6a:ae:44:40:
be:05:7f:db:61:5f:1a:58:2d:e1:e3:77:2a:26:84:
bc:f4:6d:7b:ff:c1:c1:48:e7:77:81:4c:c8:cf:89:
b4:03:d2:fb:9f:56:af:55:bf:48:fa:6e:b4:cf:cd:
9d:75:96:0c:1a:cc:b0:ab:0e:6b:64:6c:74:7a:82:
a6:1e:f4:a8:05:2e:f8:91:80:68:2a:f5:85:31:d1:
d3:b3:6e:6f:44:11:67:67:de:c2:9e:2a:b8:b5:39:
8a:83:a7:3b:92:d5:9e:a1:2f:d0:8e:42:81:a7:6d:
b9:67:60:19:27:b0:66:15:e0:8d:79:71:bf:ad:4a:
5c:12:f5:13:0d:7b:c4:11:9a:30:ac:e6:c7:69:f4:
2a:70:85:37:b4:2b:ef:4b:87:f1:7b:ee:cf:0b:f7:
74:62:57:df:51:5a:eb:e1:cd:79:71:d2:92:75:ad:
a8:cb:7e:37:2f:66:49:bc:f0:3a:f5:ef:c6:0a:ad:
fc:91:32:ec:b5:49:55:04:fa:31:cb:85:a9:38:82:
1c:5d:2e:88:86:91:ca:73:d1:23:e4:c3:1a:5e:f7:
ed:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:08:7E:4E:A0:0C:24:69:07:EA:6B:10:3F:AF:E1:EC:8B:4A:86:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3ECC6D32C51C11EFA0D64683762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.33.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e3:ca:f7:19:cd:b5:37:8a:b3:da:0a:db:42:db:cc:94:35:
17:b7:91:b9:64:87:f7:03:0c:f7:63:ff:ec:85:ba:41:7a:c3:
90:a9:75:74:f2:1c:99:a7:99:76:07:af:dd:d7:97:12:bb:5b:
86:7f:35:fa:37:89:20:3a:f8:24:2b:63:4c:17:1c:7e:6d:91:
7f:37:b1:05:f9:5c:8b:9c:69:da:0e:fc:b0:b5:5a:e1:73:7e:
ff:f0:42:35:32:d2:52:2e:a8:99:1c:83:71:3d:b5:75:44:51:
47:b0:95:ab:3c:a2:11:81:4f:0a:1f:ef:92:9d:d4:9d:a9:d4:
9e:1f:8c:a6:3b:05:77:72:e4:bc:96:81:83:8e:3d:d2:cb:c4:
20:94:07:f3:e2:33:cb:12:0e:43:16:93:26:77:fc:d4:6f:b5:
b2:97:ac:1b:cb:07:c4:0f:da:bc:99:02:5c:ec:d2:ed:40:e8:
79:f9:ea:af:28:17:d3:8b:8e:55:3b:95:7d:f6:03:f2:ac:27:
9c:bf:26:44:5f:d2:e9:00:d7:ad:15:3f:0d:38:aa:66:21:3d:
10:5f:5d:3d:f2:5d:ad:71:4f:73:32:d9:30:b6:86:f9:e5:5f:
52:69:3e:1a:d2:18:c7:82:80:b3:bd:ef:f4:f1:24:42:a9:34:
07:ea:28:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:21 2025 by rpki-client