Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADFBCCBCF44611EFBB29F774762E951A.roa
File: ADFBCCBCF44611EFBB29F774762E951A.roa (raw, json)
Hash identifier: SK2Ugk6kTMyMtEHWF4sRzMDNX4q20dJDhSpdBvYo4OI=
Subject key identifier: AF:80:5E:47:7B:2F:B6:2C:86:3D:02:F3:28:9E:EC:7B:9A:51:AC:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADFBCCBCF44611EFBB29F774762E951A.roa
Signing time: Wed 26 Feb 2025 13:36:28 +0000
ROA not before: Wed 26 Feb 2025 13:36:24 +0000
ROA not after: Thu 19 Feb 2026 13:36:24 +0000
asID: 984
IP address blocks: 154.210.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91097 (0x163d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:36:24 2025 GMT
Not After : Feb 19 13:36:24 2026 GMT
Subject: CN=67bf18db-7737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:8f:28:91:b4:73:f8:99:64:a6:55:5a:b5:
18:da:ff:46:d5:ea:06:98:b7:67:f0:b0:bb:2e:0c:
5c:46:75:21:ba:ef:09:43:78:d1:33:47:d8:13:1b:
54:45:20:6f:94:9c:09:d4:8e:b3:94:13:3f:f8:dc:
9f:de:ac:de:24:29:5d:9f:ea:46:b0:55:b2:fc:6e:
a1:39:bf:c8:94:97:f9:7f:0f:cf:aa:44:d9:7a:80:
61:48:a6:b4:0d:16:eb:d8:c0:32:91:62:9e:72:29:
92:a4:ff:21:a3:31:1c:81:ad:11:c6:75:eb:7e:55:
c8:76:7e:a9:14:44:f8:fe:53:41:5f:57:4b:06:3b:
79:8e:11:80:10:e9:ea:eb:68:99:e9:82:d1:6a:2f:
03:a1:c7:c0:28:04:9c:f4:50:3a:cd:1c:f7:e8:1e:
de:44:08:88:67:54:ad:24:b0:77:85:de:1d:58:c9:
2b:73:3e:e3:be:f3:d5:86:dd:42:42:9c:02:22:25:
d1:ba:2f:6f:f8:28:6a:e2:de:3c:02:20:d1:23:13:
61:da:e6:67:cb:85:da:51:14:e0:8d:74:04:c9:af:
9e:43:76:d1:57:00:a7:ae:f0:ec:fa:f6:ff:5b:ae:
5e:9a:1b:7d:bb:ed:ac:f9:e0:b1:a0:78:d1:ca:fe:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:80:5E:47:7B:2F:B6:2C:86:3D:02:F3:28:9E:EC:7B:9A:51:AC:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADFBCCBCF44611EFBB29F774762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.33.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:7e:93:a7:77:59:a4:b2:f2:f0:a3:ac:10:c7:ba:2f:00:c0:
21:e4:a2:08:c2:aa:88:60:c4:0e:70:61:10:47:dd:2f:fb:3f:
9c:87:db:eb:1c:dd:50:ab:01:6b:3c:ae:11:13:7a:b3:da:6c:
e1:b9:76:dc:ea:84:c0:37:7d:c3:2b:dd:3a:af:b2:2b:b9:80:
c2:e1:31:f7:16:7f:1a:e9:5a:bb:c5:55:af:4f:3e:a4:38:97:
97:ed:04:78:ea:77:00:4d:b3:2d:a3:9d:3e:d7:57:4a:56:30:
05:fd:47:75:61:d1:77:ad:ff:06:c7:e9:89:30:a4:29:e4:df:
a0:e0:c4:51:21:40:9c:9c:59:43:c9:07:e3:2d:0a:9f:57:22:
a6:a9:a9:db:35:40:49:00:ee:42:3f:72:24:02:f5:89:9e:59:
97:2f:54:95:71:a9:8e:84:3e:d5:4b:b3:e3:6d:e8:13:4a:73:
d5:66:6c:87:7a:82:6e:3e:0a:e1:f3:5c:e0:d7:fc:cc:ce:35:
72:5b:10:72:12:4f:25:df:3f:75:1f:17:37:49:5e:2e:79:47:
33:4b:20:46:5d:1f:7d:11:08:6d:13:23:17:67:18:6a:f9:02:
a7:93:39:d6:49:bf:a2:27:71:ac:e3:56:ea:09:68:4b:e0:c4:
9e:0d:7b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:51:32 2025 by rpki-client