Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C33BFB16E31511EF9B833778762E951A.roa
File: C33BFB16E31511EF9B833778762E951A.roa (raw, json)
Hash identifier: ya9u/SJwWS/sfuaiXqdZ5V9hefIJ5Hs0Xnp7Dcg8grI=
Subject key identifier: 24:34:32:3E:0E:81:4E:72:B2:9D:C8:5E:B9:59:94:8B:F9:00:C2:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015125
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C33BFB16E31511EF9B833778762E951A.roa
Signing time: Tue 04 Feb 2025 16:33:28 +0000
ROA not before: Tue 04 Feb 2025 16:33:24 +0000
ROA not after: Wed 30 Apr 2025 16:33:24 +0000
asID: 18229
IP address blocks: 154.210.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86309 (0x15125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 16:33:24 2025 GMT
Not After : Apr 30 16:33:24 2025 GMT
Subject: CN=67a24158-9ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:7c:fa:96:9c:22:15:03:e4:01:aa:52:40:
21:69:e0:32:64:62:f8:9f:c4:00:74:97:9c:bb:5c:
cf:b6:17:99:67:cc:4c:32:6f:28:79:a5:8c:87:19:
88:b5:f1:8a:b9:3d:38:52:3a:c4:70:79:41:a8:13:
c0:a7:c4:e7:ae:e5:92:2c:93:9e:91:d1:4a:e7:a5:
e3:8b:10:1e:98:d3:9f:9f:b5:a0:44:1d:78:51:22:
46:85:e8:46:46:df:10:80:20:78:56:98:66:4d:0a:
b1:3f:fb:fc:ac:ba:4c:3d:83:4a:6b:d0:27:a5:54:
60:ef:a7:df:2c:ad:12:4e:fc:8a:f3:c3:5f:d9:94:
32:39:26:c7:8f:58:0e:ab:83:c4:11:b8:67:19:38:
6a:86:9d:9e:4d:72:03:36:08:0b:24:80:4a:2c:60:
b2:f1:75:53:7f:48:97:f7:45:7b:a9:cc:f3:9b:84:
89:a7:d6:4c:f9:71:b6:05:8d:c9:24:2d:da:f0:7c:
b7:29:5a:cd:9a:89:74:90:76:be:2f:65:e7:fd:41:
2c:8d:9a:0f:62:90:14:6d:4e:a3:7a:b3:d2:2c:ba:
6f:e2:d4:5c:d1:a2:cd:8d:36:3a:b2:ab:26:d9:14:
3d:bf:be:f8:af:96:94:ae:f1:a2:24:61:6b:6e:66:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:34:32:3E:0E:81:4E:72:B2:9D:C8:5E:B9:59:94:8B:F9:00:C2:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C33BFB16E31511EF9B833778762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.163.0/24
Signature Algorithm: sha256WithRSAEncryption
12:dd:04:03:f1:e7:2b:53:9e:0f:28:77:75:91:90:1f:c4:4d:
25:7c:4f:f8:b8:96:fa:4c:2c:69:81:2e:df:92:43:c0:d5:66:
54:83:22:38:d8:f3:f2:4b:82:76:03:94:fc:23:d3:44:81:dc:
09:5c:3e:0a:a4:49:40:81:93:76:5c:b4:92:c5:44:0e:c4:fb:
0b:7d:4e:78:73:da:b4:4f:c9:63:6c:2e:30:e5:73:c8:dd:e8:
0a:35:f5:f0:4f:3a:3d:01:cc:e5:12:84:c9:06:3c:34:1e:96:
c2:36:5a:59:76:79:f1:d6:dc:31:20:e1:4d:c2:46:2e:23:6a:
13:bf:12:64:84:92:a2:1c:62:85:ad:81:f4:94:35:2b:2f:6d:
46:cf:f2:f2:68:e5:9c:79:0e:31:6c:17:0f:27:b3:81:7f:cc:
a6:31:d9:18:b5:5f:5c:a0:9d:72:0c:25:09:96:4a:de:81:3d:
d7:48:eb:28:d4:e0:14:e5:a4:9a:b5:6e:15:d0:54:1a:06:ac:
a6:a4:ec:04:72:10:1f:9f:6e:95:59:00:4d:7a:44:e5:48:94:
d8:35:48:9b:25:0a:b2:30:b4:89:ef:de:3b:45:a5:88:ee:af:
4a:4b:50:64:9a:f4:31:2e:3e:00:b6:29:8a:a9:ef:86:e7:e7:
6e:90:80:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:47 2025 by rpki-client