Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D50D1A06F2E111EF97F9D166762E951A.roa
File: D50D1A06F2E111EF97F9D166762E951A.roa (raw, json)
Hash identifier: 8532dyHYb+4+3iuHgXpV+iUtBdHViCvoEuKcK7jk+TI=
Subject key identifier: 0E:48:C0:41:F8:E6:10:2C:83:0B:93:1B:3B:16:F1:A4:5E:30:44:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CCC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D50D1A06F2E111EF97F9D166762E951A.roa
Signing time: Mon 24 Feb 2025 19:02:03 +0000
ROA not before: Mon 24 Feb 2025 19:01:59 +0000
ROA not after: Mon 07 Apr 2025 19:01:59 +0000
asID: 138915
IP address blocks: 154.223.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89292 (0x15ccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 19:01:59 2025 GMT
Not After : Apr 7 19:01:59 2025 GMT
Subject: CN=67bcc22b-58f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:22:36:8b:05:53:18:93:ed:ad:0b:bf:a7:
da:3f:f7:50:66:1a:f8:27:eb:ca:2a:9f:cc:d7:8e:
1e:99:c4:80:89:fd:08:34:ab:1a:94:30:d5:ec:3e:
b6:59:dd:00:25:be:28:f8:ad:20:f9:9a:b9:84:b7:
f7:d5:31:58:38:93:45:19:ef:1b:d0:b2:0a:ce:a5:
ab:19:a1:df:fe:7c:c7:2b:b2:ef:22:67:7e:59:d3:
31:51:5a:d9:f7:2e:85:3f:ef:56:49:60:c1:e5:3e:
a8:b4:f8:c3:00:c0:23:6c:22:6c:62:27:1b:aa:71:
78:2e:d7:d8:66:65:1e:26:b0:e6:3e:0b:b6:c5:e7:
8e:a1:d1:b2:d4:f8:f9:09:65:76:26:74:0a:1f:ec:
37:55:dd:b9:f6:e5:ac:b1:42:32:af:b1:6e:90:c5:
bd:9d:d1:d6:cb:fa:51:8c:17:cc:23:6e:c5:47:57:
4a:f9:3c:ba:f0:4c:9a:c7:17:22:d4:c5:84:59:e6:
d2:d5:28:d5:03:c8:db:1b:58:52:71:5d:50:1f:3b:
2b:df:01:cc:02:f4:04:b9:1a:42:d0:84:13:d9:62:
d4:6f:fd:80:fa:ab:7d:f0:df:d1:7b:40:ac:ca:f6:
82:e8:30:38:48:6c:aa:c7:9e:71:09:c7:4b:f2:91:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:48:C0:41:F8:E6:10:2C:83:0B:93:1B:3B:16:F1:A4:5E:30:44:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D50D1A06F2E111EF97F9D166762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.33.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c4:82:aa:a6:de:3d:cd:23:e0:37:d9:54:13:92:c4:a4:d6:
5e:da:e3:aa:4e:6e:02:9b:95:2f:f3:ea:33:57:53:87:1f:01:
38:d2:7c:d7:82:aa:5e:95:de:c7:48:57:0e:76:b8:ad:59:12:
cb:d6:ad:88:64:40:d7:7f:99:3a:2c:4e:80:1c:6e:c7:69:0c:
97:3b:01:23:eb:92:33:22:73:58:53:c8:f2:d2:fc:51:10:a8:
65:70:d4:7c:9d:2e:43:54:f8:e0:60:29:36:2d:e2:ba:67:02:
40:30:d0:00:c4:bf:75:8a:61:81:39:ed:ab:d8:04:e1:dd:b5:
66:66:ad:fe:90:f0:df:d4:51:00:bf:1b:36:0e:33:3a:15:c5:
f8:20:df:27:bd:57:97:e7:0a:d5:8e:a2:4b:c8:5d:96:11:c2:
f7:90:60:20:ca:7b:86:7c:e0:ee:8e:c5:88:c8:1d:2a:52:19:
0c:3d:40:36:51:e2:4c:c9:35:69:e4:ef:89:0c:8f:ed:b0:e5:
89:52:50:a0:a0:c0:00:93:68:df:1f:99:2b:7c:7e:fe:9a:77:
20:3b:84:1d:24:6d:5e:53:f0:5e:0a:9e:98:d2:40:43:06:63:
75:12:c2:84:00:d3:de:44:1e:29:b4:85:e7:c9:fc:07:cc:0e:
c2:c5:fd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:38 2025 by rpki-client