Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F53F4E50F46E11EF9C8D448D762E951A.roa
File: F53F4E50F46E11EF9C8D448D762E951A.roa (raw, json)
Hash identifier: 5K+JHUWwEY76O6lbsfDhxEYw1tTmkll2pfrFtJeMaL0=
Subject key identifier: 77:DC:12:2C:D1:7F:6D:4D:A4:F9:D8:A1:3C:B7:BA:ED:5B:E2:8F:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01655A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F53F4E50F46E11EF9C8D448D762E951A.roa
Signing time: Wed 26 Feb 2025 18:24:47 +0000
ROA not before: Wed 26 Feb 2025 18:24:43 +0000
ROA not after: Sat 19 Feb 2028 18:24:43 +0000
asID: 17561
IP address blocks: 154.201.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91482 (0x1655a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 18:24:43 2025 GMT
Not After : Feb 19 18:24:43 2028 GMT
Subject: CN=67bf5c6f-77b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1b:03:4b:8b:36:fd:05:4f:ed:fc:1b:42:29:
36:0b:d6:b2:e5:e8:2b:b7:95:f6:df:50:53:51:73:
fc:8c:19:d2:0b:11:ca:4b:ff:30:d6:19:68:20:24:
03:59:22:a3:7f:37:f1:d0:03:c3:a6:14:cb:3a:00:
5e:b5:b4:29:07:05:9c:80:ce:07:f4:96:13:22:40:
42:a3:4d:c2:66:d8:7e:cd:75:08:33:21:98:09:99:
4a:00:1e:37:e7:b4:c5:bd:d8:99:1d:9a:ed:38:2f:
e5:ca:eb:3d:e1:cf:47:83:b6:7c:43:ea:ad:05:dc:
43:9f:99:55:bd:67:ec:5f:a9:db:a9:2b:4e:e7:fc:
b8:a5:ec:25:87:8a:91:73:e8:43:2a:17:12:76:15:
12:36:1a:22:18:cf:59:26:8c:de:e5:eb:04:f4:c4:
c7:5d:42:e6:a4:bd:81:c7:9b:95:86:ec:74:74:32:
89:af:a1:8b:ba:dc:f4:c6:62:ff:e2:f2:ee:f0:49:
48:1c:f4:7e:d8:14:35:91:0d:ca:3d:33:6c:c6:2f:
76:b0:d4:dc:12:97:54:1d:8d:d8:6a:17:2f:32:e6:
f3:2f:67:62:71:46:76:8f:71:a5:65:cf:bf:2f:df:
76:ed:5a:7f:3d:0f:42:9a:a6:b8:cc:ed:88:2e:b4:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DC:12:2C:D1:7F:6D:4D:A4:F9:D8:A1:3C:B7:BA:ED:5B:E2:8F:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F53F4E50F46E11EF9C8D448D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.33.0/24
Signature Algorithm: sha256WithRSAEncryption
66:54:93:b5:dd:bd:e2:cb:f4:75:fd:16:0f:d9:d4:3e:10:b0:
bf:98:16:f0:67:fc:0e:7c:ff:9b:1b:4c:d8:d7:38:ae:18:0a:
c8:82:eb:82:d5:35:8d:17:87:56:23:0d:95:9b:10:82:7d:ee:
8a:22:c1:4f:b6:99:eb:90:c3:69:2e:86:54:30:d6:5f:ac:5e:
78:bf:e9:e4:e2:16:73:fd:c1:7b:c4:8c:11:56:b3:ed:d1:2d:
92:56:98:27:7f:42:d2:a5:73:10:64:f0:a1:e2:61:98:f5:5a:
e0:bb:d1:35:a3:b8:05:6b:5e:ae:d3:b1:c8:7b:61:dd:dc:20:
70:7a:ec:41:29:3a:e0:25:80:b7:c2:e5:af:5d:be:3c:ff:6c:
a8:6c:46:f9:89:b7:e1:df:6d:dd:40:3d:f4:80:48:5f:2a:54:
0b:86:20:b6:d5:f2:d4:22:08:fb:76:2e:85:72:13:91:03:d0:
ae:a8:ab:27:fe:49:23:82:3a:81:84:16:a4:11:50:20:03:4d:
c1:9f:a7:3a:70:35:6f:31:02:f3:92:f9:8f:2e:55:01:24:93:
4d:4f:7d:c0:5b:42:dd:c9:98:48:6f:7e:ce:dc:3e:9c:ca:1a:
a3:7e:31:1d:5a:fd:e0:5e:27:c9:34:9f:01:0c:8e:90:7c:2d:
7a:24:f6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:58 2025 by rpki-client