Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB6A1F70DC9B11EF83C36254762E951A.roa
File: AB6A1F70DC9B11EF83C36254762E951A.roa (raw, json)
Hash identifier: 1oYeVzelrvsb8XH2Vs4naPnlSxpBWkakqBoEs4znqkg=
Subject key identifier: D2:52:DF:C3:D2:BA:1E:5E:D6:A0:41:4A:76:EC:D9:D9:EF:70:52:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB6A1F70DC9B11EF83C36254762E951A.roa
Signing time: Mon 27 Jan 2025 10:44:23 +0000
ROA not before: Mon 27 Jan 2025 10:44:19 +0000
ROA not after: Sat 08 Feb 2025 10:44:19 +0000
asID: 22773
IP address blocks: 154.84.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84915 (0x14bb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 10:44:19 2025 GMT
Not After : Feb 8 10:44:19 2025 GMT
Subject: CN=67976386-e39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:e5:b9:0a:fb:fd:5d:36:49:67:86:f3:1c:
3c:6e:0a:f8:01:3a:f0:f5:69:e1:80:13:eb:89:9e:
5e:02:66:ae:ec:b0:67:fc:2a:af:d6:23:c3:9d:f7:
57:61:e0:17:03:6c:a5:c9:64:ba:bd:78:c8:8d:3c:
04:4c:89:aa:f3:e8:7c:80:d1:ec:f5:27:50:55:71:
db:f1:a7:9e:71:3b:46:bc:49:cb:f8:9a:07:aa:7b:
b3:d3:29:12:f7:b1:7d:0b:13:3e:06:83:90:6a:db:
89:81:f0:ab:36:ee:ee:0b:10:f1:93:a9:c3:fb:83:
9b:8c:e1:e4:ea:40:40:7f:e3:80:a0:57:e5:01:60:
f3:f4:c5:ab:48:b3:c8:6e:aa:3d:be:02:58:bf:74:
79:f6:f9:9f:4d:55:2d:f8:d7:0f:cf:e4:06:89:da:
23:e9:ff:23:8e:8a:bf:6b:33:e4:df:6f:9d:8b:1a:
f5:a9:e1:f7:9b:15:d6:7d:cc:06:a1:8b:4a:aa:f4:
15:fd:2e:9e:9e:15:33:00:84:d4:b3:8a:2f:a7:cd:
8d:a7:e0:fb:be:9b:e5:69:e5:e5:d5:0e:89:0a:d9:
1a:25:19:69:db:3d:e6:6f:60:1d:84:f7:96:1c:10:
92:f2:30:28:70:8f:62:06:46:0a:77:a7:34:56:3e:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:52:DF:C3:D2:BA:1E:5E:D6:A0:41:4A:76:EC:D9:D9:EF:70:52:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB6A1F70DC9B11EF83C36254762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.176.0/22
Signature Algorithm: sha256WithRSAEncryption
32:fa:a1:d5:38:61:e1:c3:c9:34:de:76:7a:80:9a:91:de:29:
5e:03:39:44:bd:c7:2e:b8:43:96:0b:90:4a:ba:30:b9:38:17:
4b:44:18:72:c6:a4:4a:66:3f:99:d4:37:00:c7:02:d4:d6:31:
7b:16:5f:5a:a5:f1:da:48:6f:a4:52:85:44:d9:50:28:5e:ff:
54:2a:16:8c:a6:ac:36:db:29:4a:8c:b0:9a:01:4e:fb:4d:a6:
21:e7:1e:9b:89:2d:c9:d0:d1:81:a7:e4:96:2b:d9:77:e6:33:
c7:d3:05:f7:50:e2:4e:37:92:24:3b:e9:df:e9:96:69:d8:4a:
df:da:a9:93:7e:bf:4d:57:62:a8:f0:bf:60:31:9c:f4:3f:2d:
99:9f:f5:4e:29:c9:28:3a:e5:a9:64:5e:cf:c4:33:55:e4:1d:
17:47:d5:29:18:b0:80:9e:f7:ea:a2:dd:89:14:f6:6c:ad:b0:
d8:e6:f0:1c:a4:63:56:35:29:53:2b:9d:6c:3e:73:c5:16:39:
a8:aa:9b:04:a8:9d:81:10:f1:30:93:f7:74:13:63:71:aa:84:
22:42:63:5d:ea:61:6f:c5:8f:df:7f:ec:40:10:2e:2c:b2:3f:
16:c9:09:ae:6e:95:3e:97:f0:39:4c:ad:7e:8c:3a:94:ed:2b:
17:8e:1c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:21:07 2025 by rpki-client