Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABF2F8B2DD7311EFABB32189762E951A.roa
File: ABF2F8B2DD7311EFABB32189762E951A.roa (raw, json)
Hash identifier: C0YiEA3lHF5vfq3jq1JTdtl+eAowAqUnuZkDBzTPjq8=
Subject key identifier: FD:1D:A0:F3:C7:AF:A5:24:1D:92:A1:68:34:A0:9B:61:51:F3:C2:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABF2F8B2DD7311EFABB32189762E951A.roa
Signing time: Tue 28 Jan 2025 12:30:35 +0000
ROA not before: Tue 28 Jan 2025 12:30:30 +0000
ROA not after: Tue 25 Feb 2025 12:30:30 +0000
asID: 5065
IP address blocks: 154.206.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85256 (0x14d08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 12:30:30 2025 GMT
Not After : Feb 25 12:30:30 2025 GMT
Subject: CN=6798cdeb-b5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:18:eb:cd:d6:0a:ab:99:a6:56:37:ac:e6:
d8:8b:77:a5:ca:8f:d6:bb:26:2f:b3:af:51:48:ec:
f0:b2:69:d6:b5:20:16:a1:23:f5:24:4c:11:f5:a1:
8f:1b:4a:24:8e:db:8e:09:24:dd:bb:ea:cc:5a:3f:
9e:c5:27:b9:5d:ce:25:3e:34:b3:e1:ca:b3:f6:8a:
ac:37:32:95:71:6e:5b:b2:1a:9d:a3:62:8d:d9:bc:
f1:0a:69:6d:76:dc:ee:13:e4:77:7e:0e:17:df:6e:
08:da:78:40:ff:7c:d1:2c:bd:bd:41:4f:8d:ed:dc:
81:2c:b9:37:03:94:f8:56:4c:4d:a5:ed:56:67:9c:
53:e2:26:d1:68:42:14:1e:03:bf:d8:83:72:12:ce:
91:19:39:0f:b0:ab:a7:a8:7d:81:af:8a:13:9a:5c:
f7:d1:70:3c:d6:ec:eb:c2:0f:96:cc:b9:85:5b:a8:
6f:bf:df:12:11:45:f9:07:29:5b:d3:1b:6f:70:e0:
76:d3:f3:5a:c4:8b:8c:80:83:b3:91:0e:a8:02:02:
5e:d6:39:0d:dc:21:aa:4d:14:45:f6:9c:1f:62:93:
eb:b4:33:40:6e:5a:f9:74:05:14:14:e8:15:40:9a:
b5:0a:31:f8:41:58:f5:e5:d2:9a:12:27:08:1f:6d:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1D:A0:F3:C7:AF:A5:24:1D:92:A1:68:34:A0:9B:61:51:F3:C2:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABF2F8B2DD7311EFABB32189762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.52.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:dd:2e:b9:24:0a:c3:25:25:94:9f:08:20:59:c6:55:a6:b3:
75:7d:04:02:03:e4:7e:e7:76:ba:3a:6e:6f:54:af:c6:a3:d4:
1c:9d:71:75:49:c1:a8:d6:68:4c:32:c0:46:97:e7:77:01:85:
99:1d:be:df:47:4a:30:6c:6d:ac:c2:a9:17:09:c1:48:7d:e1:
9c:60:30:56:ad:b5:06:0d:eb:22:fa:41:f5:7a:dc:fb:87:11:
ac:e2:02:60:9c:25:95:96:a3:ce:31:27:1e:86:18:18:0b:2f:
c0:29:51:97:ae:08:3b:2e:ad:42:e0:b3:5d:b7:04:dc:d8:8c:
c5:c0:94:6e:f1:83:3e:c1:3e:f5:a1:41:2f:73:2e:0c:69:62:
50:be:aa:87:04:f1:95:66:60:d2:9a:19:bf:02:49:50:06:da:
a8:ff:66:ab:60:86:34:c4:56:b6:70:8c:93:c0:ed:3a:f7:9a:
aa:46:cc:65:e5:0d:76:1c:92:cd:62:60:b3:8c:bd:98:93:e0:
d8:e4:a3:24:6a:3d:3d:df:ed:f4:e9:27:4e:12:1c:d3:ea:c4:
f3:48:0f:9a:6d:e6:ff:bd:7f:96:3d:dc:ac:99:9e:3b:9a:d2:
42:9e:33:79:8c:f7:65:af:52:7c:83:cc:88:ad:25:bb:44:79:
91:4c:f5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:49 2025 by rpki-client