Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9D2ED4ABEB611EFB7CC967C762E951A.roa
File: D9D2ED4ABEB611EFB7CC967C762E951A.roa (raw, json)
Hash identifier: kzARL9H+WRsjgHm4u+8Db3qitEBbdeOjt+w7HCO0Ds0=
Subject key identifier: AF:5E:98:FB:D5:FF:8F:F7:5A:57:E7:9F:93:49:5B:56:76:F7:24:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9D2ED4ABEB611EFB7CC967C762E951A.roa
Signing time: Fri 20 Dec 2024 09:43:22 +0000
ROA not before: Fri 20 Dec 2024 09:43:18 +0000
ROA not after: Sun 02 Feb 2025 09:43:18 +0000
asID: 202656
IP address blocks: 154.221.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72900 (0x11cc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 09:43:18 2024 GMT
Not After : Feb 2 09:43:18 2025 GMT
Subject: CN=67653c3a-6f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cd:f7:27:af:bc:47:f4:f8:71:67:a4:a6:dc:
cc:19:fc:42:92:29:51:64:56:45:6b:d8:8d:79:b1:
15:9d:c0:dd:84:49:e3:78:d6:5e:33:70:2a:29:7d:
e8:e9:10:08:f1:71:43:86:b0:ea:37:fb:eb:d4:e0:
fd:a3:d9:a9:99:a9:a9:b1:c7:73:0e:2e:2c:9b:c5:
a4:ec:26:29:59:d0:21:74:cc:74:ec:4e:b0:d3:78:
38:eb:e7:1d:af:d3:e7:8a:ed:30:7b:7c:48:38:4e:
6b:f9:6e:95:9d:b0:03:06:50:ac:bd:64:66:42:a0:
39:9e:80:9c:d1:db:0c:57:0c:eb:f8:70:e6:65:10:
28:b5:ea:ac:64:f3:c8:90:06:03:75:96:9a:8d:b3:
e9:22:d2:69:9f:c6:2b:c9:43:0e:13:15:e2:9e:26:
d6:45:af:d9:5a:eb:a3:44:da:52:9d:b4:e9:98:38:
d6:32:71:f5:2d:fe:4a:ec:86:1d:19:df:d2:f5:dd:
4a:f7:64:a5:8e:a3:52:0a:59:50:5e:1d:20:9f:73:
dc:1b:7d:70:38:4b:3f:bd:f1:c5:06:43:ec:b4:b2:
ec:86:b1:c5:54:9b:7b:66:3a:47:15:ac:31:f3:67:
66:e2:26:1a:3f:56:99:35:65:ef:00:94:c7:a1:ee:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5E:98:FB:D5:FF:8F:F7:5A:57:E7:9F:93:49:5B:56:76:F7:24:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9D2ED4ABEB611EFB7CC967C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.52.0/22
Signature Algorithm: sha256WithRSAEncryption
60:a5:11:a5:28:80:ca:a2:c5:06:99:60:27:12:9f:78:5d:47:
5d:a0:8a:2f:87:ca:6a:c2:01:3c:9c:05:64:bd:ad:0e:01:12:
5c:af:5a:0e:71:ec:01:7c:d1:98:db:f5:8c:58:5e:a4:95:8c:
ba:44:6e:c2:ba:27:dd:6e:e6:04:f8:38:57:0c:69:ee:07:5b:
f4:0c:ed:f9:00:7b:2e:ee:c3:99:2b:99:64:45:4c:4d:76:2b:
60:35:6e:30:ae:b4:fd:1d:ae:51:19:a7:80:c2:84:2b:a2:32:
53:82:fc:66:eb:a7:b5:33:eb:0e:a2:98:1e:9c:d4:dc:25:61:
36:15:fa:59:b1:8c:e5:a3:5e:b4:42:15:58:ea:e7:9f:50:6c:
54:0d:36:1a:4d:06:82:60:ad:df:0e:28:89:42:48:1b:2d:be:
50:37:c5:77:27:21:24:98:7c:a9:a6:69:0d:a7:6f:ed:be:eb:
15:7e:fc:7b:b5:9c:1b:8d:57:47:9e:f2:e2:0b:f8:3c:73:98:
0f:d1:c1:09:4a:6f:15:a5:e4:05:3e:76:0b:b1:e3:5f:6c:1b:
42:02:9a:dd:0b:7a:d3:92:a3:3a:e7:3e:2f:1b:40:5a:7d:c1:
42:10:56:44:f1:19:34:bd:91:6e:7c:f2:36:d4:24:ee:32:0e:
98:fd:74:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:44 2025 by rpki-client