Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52D5BE86C91E11EF81DDF27A762E951A.roa
File: 52D5BE86C91E11EF81DDF27A762E951A.roa (raw, json)
Hash identifier: 7cAfkZFZp1OQ5WPzX6cMwhZLDG6630a+LqYuaKgMexs=
Subject key identifier: 51:AA:D6:D8:51:29:80:F8:C6:36:E4:2A:6A:8D:00:27:7F:72:2E:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013315
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52D5BE86C91E11EF81DDF27A762E951A.roa
Signing time: Thu 02 Jan 2025 15:29:15 +0000
ROA not before: Thu 02 Jan 2025 15:29:11 +0000
ROA not after: Mon 13 Dec 2027 15:29:11 +0000
asID: 17561
IP address blocks: 154.222.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78613 (0x13315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:29:11 2025 GMT
Not After : Dec 13 15:29:11 2027 GMT
Subject: CN=6776b0cb-cad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:0c:01:a1:cd:77:e6:d4:21:8e:88:98:84:
4d:f0:4d:f1:8b:d8:f4:a8:9a:a4:b3:c5:e7:85:51:
64:8b:f4:8e:eb:fb:db:08:28:31:99:d2:4a:37:c4:
52:35:67:4c:f0:fb:e4:08:21:3b:6d:9f:26:28:6a:
64:ed:54:c3:ba:90:23:10:03:f9:16:2b:1d:33:3b:
e3:c1:ea:fc:68:72:c6:66:61:2a:a9:24:a6:b9:ac:
63:47:8b:66:4d:24:cd:0a:63:cc:6e:0b:ba:85:08:
d0:7e:65:54:af:17:2e:12:9a:ea:72:5c:1a:f1:b6:
c7:05:40:68:0e:21:d0:fc:33:be:fc:66:09:a8:c9:
3c:4b:c2:2e:58:8c:57:bc:5d:c6:d1:67:e4:6c:86:
90:d3:1a:e2:29:aa:ca:49:1e:da:57:b6:fd:e4:ee:
c8:ff:45:7e:ad:81:a3:04:ac:98:1c:63:f5:49:4a:
5d:dc:fe:fa:73:c1:68:51:28:cd:fc:5f:ad:4f:ca:
d2:ae:2b:a3:72:d2:20:e3:42:e0:30:a1:6f:6d:65:
cb:d4:76:8a:92:5e:6c:b5:cb:5f:ac:1b:6a:d8:8f:
97:29:20:d3:c5:44:22:aa:78:0b:cc:21:fb:cf:af:
5a:ff:5e:56:84:45:14:e4:fe:aa:45:bf:49:6e:fa:
6b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AA:D6:D8:51:29:80:F8:C6:36:E4:2A:6A:8D:00:27:7F:72:2E:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52D5BE86C91E11EF81DDF27A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:05:48:dc:b4:ca:99:52:2b:46:ea:6c:c9:3c:c7:d2:ee:87:
0b:e7:58:eb:11:c3:51:4b:cd:a0:f1:16:53:3d:f4:fb:3e:ed:
30:bd:06:e6:58:09:af:54:4f:95:54:31:7b:26:f5:c3:fe:12:
56:a3:a1:59:1b:9d:3f:01:57:2c:ae:b3:15:9e:eb:83:0c:20:
e7:dd:83:d1:8c:8e:80:11:1b:e9:63:93:e5:3c:13:d7:f2:d2:
52:c4:1c:8e:92:a4:b6:f2:e7:07:99:42:cb:20:ff:af:af:84:
fa:21:a4:81:b8:de:ae:40:76:d2:d0:fa:0a:db:89:33:37:77:
27:d4:4b:89:d0:79:d4:5b:37:43:65:4f:67:69:93:e7:f0:c2:
01:f7:4d:f7:06:29:a1:1b:bf:00:9c:82:7b:d1:b9:1c:4e:71:
66:be:04:1c:12:fa:98:c5:ab:e1:30:ff:f8:2f:43:42:19:a4:
92:01:0d:61:57:a9:55:50:67:81:09:10:3c:66:05:38:ae:e0:
b3:48:43:87:d6:ca:b1:86:1d:bc:06:1d:51:c8:8f:b4:0f:65:
74:ef:e1:ec:d0:1b:51:5a:4f:74:7e:94:23:28:ba:5b:d0:9c:
c5:33:ea:fc:86:4b:18:fa:1e:fe:d7:70:a9:cf:39:b7:bd:38:
eb:66:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:59 2025 by rpki-client