Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB0EB62CC1A611EF9F334C80762E951A.roa
File: AB0EB62CC1A611EF9F334C80762E951A.roa (raw, json)
Hash identifier: m21RETk0JhEJEuv2X5868IK2paH2W5ikcMGSzMtW2Ts=
Subject key identifier: E1:1C:1A:3A:55:C4:F7:F9:35:D8:23:CF:85:1E:D5:09:B8:A8:CC:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB0EB62CC1A611EF9F334C80762E951A.roa
Signing time: Tue 24 Dec 2024 03:25:05 +0000
ROA not before: Tue 24 Dec 2024 03:25:01 +0000
ROA not after: Wed 10 Dec 2025 03:25:01 +0000
asID: 984
IP address blocks: 154.92.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73975 (0x120f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:25:01 2024 GMT
Not After : Dec 10 03:25:01 2025 GMT
Subject: CN=676a2991-694d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:77:6d:69:2c:4b:12:c1:f1:2a:48:b0:24:
48:58:59:f3:bb:bf:49:9a:05:fb:b1:3e:2a:b2:55:
39:6b:c1:90:3d:76:75:9a:12:74:43:1d:d1:37:e8:
a8:6e:67:96:aa:ac:78:42:75:70:5e:66:67:66:00:
1f:3a:7e:46:d8:ca:21:26:24:c8:da:aa:91:64:34:
1b:4f:3f:cb:97:c6:be:ce:9f:96:f8:a1:1e:80:26:
aa:5f:e7:30:cd:95:fe:e7:6a:8a:58:2b:e6:89:ec:
26:40:af:71:e4:d0:fb:1d:ea:cc:de:41:ed:56:8f:
c5:50:d5:b9:22:36:55:31:e9:31:0a:05:00:c2:3a:
ed:47:2f:99:82:d2:b4:e2:d7:2d:28:93:6f:08:15:
39:54:e4:ed:0f:3d:f0:b2:48:48:e2:fd:93:ab:fd:
72:42:5d:70:c8:de:f2:8a:95:70:6a:c8:17:20:b2:
60:5e:4a:6e:79:2a:e2:f6:aa:0a:8e:ff:ed:04:c7:
b0:cb:40:f7:d3:55:8b:39:ea:fa:a3:6f:da:50:9e:
8a:96:71:45:f8:62:31:85:aa:3b:bf:e9:3a:f3:80:
58:bc:da:6f:e0:62:94:23:88:8d:d2:ef:7b:ad:16:
80:6c:6b:ea:3a:b8:fd:b1:13:78:67:be:7d:02:37:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1C:1A:3A:55:C4:F7:F9:35:D8:23:CF:85:1E:D5:09:B8:A8:CC:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB0EB62CC1A611EF9F334C80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.195.0/24
Signature Algorithm: sha256WithRSAEncryption
44:34:e1:c2:b2:e6:a7:63:54:43:1b:6f:58:b0:8b:06:29:d3:
74:04:0b:fc:b9:b7:ff:86:8b:f8:a3:ee:11:e5:9e:7d:fb:a5:
28:2a:47:14:40:fd:3c:7c:d0:e9:b4:58:7b:2e:5b:0d:d9:53:
9a:86:d9:80:8c:63:22:ce:f9:1d:19:be:fe:ff:45:a6:2f:f9:
9a:f8:37:2b:47:6d:01:0d:30:fc:52:47:96:05:40:98:38:52:
52:b7:34:c6:f9:5a:61:5a:2a:3b:58:9b:09:67:4d:6f:be:39:
e4:e8:9b:6d:f4:83:4b:fe:24:5c:0b:79:a9:77:80:71:7a:3f:
98:06:26:e6:c7:35:1c:f6:4c:01:a0:4b:b3:1c:8f:6c:62:17:
91:eb:2b:ff:55:6c:66:a7:d1:5a:26:a7:ab:fc:f7:a8:a1:a7:
a9:4f:7a:a1:aa:c0:ab:0d:6c:26:2f:88:48:fa:fc:66:dd:9f:
9f:89:5a:48:12:42:75:a9:00:ab:a9:c5:4d:83:50:b1:01:8f:
0d:c5:0c:4e:d7:29:a1:6b:68:e3:f2:47:7b:1e:a7:42:c7:91:
ba:42:83:07:e0:fc:0d:a6:31:5d:f1:a5:e6:69:0d:55:47:8b:
40:71:53:e7:68:d9:74:29:ed:53:fc:6c:ca:9b:9f:72:13:21:
c0:f4:d2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:40 2025 by rpki-client