Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABB439E2D2E711EFB6A5F0A5762E951A.roa
File: ABB439E2D2E711EFB6A5F0A5762E951A.roa (raw, json)
Hash identifier: x8kkagaY4BKc3pUYsHg88fju+xzGPcy2t9GkcViu4jk=
Subject key identifier: 7D:EA:61:E2:88:1D:43:53:E2:E2:B1:1B:E1:C7:6B:A9:8D:AB:8B:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABB439E2D2E711EFB6A5F0A5762E951A.roa
Signing time: Wed 15 Jan 2025 02:23:13 +0000
ROA not before: Wed 15 Jan 2025 02:23:10 +0000
ROA not after: Mon 03 Jan 2028 02:23:10 +0000
asID: 17561
IP address blocks: 154.223.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80798 (0x13b9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 02:23:10 2025 GMT
Not After : Jan 3 02:23:10 2028 GMT
Subject: CN=67871c11-a8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:3e:5b:03:01:ec:99:5c:28:a6:f7:c3:10:
61:67:99:d3:c5:2e:d8:1c:7b:75:78:c1:ec:91:8c:
8b:8a:63:64:aa:64:9f:7c:94:a4:c4:7b:23:9d:fe:
0d:41:be:d4:76:fe:cf:d4:53:d7:01:75:5a:18:07:
b0:28:36:d0:3f:83:46:e3:22:3c:06:b5:ab:4c:03:
2d:15:c6:34:ef:e0:0f:98:87:ab:57:6f:5b:7d:bc:
4e:59:4d:5d:35:90:a6:b9:2c:29:38:3d:79:04:5e:
9e:8a:f5:8b:b2:64:0f:61:f0:74:22:eb:f5:e3:2b:
13:58:5e:da:ce:bd:c4:fb:a1:be:f6:e7:53:df:9e:
17:ff:98:39:d3:6c:54:a0:66:10:4a:29:f5:26:80:
f8:c6:af:1d:09:21:d8:91:c5:f5:00:0f:f9:0f:3a:
7f:e0:15:88:66:11:e7:e0:6d:f8:6e:06:d2:17:45:
a7:9c:97:d3:cd:b5:5a:fb:84:ac:a7:67:55:c0:c5:
11:dc:b1:50:03:3e:08:fc:4e:42:3f:e2:23:47:c3:
3f:ef:67:68:87:80:67:bb:e3:ef:ee:35:b4:ef:a5:
f8:32:ab:ae:ca:c5:20:88:13:3f:d5:ef:07:c0:60:
16:87:ad:ab:df:c1:9e:98:ce:f7:72:02:eb:92:2d:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EA:61:E2:88:1D:43:53:E2:E2:B1:1B:E1:C7:6B:A9:8D:AB:8B:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABB439E2D2E711EFB6A5F0A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.242.0/24
Signature Algorithm: sha256WithRSAEncryption
08:91:cf:71:33:c4:8e:20:57:28:62:83:9f:87:df:c4:63:72:
6b:34:e7:8b:3c:6b:62:ca:fb:ab:d2:40:d5:84:f2:cd:0a:2f:
38:f6:2a:77:f6:d2:44:e7:81:8b:ab:a2:fa:7e:24:c7:86:8b:
9d:fa:a6:a7:61:18:cc:f3:2f:d4:94:b1:58:82:c0:f5:5a:00:
35:4f:09:5c:de:a2:68:f0:d1:db:e2:0e:34:11:22:ce:0f:d8:
35:10:e6:11:72:f3:b4:37:ed:0e:7e:09:07:d4:64:19:94:cf:
bf:e6:f0:34:40:03:84:c7:d8:90:53:5d:d7:b9:66:f4:24:67:
a7:68:1d:26:fe:c3:18:10:c8:90:c0:2b:b9:08:b7:4d:e3:89:
cd:41:d0:55:0f:38:63:b7:f1:74:7d:05:bb:82:87:f1:e6:53:
6c:d4:f2:a4:4f:b6:58:05:a5:f2:29:66:9f:44:ca:3e:e3:d8:
a6:09:83:54:af:e4:2e:6c:c4:65:7e:e5:cd:17:da:ce:88:cd:
18:11:57:21:53:4d:51:ee:07:7e:1c:5f:65:f6:b5:7b:d0:39:
3e:37:98:95:95:36:aa:14:de:2d:22:c8:35:a5:ea:c7:5b:32:
86:d1:bd:4e:8c:b0:90:66:54:69:1e:82:76:33:6d:1a:2c:c7:
7f:32:e3:d7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATueMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE1MDIyMzEwWhcNMjgwMTAzMDIyMzEwWjAYMRYw
FAYDVQQDEw02Nzg3MWMxMS1hOGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArTk+WwMB7JlcKKb3wxBhZ5nTxS7YHHt1eMHskYyLimNkqmSffJSkxHsj
nf4NQb7Udv7P1FPXAXVaGAewKDbQP4NG4yI8BrWrTAMtFcY07+APmIerV29bfbxO
WU1dNZCmuSwpOD15BF6eivWLsmQPYfB0Iuv14ysTWF7azr3E+6G+9udT354X/5g5
02xUoGYQSin1JoD4xq8dCSHYkcX1AA/5Dzp/4BWIZhHn4G34bgbSF0WnnJfTzbVa
+4Ssp2dVwMUR3LFQAz4I/E5CP+IjR8M/72doh4Bnu+Pv7jW076X4MquuysUgiBM/
1e8HwGAWh62r38GemM73cgLrki0BOQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH3q
YeKIHUNT4uKxG+HHa6mNq4vQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQkI0MzlFMkQyRTcxMUVGQjZBNUYwQTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt/yMA0GCSqGSIb3DQEB
CwUAA4IBAQAIkc9xM8SOIFcoYoOfh9/EY3JrNOeLPGtiyvur0kDVhPLNCi849ip3
9tJE54GLq6L6fiTHhoud+qanYRjM8y/UlLFYgsD1WgA1Twlc3qJo8NHb4g40ESLO
D9g1EOYRcvO0N+0OfgkH1GQZlM+/5vA0QAOEx9iQU13XuWb0JGenaB0m/sMYEMiQ
wCu5CLdN44nNQdBVDzhjt/F0fQW7gofx5lNs1PKkT7ZYBaXyKWafRMo+49imCYNU
r+QubMRlfuXNF9rOiM0YEVchU01R7gd+HF9l9rV70Dk+N5iVlTaqFN4tIsg1perH
WzKG0b1OjLCQZlRpHoJ2M20aLMd/MuPX
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:23 2025 by rpki-client