Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6DE397CE06B11EF973A2797762E951A.roa
File: F6DE397CE06B11EF973A2797762E951A.roa (raw, json)
Hash identifier: K4PjwGqVMguyJj0LdKbyZRs01AtAuxM8s5e8Cd9ol2A=
Subject key identifier: 7F:3C:36:B0:9A:00:00:7B:EC:BE:4B:42:E3:D1:76:B2:5C:A8:81:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6DE397CE06B11EF973A2797762E951A.roa
Signing time: Sat 01 Feb 2025 07:12:58 +0000
ROA not before: Sat 01 Feb 2025 07:12:54 +0000
ROA not after: Thu 01 May 2025 07:12:54 +0000
asID: 328608
IP address blocks: 154.201.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85646 (0x14e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 1 07:12:54 2025 GMT
Not After : May 1 07:12:54 2025 GMT
Subject: CN=679dc97a-3ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:92:39:5b:5b:32:25:8c:1f:f6:80:42:16:
e4:b3:96:06:02:46:a8:a3:fa:9e:fe:17:d9:03:78:
4e:0f:a1:e3:57:f9:99:e7:a1:ca:cc:71:f8:13:9e:
29:02:d0:4e:27:76:ac:bb:64:1b:d3:ce:6c:f6:9f:
7d:b0:6e:c4:a6:32:e9:f2:84:4d:6f:83:90:c7:cd:
a7:88:a9:3b:38:c7:ef:41:92:12:e9:6e:b2:42:60:
a5:8d:34:e4:31:f3:d7:d8:75:6d:80:0c:cc:fe:fb:
2f:a3:0b:7a:05:b6:39:5e:ae:06:a1:9c:a8:06:e8:
94:a6:47:b1:dd:50:db:38:62:fc:e3:35:83:9f:58:
ac:3d:95:a9:76:d0:f9:2f:61:d4:74:ac:27:40:e2:
0d:ce:46:90:fe:01:91:9d:49:74:0e:5e:03:71:10:
78:ec:10:34:70:bf:f4:69:91:3e:73:2d:a5:4a:b9:
8c:80:8d:0b:01:4f:5d:f2:6b:8f:d6:aa:21:d6:08:
5a:d5:9f:5f:a9:94:8d:4f:69:de:dc:0f:a0:74:8f:
05:30:ce:84:33:df:6c:0f:cd:c6:96:97:8f:f0:b6:
8d:b4:f4:a0:91:fe:ab:aa:73:4f:29:72:6f:a2:37:
05:a6:f7:96:fc:80:83:15:87:31:77:6b:c6:17:88:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3C:36:B0:9A:00:00:7B:EC:BE:4B:42:E3:D1:76:B2:5C:A8:81:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6DE397CE06B11EF973A2797762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:5e:19:78:07:f9:fa:7c:94:2b:9f:33:12:cc:2f:f0:eb:cc:
de:a1:50:13:16:c4:a4:e5:78:01:f8:f0:18:46:e8:27:43:b8:
e3:ab:1a:ed:0e:13:e4:73:78:87:01:1c:3b:83:c9:08:4b:38:
92:7f:50:49:56:b7:68:b6:65:96:a2:fc:e7:24:91:e7:2b:b2:
a9:6e:ac:43:75:95:0a:5d:f0:ed:80:92:94:ff:14:d4:3b:b2:
43:95:b4:04:0d:a5:6b:2e:2e:19:2f:b0:73:b5:6f:50:0c:77:
86:7c:12:10:9d:7c:65:1e:09:d4:9f:0b:a2:03:82:0e:c5:90:
10:58:2e:c9:32:a1:4d:c7:56:27:45:31:67:8b:c5:92:d3:e0:
13:a8:06:1e:d4:7d:20:b2:9f:10:78:80:7a:00:73:32:5f:a0:
d4:c3:98:86:28:14:9e:02:89:24:ec:0e:71:4b:9c:be:7a:41:
8b:21:41:4c:53:38:a5:7b:58:43:04:d8:fa:0b:67:d8:5e:74:
ec:dc:e6:0b:b0:15:8c:0c:d7:6f:fc:0f:a3:d1:fd:b3:ae:fe:
73:d1:19:ff:83:22:7c:6d:c1:c0:e4:2d:53:61:99:39:65:db:
33:84:05:f4:63:87:ef:21:89:bc:07:12:ff:71:a7:57:ec:4e:
f7:fa:14:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:03:14 2025 by rpki-client