Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEF1F59A070811F0BCDFA9B5762E951A.roa
File: AEF1F59A070811F0BCDFA9B5762E951A.roa (raw, json)
Hash identifier: yi/JBXpRoHFJMnT9jLTFjkCpl75KsdG9lnPeZOx3lpY=
Subject key identifier: 8E:93:47:C9:96:6E:E8:C2:B4:BC:88:92:9D:15:82:1B:1A:4B:E6:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017594
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEF1F59A070811F0BCDFA9B5762E951A.roa
Signing time: Sat 22 Mar 2025 10:30:32 +0000
ROA not before: Sat 22 Mar 2025 10:30:29 +0000
ROA not after: Sun 30 Mar 2025 10:30:29 +0000
asID: 142403
IP address blocks: 154.83.12.0/24 maxlen: 24
154.83.16.0/24 maxlen: 24
154.83.17.0/24 maxlen: 24
154.92.14.0/24 maxlen: 24
154.92.15.0/24 maxlen: 24
154.92.16.0/24 maxlen: 24
154.92.17.0/24 maxlen: 24
154.92.18.0/24 maxlen: 24
154.92.19.0/24 maxlen: 24
154.94.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95636 (0x17594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 22 10:30:29 2025 GMT
Not After : Mar 30 10:30:29 2025 GMT
Subject: CN=67de9148-46d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:00:85:35:9a:b0:3a:da:e5:bc:f4:05:11:
d5:f7:5f:e7:5f:13:63:e0:ff:d8:1a:78:12:69:24:
a4:ac:ef:55:30:40:d6:24:05:a0:d3:c3:59:30:df:
73:dd:df:a6:f9:6a:bc:70:83:81:3f:5d:29:61:68:
02:8f:61:d0:78:48:1c:26:b4:47:61:77:1c:ab:8d:
33:5d:22:22:44:12:01:1b:1e:29:c2:40:ea:56:42:
e7:0b:d8:40:79:96:6e:48:df:94:fd:90:63:e4:41:
13:58:90:fc:15:ff:33:b4:e8:16:7f:56:50:df:6b:
1a:5d:dd:de:a4:bb:95:3f:09:27:a9:3c:6e:9d:e2:
44:d1:d1:f2:6f:63:46:c1:dc:cd:ce:2b:e6:ab:64:
8e:c1:cd:9b:92:e4:9f:65:fa:4c:db:5b:30:59:08:
b8:e6:33:2d:01:23:bb:52:87:c8:39:24:80:af:5f:
10:0a:c7:6d:c8:a2:ad:6f:a9:57:8f:f3:3c:b8:16:
7e:7a:89:76:bc:72:27:d5:ed:d1:d1:e4:30:e2:29:
b5:14:87:23:07:f2:bd:fd:45:42:58:88:45:8b:6b:
99:b0:ef:45:ca:3d:54:83:c8:09:f9:13:cc:a4:14:
43:18:5a:7d:1c:a7:92:25:88:04:d3:25:78:df:48:
d4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:93:47:C9:96:6E:E8:C2:B4:BC:88:92:9D:15:82:1B:1A:4B:E6:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEF1F59A070811F0BCDFA9B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.12.0/24
154.83.16.0/23
154.92.14.0-154.92.19.255
154.94.5.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:59:e7:1d:29:0a:84:99:d6:e5:1a:5d:7d:e9:92:2d:d6:2b:
26:71:13:3d:4f:bb:87:13:06:10:09:7e:c0:07:e1:88:f8:22:
a3:28:ef:c6:41:dd:e4:2f:4b:3a:4c:6d:ab:d1:2f:9d:89:66:
7d:d8:f3:5a:b6:c5:cb:86:bf:f0:64:10:ca:39:ac:c9:b7:4f:
7d:7b:3f:85:37:a5:9b:ea:d0:ce:a1:c2:fa:5f:07:2c:cf:1b:
96:ed:1b:00:ee:de:1b:3c:43:38:46:a7:9a:94:ef:78:62:fa:
44:69:c9:9b:89:e9:a1:35:13:f7:df:d8:a7:b1:a3:f7:72:87:
0f:95:a2:d9:3a:93:fa:f2:a1:2d:de:7a:06:c6:4b:d1:66:01:
13:4f:c3:f1:1f:1a:09:95:57:3d:bc:36:65:d0:d6:18:9e:da:
69:1e:a9:da:82:21:d6:98:cb:d6:18:49:56:b6:b9:9c:7c:12:
f5:d1:df:e4:f9:85:0e:b0:48:da:09:8a:8f:7b:4e:38:5c:e4:
dc:94:d7:12:f0:31:bb:6e:63:3c:fd:74:3b:06:8b:7a:68:21:
07:bf:d2:03:50:99:6a:1f:46:5c:c1:98:ec:1a:ee:b2:d9:78:
45:a3:19:62:b6:08:ee:c4:74:c2:db:d8:a5:3d:5a:85:59:7e:
2b:8f:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:39:00 2025 by rpki-client