Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD7D5F1A070711F0A212E4AD762E951A.roa
File: BD7D5F1A070711F0A212E4AD762E951A.roa (raw, json)
Hash identifier: QGlmUKcurSpnImxcfjLE1PoGt5dbEjqOaGQNtVyBlYw=
Subject key identifier: F0:01:C7:BD:DC:5D:37:FB:89:7A:39:BF:13:B6:C2:0B:6C:34:17:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017590
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD7D5F1A070711F0A212E4AD762E951A.roa
Signing time: Sat 22 Mar 2025 10:23:47 +0000
ROA not before: Sat 22 Mar 2025 10:23:43 +0000
ROA not after: Sun 30 Mar 2025 10:23:43 +0000
asID: 136970
IP address blocks: 154.197.2.0/24 maxlen: 24
154.197.3.0/24 maxlen: 24
154.197.4.0/24 maxlen: 24
154.197.5.0/24 maxlen: 24
154.197.6.0/24 maxlen: 24
154.197.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95632 (0x17590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 22 10:23:43 2025 GMT
Not After : Mar 30 10:23:43 2025 GMT
Subject: CN=67de8fb3-e83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:f3:5c:27:5a:d8:7d:db:a5:65:3f:a9:6f:
84:28:48:9f:15:d7:48:b4:55:6b:2d:e9:bd:95:3e:
f0:65:32:72:30:a6:46:bb:bd:53:2f:4c:10:e1:f4:
9f:ce:12:23:34:df:c9:9c:bd:17:7f:59:e3:c0:b0:
92:55:60:fe:8d:ec:3b:00:4f:dc:8b:8c:dc:f8:80:
60:29:a2:2c:4e:30:a2:cc:5b:a6:68:2c:37:de:fc:
74:fa:59:fd:f5:84:44:ec:4f:9e:4a:96:39:be:31:
f9:0c:b4:25:81:8f:4e:62:b8:86:87:9e:07:00:77:
7f:6f:5f:0c:98:86:cb:2f:86:34:2e:bf:6c:74:0c:
4c:1b:ac:c5:91:6b:71:20:1c:f1:6a:5e:cb:3c:a5:
1d:a9:cc:6f:2c:db:3b:7e:f5:3b:a7:d7:ec:bb:3f:
92:5c:57:ba:1e:a7:ac:d6:7f:aa:a9:60:c1:8c:a1:
1b:40:fc:f7:0f:1d:cf:4f:a7:d7:25:ef:9b:15:28:
c8:89:86:c7:42:05:64:4f:c6:87:2c:07:e1:ed:cb:
59:6f:c9:ee:eb:9f:89:d0:81:a2:cb:57:2a:22:db:
29:d6:50:41:57:65:d8:0e:f5:db:6f:9d:1e:db:0f:
14:70:18:87:22:b1:bd:81:d1:f3:e8:6f:fe:e8:de:
4d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:01:C7:BD:DC:5D:37:FB:89:7A:39:BF:13:B6:C2:0B:6C:34:17:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD7D5F1A070711F0A212E4AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.2.0-154.197.7.255
Signature Algorithm: sha256WithRSAEncryption
45:b2:15:0f:dc:e2:59:9e:7d:44:8e:e7:aa:11:f5:c9:38:22:
0c:08:5f:e2:70:3c:4b:7d:2f:a5:f1:e6:e6:73:6f:50:01:c7:
85:39:fc:48:4e:74:b9:0c:50:d0:57:2c:46:15:1b:ec:b3:c8:
a7:62:e5:53:c2:f2:7f:03:7e:81:c6:44:61:05:78:59:94:a8:
3d:02:7f:fb:e8:54:7a:f5:93:a1:2a:ba:33:ba:6c:52:fc:61:
d3:f4:71:35:b1:34:56:99:ca:c6:f0:ef:15:c7:5f:6c:48:98:
45:b6:ad:c9:2d:ee:35:3f:47:95:76:ef:74:e1:1b:15:75:ee:
b1:e7:1c:01:44:e1:e6:fd:aa:2f:bb:84:2b:48:19:4f:aa:af:
93:c0:14:a6:f2:bb:79:df:27:71:10:2e:7e:90:48:08:aa:11:
6c:26:74:d6:92:7a:b2:82:d1:a6:42:cd:b7:e0:7e:73:cf:7a:
2d:f3:99:2e:9f:bc:37:2f:77:bd:af:91:f5:2f:46:fa:d6:79:
e6:ea:a1:26:4f:de:02:0f:29:b9:0b:f6:df:ac:03:6e:bf:21:
8e:8f:ab:ea:07:11:9c:a9:46:c2:4a:a0:ea:37:fd:ff:17:69:
c2:ed:7c:e9:ec:6a:c4:0c:46:74:50:a5:fd:b9:43:1e:7e:50:
7d:8a:8f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:21:44 2025 by rpki-client