Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/041A81B6095911F091DD5958762E951A.roa
File: 041A81B6095911F091DD5958762E951A.roa (raw, json)
Hash identifier: EyW+qGcbxF6AeWLTIR8Fwt9hWoW50i58dtoqq9KgAaM=
Subject key identifier: FE:44:3F:40:10:66:76:54:0C:20:08:53:B2:0D:4E:4D:AA:A1:80:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017609
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/041A81B6095911F091DD5958762E951A.roa
Signing time: Tue 25 Mar 2025 09:10:37 +0000
ROA not before: Tue 25 Mar 2025 09:10:34 +0000
ROA not after: Thu 24 Apr 2025 09:10:34 +0000
asID: 18013
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95753 (0x17609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 09:10:34 2025 GMT
Not After : Apr 24 09:10:34 2025 GMT
Subject: CN=67e2730d-7922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:69:19:b2:16:c3:6f:36:f2:29:47:95:54:a8:
56:57:20:ea:30:ff:06:67:2d:ce:40:9b:ce:bb:19:
3f:7c:fb:fb:eb:5d:b6:00:8c:d5:c4:9c:12:d9:81:
ad:fb:f5:23:71:b6:69:2b:fc:d2:a3:8e:70:7c:0b:
53:67:5b:63:57:69:1f:55:ee:48:56:5c:55:a7:b6:
13:8f:1c:88:a6:cc:39:c9:c6:de:d1:e6:f8:01:e2:
25:c6:70:96:a1:51:67:e4:b6:0f:2c:c7:17:39:24:
ef:e0:18:80:98:9e:6a:b2:24:a5:c7:bf:b7:fa:c3:
b9:ab:29:3b:c3:3b:e9:03:d6:d3:13:ca:e6:87:04:
ba:f4:2c:5b:35:7d:73:d2:fb:64:27:0c:17:8f:c2:
f5:40:5e:f9:0e:c4:6c:a3:5f:f4:31:1f:16:6f:46:
c3:8f:7d:15:08:dd:f5:87:f0:eb:7f:c9:73:3b:fc:
2e:b5:08:38:0f:12:85:de:9e:33:99:d2:67:ee:a5:
58:3d:68:67:ea:74:44:a8:17:07:d1:65:69:c6:36:
c5:09:3b:05:6a:a4:7c:44:13:ae:59:b0:ca:7f:7e:
ee:85:5a:5f:be:04:b7:cc:35:9c:5d:03:15:97:12:
c8:e9:bc:be:2d:b0:b5:74:5a:16:1d:64:89:4b:de:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:44:3F:40:10:66:76:54:0C:20:08:53:B2:0D:4E:4D:AA:A1:80:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/041A81B6095911F091DD5958762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
8e:3a:39:5e:9c:eb:5a:9e:36:36:1c:84:43:92:2e:3a:5a:3c:
03:52:8e:05:82:45:b1:ce:3d:b6:f1:28:86:96:6e:b1:50:82:
be:06:a8:34:5b:19:96:3b:a1:3d:b7:df:0d:04:5b:2c:41:f0:
d4:30:bc:b7:01:71:b4:62:a0:8e:e2:d3:25:71:df:be:8a:f3:
31:79:fb:3f:86:d5:a9:ca:75:0c:18:7e:2d:02:5a:a1:35:dd:
22:93:01:8a:68:f7:74:67:b2:91:c4:4b:ba:7d:9f:6d:d7:7e:
fd:2a:6a:bd:5b:42:1d:ff:3d:92:58:e8:b9:68:36:64:7c:86:
ce:2f:f7:07:a6:a8:ca:43:cc:a2:46:ee:8f:2a:85:6d:59:d9:
76:86:78:27:d4:19:7c:3d:a6:cc:1b:db:52:4f:ce:00:5e:c8:
6a:b0:9d:3f:9a:d2:94:29:0c:0e:b3:28:b6:67:53:bf:ac:bd:
88:43:9b:59:8f:15:00:18:bb:60:ee:84:2b:2a:64:08:2a:df:
74:e5:ab:70:c0:3a:b6:31:fc:61:84:3b:3c:e1:60:bf:2a:c2:
f3:06:05:be:ae:bf:00:e5:b2:97:7e:5f:ee:28:46:0d:69:71:
10:3e:30:0f:ce:ea:22:db:47:7e:27:19:f4:58:1d:f9:58:ff:
de:06:dc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:11 2025 by rpki-client