Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07B154EC058211F0A9553262762E951A.roa
File: 07B154EC058211F0A9553262762E951A.roa (raw, json)
Hash identifier: OtdHS0jAIRfZ41eWBQcgQjsu7N4MRf9Mc/sqtuWafVU=
Subject key identifier: A0:5B:74:E4:1A:FB:09:3B:CA:AC:C0:17:A4:6A:3B:2E:DA:8E:8C:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017543
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07B154EC058211F0A9553262762E951A.roa
Signing time: Thu 20 Mar 2025 11:54:08 +0000
ROA not before: Thu 20 Mar 2025 11:54:04 +0000
ROA not after: Thu 03 Apr 2025 11:54:04 +0000
asID: 45669
IP address blocks: 154.80.0.0/18 maxlen: 24
154.80.64.0/18 maxlen: 24
154.81.224.0/21 maxlen: 24
154.81.232.0/21 maxlen: 24
154.81.240.0/21 maxlen: 24
154.81.248.0/21 maxlen: 24
154.91.160.0/22 maxlen: 24
154.91.164.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95555 (0x17543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 20 11:54:04 2025 GMT
Not After : Apr 3 11:54:04 2025 GMT
Subject: CN=67dc01e0-6a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:10:15:2e:ba:89:d2:31:fb:a6:1b:15:84:
68:06:b9:68:74:f8:92:a7:8b:7b:8e:63:cc:44:3b:
a3:c7:18:89:50:de:50:24:76:b4:72:5e:fa:d8:bd:
33:84:72:59:cf:4e:41:fc:79:b9:a9:d8:49:af:db:
0e:6e:3d:87:ad:1b:ce:fc:0a:66:9a:88:0e:7b:dd:
53:ca:ef:d0:4f:87:5e:32:a9:09:3e:ad:37:08:60:
6f:d1:af:87:86:c8:1b:63:5f:8a:5e:1f:41:59:d5:
ac:11:76:b3:be:ff:8e:b2:66:cb:98:c1:7f:0f:18:
f6:40:78:03:30:e0:9d:2b:6c:0b:08:c1:6f:45:93:
b1:7a:25:00:48:62:9d:b3:b1:90:1c:53:4d:78:6c:
e6:e7:c6:a6:6d:10:68:5c:0a:29:3d:04:03:26:bc:
70:2b:b1:be:fe:e1:4d:99:c1:8e:fb:7a:60:b3:fd:
b7:9e:97:e2:bb:fd:e3:0a:68:8c:e9:4e:6b:09:1b:
df:7c:c5:8b:4a:22:cf:f5:ce:ab:08:f5:06:7d:ab:
fb:f9:d1:00:79:be:cf:9b:f0:0f:83:4c:65:7a:2f:
be:27:7a:91:0f:f0:2f:02:d9:d0:47:ab:7e:fc:10:
88:49:20:be:db:d6:f9:25:3d:dc:82:8c:ac:3c:33:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5B:74:E4:1A:FB:09:3B:CA:AC:C0:17:A4:6A:3B:2E:DA:8E:8C:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07B154EC058211F0A9553262762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.0.0/17
154.81.224.0/19
154.91.160.0-154.91.165.255
Signature Algorithm: sha256WithRSAEncryption
3d:be:d1:ae:11:01:0f:5a:ad:11:61:02:2a:f4:b4:4e:22:0c:
23:aa:c2:21:de:f8:57:10:f0:28:4f:9e:51:d6:71:ca:cb:dd:
b4:52:9c:7f:8c:c7:0b:75:cc:01:cc:e1:5a:2b:e6:8d:f6:c2:
be:62:c0:7b:c4:06:65:4f:e3:db:cf:d1:14:58:34:91:bd:0c:
df:44:ef:f0:77:25:ca:dc:8f:d8:fd:33:da:8f:02:a8:16:3f:
03:b2:89:53:69:13:2c:fe:fc:23:fa:2f:a6:53:f3:14:5d:05:
e5:95:89:17:3b:3a:db:39:dd:9f:9b:ec:d1:1c:98:ee:3e:28:
f6:30:1d:73:ac:10:63:dd:59:2c:45:13:c6:c4:56:99:7d:ab:
da:ee:3a:be:1e:94:98:6e:00:2c:ac:a0:82:ed:aa:b7:e5:26:
05:08:d9:d5:23:3c:f6:0c:f8:4a:f2:11:c1:20:e5:f3:a3:4f:
db:83:97:03:2e:67:dc:74:c6:e3:db:b3:ef:94:b1:86:ac:64:
7c:61:de:fe:ca:96:62:bf:d1:70:e9:2b:1d:d3:6e:6e:b5:86:
c0:c1:43:da:d7:81:6b:35:75:9d:41:c8:8e:f7:9a:7c:91:12:
c8:a7:70:e0:91:e0:c1:6d:61:95:83:38:ed:d2:20:75:7f:d8:
58:a0:38:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:04 2025 by rpki-client