Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1246F650041011F0ACA0F17A762E951A.roa
File: 1246F650041011F0ACA0F17A762E951A.roa (raw, json)
Hash identifier: BfZDbJ+WMLrN37DhQnsDf3LYrCo5GEgy00REwigPDC0=
Subject key identifier: A1:0B:4A:72:61:31:BE:90:CD:04:3F:03:94:01:DA:0B:FE:4E:A3:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1246F650041011F0ACA0F17A762E951A.roa
Signing time: Tue 18 Mar 2025 15:45:52 +0000
ROA not before: Tue 18 Mar 2025 15:45:48 +0000
ROA not after: Mon 05 May 2025 15:45:48 +0000
asID: 44559
IP address blocks: 154.209.147.0/24 maxlen: 24
154.209.150.0/24 maxlen: 24
154.209.151.0/24 maxlen: 24
154.209.152.0/24 maxlen: 24
154.209.153.0/24 maxlen: 24
154.209.154.0/24 maxlen: 24
154.209.155.0/24 maxlen: 24
154.209.202.0/24 maxlen: 24
154.209.203.0/24 maxlen: 24
154.209.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95420 (0x174bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 15:45:48 2025 GMT
Not After : May 5 15:45:48 2025 GMT
Subject: CN=67d99530-4ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:9b:5a:92:e4:a0:00:cb:29:ee:20:40:42:
4b:af:a4:05:4a:83:55:ec:6d:a4:a7:b4:08:3e:eb:
6f:e6:76:21:17:f1:c1:e0:f5:a2:0f:9f:47:3f:61:
35:e0:88:0a:b0:8e:c9:1a:58:e6:76:43:ae:61:88:
28:1a:95:bc:54:ac:2a:7c:18:d9:cd:8f:ec:31:59:
6c:a8:ae:c0:fb:bd:12:8a:cb:49:60:e5:e7:14:27:
e8:f6:c7:7c:2d:f1:28:79:cd:ff:a4:57:69:3a:6f:
1c:59:5c:59:65:26:e4:87:ec:a0:35:04:a3:59:b5:
6f:4a:5d:56:d8:f1:da:8d:18:0b:21:80:32:6e:e4:
c0:ce:d1:ab:14:24:a5:06:b9:42:08:20:58:5e:cd:
97:ce:f3:27:8d:55:b5:d9:05:df:47:8f:47:ae:21:
d2:e1:82:11:2b:33:a9:84:10:e7:25:73:c6:a5:04:
5a:26:45:71:43:4a:2c:22:ea:87:f5:ae:02:21:83:
1e:8d:9a:bd:83:5f:98:53:b1:42:e9:9c:95:6b:3a:
c6:55:d6:73:13:02:71:df:b8:85:8b:94:7b:88:81:
ef:fa:59:cb:3f:c8:9b:34:24:b3:bb:1c:f7:8e:2a:
fe:33:96:f5:bc:55:d3:29:db:10:cd:ed:46:4b:e4:
87:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0B:4A:72:61:31:BE:90:CD:04:3F:03:94:01:DA:0B:FE:4E:A3:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1246F650041011F0ACA0F17A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.147.0/24
154.209.150.0-154.209.155.255
154.209.202.0/23
154.209.205.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:14:83:53:72:5a:ec:04:85:b0:e1:23:5d:4d:77:51:c7:c2:
29:65:3a:0a:40:57:2f:aa:3f:3a:cf:61:b8:89:21:f2:fd:45:
80:a0:a2:96:b8:2d:e4:68:6a:ce:93:b4:82:66:f1:e9:95:42:
c0:d0:4f:37:78:e3:9d:4a:a4:4b:d8:2d:9c:8f:b2:41:0c:8b:
32:57:7d:d6:e9:ba:44:1b:4a:fb:5c:f9:eb:63:07:0b:2b:5a:
ca:7d:af:a8:7a:b2:ad:2e:c1:a7:1b:8b:3c:49:71:c3:06:2a:
9c:52:f7:4f:8f:e4:c8:41:25:77:74:4e:d7:3a:ff:0b:a2:53:
18:88:26:b3:54:eb:f1:98:e6:4e:b2:9d:78:2f:37:27:f8:d6:
e7:6e:47:b0:ec:6b:18:09:78:8a:94:06:bb:8b:c8:ac:a8:ac:
d2:b4:bf:19:9f:33:0d:6a:72:53:fd:d9:f2:54:89:27:94:9f:
c4:b1:25:df:0c:e5:1e:c8:0d:6c:2b:88:a0:e0:4a:40:2a:0c:
95:27:8c:c8:84:14:c0:2b:00:28:28:ae:e5:6e:45:cf:51:58:
16:6d:b6:e8:62:d4:0d:fe:df:b6:b0:7e:db:6f:ac:5e:3c:97:
a9:14:6f:a1:10:2d:f0:b9:35:77:34:3d:b4:0d:7f:aa:8a:cf:
83:6c:c7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:08:23 2025 by rpki-client