Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1261EAAC00B711F0940D2A8B762E951A.roa
File: 1261EAAC00B711F0940D2A8B762E951A.roa (raw, json)
Hash identifier: rXwICMCk510Da4lA84/QQkrk49UJfdtL1t6l1N7oYKU=
Subject key identifier: 2E:EB:51:34:81:24:88:BB:E3:1B:5D:F2:47:AD:F2:18:68:D6:8D:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017432
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1261EAAC00B711F0940D2A8B762E951A.roa
Signing time: Fri 14 Mar 2025 09:31:14 +0000
ROA not before: Fri 14 Mar 2025 09:31:10 +0000
ROA not after: Wed 28 May 2025 09:31:10 +0000
asID: 135377
IP address blocks: 154.197.56.0/23 maxlen: 24
154.202.65.0/24 maxlen: 24
154.202.66.0/23 maxlen: 24
154.202.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95282 (0x17432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 14 09:31:10 2025 GMT
Not After : May 28 09:31:10 2025 GMT
Subject: CN=67d3f761-5428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:53:25:15:d6:fa:b3:0d:5a:0b:cb:45:ff:f5:
5f:77:88:df:84:b3:d2:c9:c9:95:a8:21:68:52:f3:
04:d4:54:24:53:85:a6:15:16:8d:77:53:8f:81:b6:
af:3a:66:fc:cb:ad:bb:0d:9e:b5:a6:b8:5d:e1:15:
0e:02:6e:07:14:80:7a:42:c9:fd:b6:30:c1:d9:a9:
0c:35:34:ad:b1:ac:14:a4:3d:f5:e4:f6:cb:e9:10:
ac:8d:2e:10:b4:0b:9b:a2:08:4e:cd:52:93:17:89:
98:f2:65:8b:41:93:7e:6f:67:41:70:e8:c5:7f:bc:
aa:e1:5d:e0:48:0b:98:33:ce:86:3f:8b:14:4c:13:
84:1a:c6:ea:a8:2f:3f:c8:41:04:08:b2:49:28:2a:
90:02:f1:18:d4:6b:a1:66:de:67:55:58:6b:8d:91:
32:72:9c:48:90:34:af:f4:d3:cf:c2:4c:66:35:d6:
3c:c2:19:09:2a:3a:15:c1:ed:45:8a:f2:d9:a5:ff:
6c:e5:e7:15:70:0d:67:6d:14:2c:8f:a8:2c:8a:31:
82:e2:cf:70:bf:d2:2a:e6:68:42:ec:76:e9:5a:76:
30:aa:ab:1f:97:9e:dc:23:7d:c2:cc:bc:f9:11:5d:
a1:58:37:20:09:18:d9:01:aa:ab:b0:a1:d5:92:7f:
d5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EB:51:34:81:24:88:BB:E3:1B:5D:F2:47:AD:F2:18:68:D6:8D:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1261EAAC00B711F0940D2A8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.56.0/23
154.202.65.0-154.202.68.255
Signature Algorithm: sha256WithRSAEncryption
70:1a:f6:a3:9e:48:e7:0e:8f:b0:c3:3b:a8:c2:b7:0a:d6:42:
65:be:15:a6:33:9b:70:07:69:f0:ec:e0:96:74:1c:3d:66:9e:
d3:3e:56:9d:da:f4:05:a3:10:1a:ce:51:fc:33:3c:1f:20:57:
bd:21:10:d8:0d:ab:40:c2:e4:99:89:68:a5:1f:21:0b:fe:48:
43:74:b9:4b:be:3a:5b:ae:07:8e:7e:e9:6c:15:e5:f8:2f:d2:
00:68:4d:f1:b7:75:26:81:ff:b8:b4:8f:d3:02:69:0e:0c:06:
20:48:83:33:85:2a:a4:8d:f8:5d:8e:3a:12:2d:63:a6:cd:f3:
70:bc:72:b4:a2:23:79:b8:86:3c:d7:52:35:6f:a8:1a:be:0c:
bd:5a:fe:da:f2:1b:de:50:b1:b6:42:c6:25:7a:7f:41:97:7e:
01:82:48:77:6b:ef:7a:c7:ca:42:2f:40:bf:bf:9f:f7:ad:e4:
ba:bf:2e:b9:a6:e2:a6:61:90:a5:f3:52:fc:88:01:71:17:dd:
9c:34:de:9c:dd:0f:59:b3:ef:58:1f:68:fa:91:bc:ba:3a:f5:
85:c3:8d:6b:40:4a:a9:84:6c:58:25:06:8d:a3:e3:e5:7a:a5:
fe:17:6e:39:40:f3:5d:8e:97:bb:67:07:73:5d:d9:ba:0f:73:
e6:68:7d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:25:09 2025 by rpki-client