Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19B989CEF4E411EF9EA354BE762E951A.roa
File: 19B989CEF4E411EF9EA354BE762E951A.roa (raw, json)
Hash identifier: +K/I1KOiwTWiR5LNEToJRTeEtJU129Bv/N97+NbknL0=
Subject key identifier: BA:4F:0F:CF:3C:04:1A:98:EA:8D:5E:27:92:34:C7:48:C3:3F:25:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19B989CEF4E411EF9EA354BE762E951A.roa
Signing time: Thu 27 Feb 2025 08:23:19 +0000
ROA not before: Thu 27 Feb 2025 08:23:15 +0000
ROA not after: Sat 19 Feb 2028 08:23:15 +0000
asID: 17561
IP address blocks: 154.212.147.0/24 maxlen: 24
154.212.148.0/24 maxlen: 24
154.212.149.0/24 maxlen: 24
154.212.150.0/24 maxlen: 24
154.212.151.0/24 maxlen: 24
154.212.152.0/24 maxlen: 24
154.212.153.0/24 maxlen: 24
154.212.154.0/24 maxlen: 24
154.212.155.0/24 maxlen: 24
154.212.156.0/24 maxlen: 24
154.212.157.0/24 maxlen: 24
154.212.158.0/24 maxlen: 24
154.212.159.0/24 maxlen: 24
154.215.16.0/24 maxlen: 24
154.215.17.0/24 maxlen: 24
154.215.18.0/24 maxlen: 24
154.215.19.0/24 maxlen: 24
154.215.20.0/24 maxlen: 24
154.215.21.0/24 maxlen: 24
154.215.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91871 (0x166df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 08:23:15 2025 GMT
Not After : Feb 19 08:23:15 2028 GMT
Subject: CN=67c020f7-fa05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:d2:fe:36:93:71:0d:d8:49:53:5c:15:3f:
fc:44:59:01:8a:8d:f5:8d:1c:f1:5a:ff:1d:11:46:
cb:e6:37:96:fb:a0:2c:58:14:38:0d:ab:e5:cd:fc:
50:94:db:92:ed:4a:2c:d5:26:6a:30:8e:d4:0c:1a:
9f:a2:17:15:d5:40:b3:40:31:10:78:30:9d:0a:07:
25:93:00:ca:bf:29:3a:4e:5e:b7:0e:98:f1:6d:2b:
43:63:2d:75:3a:22:98:f1:c8:69:79:ec:36:60:22:
bc:bc:7a:66:67:c6:de:cf:43:22:42:93:6e:76:1f:
e8:16:d5:59:f5:a6:a2:ea:ba:ca:5d:da:70:a4:1d:
26:6c:f2:a9:53:aa:b0:af:58:1b:1f:b0:cf:40:9f:
d2:6b:1b:ec:bb:a1:92:dd:09:40:26:7f:c5:9f:68:
98:44:a2:13:6f:9b:0b:fc:ca:02:f3:08:a1:4c:83:
f4:ac:b3:9f:7b:be:6f:44:38:0a:15:c8:e0:99:7f:
55:e2:06:3b:83:1f:00:d9:e2:97:22:c2:b1:54:6b:
81:d3:a1:41:c6:02:5f:b2:3a:d8:6c:6d:d4:54:08:
c6:66:c0:8b:b3:42:b8:61:a6:7d:0f:1a:8b:3b:a8:
d1:73:7e:e6:1e:a8:c1:e2:10:58:5f:85:33:17:d1:
15:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4F:0F:CF:3C:04:1A:98:EA:8D:5E:27:92:34:C7:48:C3:3F:25:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19B989CEF4E411EF9EA354BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.147.0-154.212.159.255
154.215.16.0-154.215.22.255
Signature Algorithm: sha256WithRSAEncryption
71:1d:56:a5:8b:64:e4:ac:29:b9:17:31:a4:dc:c5:76:79:d8:
41:b8:3a:ab:6f:97:3b:af:0d:ce:18:73:12:e7:a2:e3:7b:96:
e0:ac:87:ef:28:a6:f4:82:2e:a1:74:58:55:ed:74:74:fa:33:
5f:fb:c1:ec:05:c3:75:6c:5f:9f:50:5e:29:48:5e:2c:5c:0f:
50:ef:ad:3e:5d:f8:27:50:1e:9e:ac:56:b0:18:55:7b:33:88:
a5:24:45:25:30:68:26:72:a3:be:8f:96:32:6b:3a:51:4a:06:
16:c2:30:37:e1:3f:f1:2d:d0:83:b7:a7:29:a1:39:47:72:e6:
2d:36:25:35:dc:72:75:57:37:75:8d:0d:81:5d:13:e8:20:3d:
c5:09:75:89:6f:3f:a7:a7:60:e6:b4:66:1c:b3:a6:db:ff:68:
83:d8:5f:23:47:b5:4e:03:8f:ca:0e:99:54:8e:ab:da:5b:f9:
1c:ef:d5:c6:20:31:13:27:37:13:05:ea:5a:ba:4b:a4:86:a8:
f1:a0:21:29:e6:24:52:d4:19:7f:c8:bc:79:75:be:02:6e:b4:
00:e6:a7:a8:f3:83:ce:e5:62:8b:80:aa:69:f6:fa:cd:89:59:
92:a1:46:78:ff:05:6e:8d:8c:12:5e:41:aa:4d:11:a0:2c:6c:
5a:35:d6:8b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:18:37 2025 by rpki-client