Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B204F4CF65F11EF9F2E0869762E951A.roa
File: 1B204F4CF65F11EF9F2E0869762E951A.roa (raw, json)
Hash identifier: SzYPYhBpdOnbD3A1p/dXVukseEI4wo9V1bbUfPR30c0=
Subject key identifier: A7:89:D0:94:9C:F1:36:96:81:8C:B9:B5:13:FB:A8:54:25:A1:8B:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B204F4CF65F11EF9F2E0869762E951A.roa
Signing time: Sat 01 Mar 2025 05:36:21 +0000
ROA not before: Sat 01 Mar 2025 05:36:17 +0000
ROA not after: Sat 19 Feb 2028 05:36:17 +0000
asID: 17561
IP address blocks: 154.198.40.0/24 maxlen: 24
154.198.41.0/24 maxlen: 24
154.198.42.0/24 maxlen: 24
154.220.239.0/24 maxlen: 24
154.220.240.0/24 maxlen: 24
154.220.241.0/24 maxlen: 24
154.220.242.0/24 maxlen: 24
154.220.243.0/24 maxlen: 24
154.220.244.0/24 maxlen: 24
154.220.245.0/24 maxlen: 24
154.220.246.0/24 maxlen: 24
154.220.247.0/24 maxlen: 24
154.220.248.0/24 maxlen: 24
154.220.249.0/24 maxlen: 24
154.220.250.0/24 maxlen: 24
154.220.251.0/24 maxlen: 24
154.220.252.0/24 maxlen: 24
154.220.253.0/24 maxlen: 24
154.220.254.0/24 maxlen: 24
154.220.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93480 (0x16d28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 05:36:17 2025 GMT
Not After : Feb 19 05:36:17 2028 GMT
Subject: CN=67c29cd5-c646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:8f:c5:10:6f:57:66:bd:88:17:95:68:de:
2a:17:0b:db:fb:d2:47:d6:77:6f:92:c6:a5:4d:92:
40:5d:79:ef:09:20:74:6e:a9:a2:ae:55:c3:fd:10:
00:48:3d:6f:39:5f:d6:1f:3d:b4:1d:dd:70:a7:4a:
da:ad:cd:4d:20:f1:84:06:d4:3d:d4:d9:a2:de:f3:
c2:43:ad:1a:ce:4b:81:d7:30:59:17:a9:9c:0e:c5:
48:78:33:87:a0:e9:52:ee:55:de:2c:2a:be:82:8a:
48:66:13:e4:e9:70:80:6a:74:d5:df:cb:c1:00:93:
f6:ea:da:dd:f3:82:41:76:c8:53:c5:bf:0c:bf:b5:
7a:b1:65:80:1a:36:76:15:c7:82:67:01:65:76:db:
03:54:fb:3b:d9:ca:06:59:cb:7b:61:ff:91:55:3c:
61:4c:2b:1b:e6:23:5d:89:a6:60:24:0a:d0:4b:03:
87:3e:e0:a7:86:00:1c:c8:c8:ea:ab:c6:e6:2d:bd:
17:97:dc:37:1d:52:aa:d0:77:fc:a5:01:0e:12:d0:
6b:c0:37:d0:f2:9d:e4:07:9f:8d:1a:20:65:35:a6:
cf:f2:0d:8c:84:2b:53:d6:6b:47:f4:01:7b:ab:55:
51:df:88:e4:fa:3a:14:3a:15:d4:2c:2f:1e:51:16:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:89:D0:94:9C:F1:36:96:81:8C:B9:B5:13:FB:A8:54:25:A1:8B:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B204F4CF65F11EF9F2E0869762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.40.0-154.198.42.255
154.220.239.0-154.220.255.255
Signature Algorithm: sha256WithRSAEncryption
14:7b:f0:cb:c8:98:64:ef:b5:1a:3e:0e:a6:c2:88:bb:5f:ca:
19:09:a0:a1:1e:a5:7d:0a:18:d9:a2:1d:71:e6:78:37:21:7f:
a5:50:6d:98:47:81:a8:ef:e2:21:23:dc:0c:8f:ed:c1:72:3b:
ca:9c:50:e2:6f:98:07:b8:47:dc:6b:4b:f9:f0:fd:c7:8b:56:
4f:db:97:c4:ef:09:79:82:15:c9:12:cd:0f:e2:49:b0:7f:4c:
26:c6:77:d1:59:77:36:b3:17:29:87:63:fd:6e:04:31:cb:12:
31:f7:37:8a:46:78:5c:5d:5d:0b:a1:40:2d:de:a7:27:d8:83:
82:68:ee:85:57:ca:c4:44:cc:63:1f:88:a3:bb:ef:cc:24:6f:
c4:e7:e3:81:cf:ee:e9:34:c8:ed:13:79:a2:17:56:51:6f:50:
15:6f:04:af:3f:9d:8c:2e:34:03:67:8b:30:a0:e3:f3:6d:08:
b2:bc:1e:89:c1:83:8b:11:9d:53:8f:4f:58:3b:66:05:32:0e:
eb:a3:e4:a4:72:70:c4:1a:56:4b:90:b6:b4:54:c7:a2:0d:2b:
e0:c4:7e:6a:75:7e:e9:5f:2d:d2:6f:07:49:9c:11:cb:92:15:
b5:26:ca:5d:ff:96:d8:77:a6:03:c6:00:13:4c:98:96:08:3a:
21:f7:4b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:45:38 2025 by rpki-client