Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/277457AAFF1711EFAC38D798762E951A.roa
File: 277457AAFF1711EFAC38D798762E951A.roa (raw, json)
Hash identifier: uf1yWuBaytjpCqtFLV2Qnfw06lHL2b33Pk9A54eV37U=
Subject key identifier: 9B:0E:71:1A:40:73:E6:A0:B3:13:8B:36:BA:2A:9F:14:29:71:CE:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/277457AAFF1711EFAC38D798762E951A.roa
Signing time: Wed 12 Mar 2025 07:53:58 +0000
ROA not before: Wed 12 Mar 2025 07:53:53 +0000
ROA not after: Mon 05 May 2025 07:53:53 +0000
asID: 54600
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.90.224.0/19 maxlen: 24
154.92.176.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95145 (0x173a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 07:53:53 2025 GMT
Not After : May 5 07:53:53 2025 GMT
Subject: CN=67d13d96-f064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:7e:42:aa:60:41:32:56:dd:71:f7:73:6a:
3b:7d:a5:bb:84:c3:58:1c:e1:dc:74:74:69:77:f6:
8b:af:2c:f8:77:ac:09:58:a6:a0:20:94:de:5a:7f:
44:49:3d:93:6e:c4:dd:df:c7:20:cd:8a:c9:79:7f:
b5:f8:1f:b5:5d:b2:a9:7a:e1:49:d8:e8:cf:5d:ba:
9b:6f:3b:2d:67:9c:58:66:54:69:1e:99:b0:cf:eb:
2a:e2:27:e0:a9:a7:da:5c:5d:cd:03:48:e0:d4:0a:
01:87:fe:f2:91:6b:78:3b:dc:9e:c1:d9:ce:8a:7f:
2d:34:99:f6:3d:c5:97:ff:49:ba:ac:32:9c:d1:f3:
c2:da:37:0e:13:17:60:7a:a3:28:91:50:b5:5a:dd:
66:df:e9:14:c8:9d:b0:ce:06:79:e7:e8:a5:b7:d3:
1c:9f:1a:26:9b:21:f3:88:88:88:91:70:73:42:eb:
b6:10:94:5d:8d:c2:ee:8c:30:54:6a:47:9c:91:5c:
99:44:07:b6:02:ec:99:4d:0d:65:1d:18:ea:13:59:
dd:c5:9f:b0:b6:14:55:42:e8:b1:a9:40:98:5a:78:
5c:7e:f0:fc:b0:9c:bc:2b:a8:2e:af:3d:7f:ed:f9:
01:7a:4d:4e:82:fb:1c:09:fb:04:1c:dc:cc:eb:2c:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0E:71:1A:40:73:E6:A0:B3:13:8B:36:BA:2A:9F:14:29:71:CE:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/277457AAFF1711EFAC38D798762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.90.224.0/19
154.92.176.0/20
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
26:bb:66:28:e2:31:bd:fc:9b:aa:dd:07:1c:ff:b3:56:77:3b:
ad:e8:41:0b:12:55:a9:da:0d:0e:eb:fd:08:ff:7e:9c:a8:7e:
67:82:e1:ff:20:d1:72:26:e2:6d:6f:a1:6a:dd:4a:13:a4:5e:
c4:14:67:38:7d:47:59:08:0b:13:c9:da:6a:87:99:b8:f5:5c:
5b:77:fc:ff:b0:28:1e:d5:0e:17:be:56:8d:c8:1a:d1:76:71:
4e:6f:0b:2c:52:da:25:2c:14:50:62:db:e4:b5:e7:3f:f0:11:
b2:a1:00:f1:4f:66:33:da:85:21:cf:0a:46:1a:70:c0:6a:72:
59:05:7f:3b:94:db:c7:50:10:ab:9c:6a:a7:7c:ac:85:78:9b:
6b:d5:af:74:d5:44:f2:29:81:bf:11:b7:66:ad:ef:09:22:51:
22:c7:0d:7d:e2:43:03:dc:6a:50:fa:21:fc:ce:c9:5b:cc:a3:
83:13:dd:9c:db:a0:85:04:88:a6:af:20:9f:97:1a:75:f0:52:
f5:b4:f1:85:dc:1e:65:ba:aa:71:e0:2a:fc:6e:19:17:ce:e2:
09:4d:ed:34:c7:21:15:c8:99:a9:20:3d:e4:cf:d9:12:c8:8a:
38:f5:e2:79:19:d2:c2:fc:4f:33:ef:0d:b3:65:48:5d:0f:b1:
4c:45:d6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:02:07 2025 by rpki-client