Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E24B54EF65D11EFA1D50C5F762E951A.roa
File: 2E24B54EF65D11EFA1D50C5F762E951A.roa (raw, json)
Hash identifier: pi+g8si4nXj95l2b0/15/bzFb6kcYGLcl1roU720kgc=
Subject key identifier: 70:0E:57:81:87:FA:A8:B2:7A:C3:64:19:A0:30:D1:56:8F:E4:48:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E24B54EF65D11EFA1D50C5F762E951A.roa
Signing time: Sat 01 Mar 2025 05:22:34 +0000
ROA not before: Sat 01 Mar 2025 05:22:30 +0000
ROA not after: Sat 19 Feb 2028 05:22:30 +0000
asID: 17561
IP address blocks: 154.196.146.0/24 maxlen: 24
154.196.147.0/24 maxlen: 24
154.196.148.0/24 maxlen: 24
154.196.149.0/24 maxlen: 24
154.196.150.0/24 maxlen: 24
154.196.151.0/24 maxlen: 24
154.196.163.0/24 maxlen: 24
154.196.164.0/24 maxlen: 24
154.196.166.0/24 maxlen: 24
154.196.167.0/24 maxlen: 24
154.196.168.0/24 maxlen: 24
154.196.169.0/24 maxlen: 24
154.211.48.0/24 maxlen: 24
154.211.49.0/24 maxlen: 24
154.211.51.0/24 maxlen: 24
154.211.52.0/24 maxlen: 24
154.211.57.0/24 maxlen: 24
154.211.58.0/24 maxlen: 24
154.211.61.0/24 maxlen: 24
154.218.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93474 (0x16d22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 05:22:30 2025 GMT
Not After : Feb 19 05:22:30 2028 GMT
Subject: CN=67c2999a-5369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a3:9b:c3:b6:52:f2:ec:72:e6:bc:c7:a7:ea:
e3:34:c1:c8:a2:00:f4:9a:88:6d:25:83:1d:f4:a6:
ed:27:97:41:f1:b7:28:ea:ad:08:6c:51:ac:78:ef:
d9:ab:3e:ed:d8:9a:fd:9b:a0:2f:ce:0e:74:5a:69:
9e:58:77:9b:98:60:e2:27:94:f5:8f:c7:1c:40:66:
15:b8:64:8c:45:e1:c3:5e:9d:63:e9:ce:8c:4f:98:
1b:1f:c5:70:0a:2d:8d:c0:fb:cf:35:16:22:7f:91:
7a:6a:92:14:de:e9:21:9c:9b:df:03:2b:d8:09:9e:
b5:92:cb:e8:d4:45:92:07:52:4f:10:80:8e:a7:ed:
4f:a1:e2:29:52:37:84:bd:1e:67:8d:3d:88:d2:58:
d6:7f:ff:b2:8f:4d:0f:50:43:8a:70:53:db:3f:d8:
91:37:b9:8b:6b:ea:80:48:49:2f:00:65:86:0c:16:
4e:97:0c:5b:d5:10:e2:59:77:7e:ea:fc:84:9a:13:
b0:c0:4d:a3:33:b5:f0:ad:56:40:4a:7f:7a:95:33:
6d:1b:3f:5f:d4:70:ad:f6:19:fe:d4:af:cf:8b:52:
52:98:e1:b2:82:97:d4:c4:9b:2b:73:45:57:a1:25:
ac:e7:14:82:7b:d2:3f:74:ac:d9:cd:a3:cd:a4:1e:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0E:57:81:87:FA:A8:B2:7A:C3:64:19:A0:30:D1:56:8F:E4:48:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E24B54EF65D11EFA1D50C5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.146.0-154.196.151.255
154.196.163.0-154.196.164.255
154.196.166.0-154.196.169.255
154.211.48.0/23
154.211.51.0-154.211.52.255
154.211.57.0-154.211.58.255
154.211.61.0/24
154.218.49.0/24
Signature Algorithm: sha256WithRSAEncryption
50:3f:49:15:6a:9f:9e:62:9e:60:93:8e:ae:d6:3f:fe:e1:aa:
35:e2:ad:f7:8d:4e:5f:96:94:ef:68:49:23:54:8a:ea:b5:6d:
fb:2b:c7:c3:12:af:3b:43:9c:bf:49:1b:5c:e2:e3:72:68:b8:
3c:f8:62:83:7f:9e:d1:5f:66:8a:9c:ac:f4:b1:d5:55:bd:a9:
40:2b:3b:a1:4b:a6:0f:f8:33:f4:72:9e:a8:4e:b7:eb:79:e5:
2e:99:f8:96:6b:24:59:0d:c7:3b:4c:fe:e9:9e:6b:22:b0:f4:
a4:a6:41:bd:f7:d6:ab:8f:3e:4f:e4:19:9b:b9:20:60:c7:4a:
a6:e4:0c:c6:d6:38:9b:82:ff:8f:9e:38:56:7a:19:b2:72:7c:
e5:39:ab:d0:ef:5f:0c:0d:99:30:3b:a7:cf:2c:6a:12:f7:b8:
9c:85:ca:84:38:a8:1d:b6:33:8e:f5:93:e9:8b:42:39:58:fa:
c4:de:1a:c0:39:18:60:c1:e7:7a:31:6f:99:f8:b0:d4:59:68:
91:43:b4:e9:10:38:f1:f1:ac:91:f9:6d:54:f4:04:7e:b1:6d:
df:05:d4:f0:f7:ca:2c:4d:1d:e0:6b:0d:aa:61:5a:a2:f0:22:
30:f0:8c:d2:a3:0a:b1:96:9e:15:e9:f7:1e:02:f8:50:1a:45:
fe:9a:fa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:40 2025 by rpki-client