Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F60B152095811F0B8CBC150762E951A.roa
File: 2F60B152095811F0B8CBC150762E951A.roa (raw, json)
Hash identifier: 2v56UnucqNVz1cUq/0SYOsYza/q4HFb1dd1rwjEMwVE=
Subject key identifier: 96:80:A9:D0:55:14:10:17:05:22:03:DA:EB:1C:C1:B4:A9:FC:69:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017605
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F60B152095811F0B8CBC150762E951A.roa
Signing time: Tue 25 Mar 2025 09:04:40 +0000
ROA not before: Tue 25 Mar 2025 09:04:37 +0000
ROA not after: Thu 15 May 2025 09:04:37 +0000
asID: 63139
IP address blocks: 154.203.171.0/24 maxlen: 24
154.203.173.0/24 maxlen: 24
154.203.174.0/24 maxlen: 24
154.203.175.0/24 maxlen: 24
154.203.176.0/24 maxlen: 24
154.203.177.0/24 maxlen: 24
154.203.180.0/24 maxlen: 24
154.203.181.0/24 maxlen: 24
154.203.182.0/24 maxlen: 24
154.203.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95749 (0x17605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 09:04:37 2025 GMT
Not After : May 15 09:04:37 2025 GMT
Subject: CN=67e271a8-9239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9b:af:1b:96:00:ea:1d:61:26:86:4c:e9:3f:
ab:85:bf:a5:6e:62:8d:76:e0:ae:cd:d5:f0:83:60:
17:fa:c8:e0:88:1b:49:8e:75:b7:18:fa:65:bc:d8:
92:a3:87:41:41:67:5c:76:f5:1e:7e:a1:6f:84:c1:
3f:93:7f:13:86:b5:a0:a0:7d:5c:e1:bf:80:38:04:
63:ab:cb:61:96:b1:cf:56:3d:72:ff:90:7f:32:f3:
24:ef:88:dc:b7:d4:07:43:ff:40:df:fe:d9:ed:df:
d4:37:56:ac:50:b6:6e:5b:a3:61:a3:d4:12:da:63:
e4:67:f0:eb:59:d0:1d:0f:8c:55:ce:d3:40:75:31:
a1:c0:df:88:99:23:d3:a8:cd:e0:bd:17:49:f5:98:
d5:38:43:94:2a:9a:57:2e:91:1b:3b:e4:bb:d6:2e:
69:91:5f:8e:fd:fc:98:05:3c:e4:ba:fa:36:0b:7d:
21:7a:10:ae:0a:49:81:12:0f:9d:ff:9f:5b:bf:c7:
06:da:e0:5a:97:b4:1c:86:d2:46:1c:42:cb:71:43:
00:59:4b:a6:46:3c:57:e1:38:06:f4:16:b8:cc:6e:
1f:3c:18:88:a0:a5:72:95:37:5e:33:b8:8b:cf:c4:
cc:70:65:2f:3a:76:77:af:a7:20:94:ab:c6:53:eb:
14:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:80:A9:D0:55:14:10:17:05:22:03:DA:EB:1C:C1:B4:A9:FC:69:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F60B152095811F0B8CBC150762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.171.0/24
154.203.173.0-154.203.177.255
154.203.180.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:f4:ac:71:fd:63:ba:92:06:e0:ab:a5:07:eb:00:14:35:b5:
ac:77:12:80:51:2d:ba:ce:f6:81:f2:41:53:29:76:a1:36:c3:
dd:2f:fe:ba:2c:25:9e:bb:cf:f1:06:ba:77:f8:fc:86:3b:7e:
5b:57:31:34:30:46:35:a1:d3:80:31:db:86:a8:d1:5f:74:2d:
94:8a:9c:75:ec:5a:e0:49:ab:46:13:85:11:91:e8:43:48:5f:
aa:4f:de:62:35:e7:7f:60:25:d0:cf:0b:fc:0c:61:d6:9c:16:
81:c0:70:4f:71:7b:0c:28:67:66:44:65:9d:3c:52:c1:fa:ff:
85:c8:a1:27:0d:a8:e8:38:79:cb:8f:d1:8b:93:12:e2:6c:53:
1f:02:da:1e:5b:2d:7c:01:cd:95:f9:df:d8:13:5d:4d:9f:78:
cf:6c:13:24:86:2b:64:29:80:d1:f1:8b:05:e9:1c:38:ab:40:
90:96:79:9d:b2:c0:f0:06:2b:fc:f1:a4:69:f9:41:44:a1:07:
e7:c8:a7:6d:4a:16:c9:49:88:08:70:3e:19:14:0f:01:00:f5:
ba:b7:de:1b:1b:f4:55:d2:a8:1d:3a:5d:de:8c:4b:81:3f:c9:
6f:c1:6b:5c:a9:94:d3:dd:ae:67:11:4a:03:3f:9d:69:04:fe:
60:2c:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:07 2025 by rpki-client