Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FBE2A62F65711EF8D1195B4762E951A.roa
File: 2FBE2A62F65711EF8D1195B4762E951A.roa (raw, json)
Hash identifier: oEj2r05IuQSE7oOmxOk+aVI+RG+8XSONjLezA59S+wg=
Subject key identifier: D5:80:3D:B1:02:15:28:40:60:4C:6D:14:A2:65:92:F1:DD:CC:37:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FBE2A62F65711EF8D1195B4762E951A.roa
Signing time: Sat 01 Mar 2025 04:39:40 +0000
ROA not before: Sat 01 Mar 2025 04:39:35 +0000
ROA not after: Fri 20 Feb 2026 04:39:35 +0000
asID: 984
IP address blocks: 154.223.126.0/24 maxlen: 24
154.223.127.0/24 maxlen: 24
154.223.194.0/24 maxlen: 24
154.223.195.0/24 maxlen: 24
154.223.196.0/24 maxlen: 24
154.223.197.0/24 maxlen: 24
154.223.224.0/24 maxlen: 24
154.223.225.0/24 maxlen: 24
154.223.227.0/24 maxlen: 24
154.223.233.0/24 maxlen: 24
154.223.234.0/24 maxlen: 24
154.223.236.0/24 maxlen: 24
154.223.237.0/24 maxlen: 24
154.223.240.0/24 maxlen: 24
154.223.242.0/24 maxlen: 24
154.223.243.0/24 maxlen: 24
154.223.246.0/24 maxlen: 24
154.223.248.0/24 maxlen: 24
154.223.250.0/24 maxlen: 24
154.223.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93454 (0x16d0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 04:39:35 2025 GMT
Not After : Feb 20 04:39:35 2026 GMT
Subject: CN=67c28f8b-1d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5c:a9:ff:d9:dd:4f:12:9d:a5:36:d2:95:bf:
49:e4:2d:a0:ed:5c:51:2e:14:d5:fa:ea:59:5f:02:
c5:9d:98:3e:6f:58:dd:27:9b:84:f9:78:11:26:04:
75:81:a9:0e:50:b6:f9:55:2a:88:b3:68:15:ba:48:
74:ac:7c:13:1a:83:c9:c6:c8:13:d0:31:44:36:fa:
e4:97:c0:b6:f9:d8:2a:4e:3f:d6:e8:e4:01:13:fc:
d8:e3:63:cb:39:c2:18:54:a1:cc:f8:ad:63:5c:29:
56:db:a6:e5:9d:11:53:03:32:e1:e3:54:a8:7d:f4:
86:58:38:d9:2e:20:b5:94:00:da:7a:b5:85:af:b5:
0b:a7:da:b8:4f:0f:5a:3d:4b:0d:f7:0a:cc:17:f1:
c3:e1:5d:6a:1b:35:d7:cd:3c:b8:74:c2:05:0d:32:
51:42:cb:cc:ab:39:19:67:65:13:ec:fe:79:8e:23:
d1:8d:6c:db:19:17:fd:cc:f3:79:d6:d0:44:cb:b3:
25:a5:72:87:e7:14:2f:91:4b:a3:0b:0d:49:41:8c:
3f:31:6f:73:69:58:fb:02:9c:8a:6a:ae:56:52:54:
35:f2:ed:8f:e3:e0:f7:e7:09:cb:0d:60:f3:a8:3a:
86:4b:ae:5e:0b:08:4b:e0:fb:fe:5f:92:26:47:28:
c4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:80:3D:B1:02:15:28:40:60:4C:6D:14:A2:65:92:F1:DD:CC:37:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FBE2A62F65711EF8D1195B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.126.0/23
154.223.194.0-154.223.197.255
154.223.224.0/23
154.223.227.0/24
154.223.233.0-154.223.234.255
154.223.236.0/23
154.223.240.0/24
154.223.242.0/23
154.223.246.0/24
154.223.248.0/24
154.223.250.0/24
154.223.252.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ca:06:0b:b7:62:46:03:6a:7e:90:10:44:bf:29:5c:15:b2:
7b:a3:ad:16:fa:45:37:55:cb:37:20:f9:f4:75:b8:b9:b4:77:
4b:2c:3e:c7:32:41:e6:a4:16:67:d0:53:63:80:e4:2e:a5:80:
b6:80:8e:f0:77:75:d2:5b:8c:b7:ed:06:1a:2c:cd:ef:64:4b:
1b:40:26:39:80:99:e1:fe:4e:16:2e:37:09:02:37:a4:0e:85:
32:1a:68:52:f5:f8:8d:67:83:5d:b0:7f:64:25:1f:c9:91:b3:
cc:ec:06:53:8e:66:d7:4d:3c:11:0c:7a:3e:4a:02:2a:f3:6a:
78:0c:86:00:c4:ee:eb:ac:74:b4:5c:5f:89:39:19:63:c2:de:
97:6a:bc:b5:3c:0b:53:00:f9:9e:f1:a6:18:f3:83:28:60:aa:
40:11:f0:8c:df:91:06:54:76:cb:16:19:45:c6:82:33:a4:04:
81:a8:66:9e:f2:91:27:29:1d:76:12:06:cd:fd:77:0d:d9:d3:
06:ac:92:50:42:b8:e5:5f:90:1b:bb:45:01:16:76:6c:99:eb:
d6:f2:ed:08:bf:61:90:e9:16:4c:fa:04:ea:5d:73:95:b0:e8:
07:e3:9f:8b:f2:93:c0:7f:74:68:36:03:5c:1c:3e:3d:39:66:
ce:6f:96:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:49 2025 by rpki-client