Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/344E28CCFF2E11EF880D73AB762E951A.roa
File: 344E28CCFF2E11EF880D73AB762E951A.roa (raw, json)
Hash identifier: SFJ87hhuLyG+rz2SA3ljCLqq0pNyW8aYs/UHKxVG3EM=
Subject key identifier: 06:7E:B4:9E:93:15:B6:33:EF:AA:D2:86:8B:C5:A2:7B:40:E3:7E:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/344E28CCFF2E11EF880D73AB762E951A.roa
Signing time: Wed 12 Mar 2025 10:38:58 +0000
ROA not before: Wed 12 Mar 2025 10:38:55 +0000
ROA not after: Thu 24 Apr 2025 10:38:55 +0000
asID: 395886
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95212 (0x173ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 10:38:55 2025 GMT
Not After : Apr 24 10:38:55 2025 GMT
Subject: CN=67d16442-6e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:ae:c3:18:64:70:9d:09:ce:b9:bb:c8:d8:
71:40:6b:85:8c:c1:a9:05:10:82:e0:06:0a:3c:c9:
3f:23:2f:ac:4f:b2:eb:98:60:fd:07:29:42:03:d5:
a7:7e:9f:90:18:31:5a:d3:98:5b:92:30:af:31:a0:
db:e0:fe:c5:5f:dc:67:67:60:89:ff:e9:4d:28:2b:
78:eb:31:da:f5:90:60:67:36:2f:d8:82:9a:5b:89:
60:23:69:86:ad:b6:2b:24:fa:0d:77:14:78:a0:55:
1b:35:92:b9:24:dd:f1:7e:47:51:28:be:6f:c5:c0:
73:4c:be:08:b5:40:a4:50:dd:9f:fa:79:ce:ef:6a:
e7:a7:8a:9b:be:29:87:ad:9e:23:be:be:5a:79:35:
c8:30:49:8e:b6:1f:5c:d2:16:6c:dc:4c:f6:fc:0c:
ac:ba:94:e2:0e:dd:d2:75:5c:db:62:b1:65:08:a8:
1d:77:bb:f7:f3:7b:27:36:7f:26:82:e2:97:f2:f0:
ec:d5:5e:64:72:6b:70:cd:5e:07:7c:22:31:d5:78:
c1:f0:e0:19:46:6b:65:9c:2a:9e:19:b9:7e:f6:50:
f2:e6:b4:c5:c4:95:50:d3:c5:c7:68:50:c1:e6:12:
aa:b6:c1:49:3c:10:53:3e:70:55:6d:7d:6a:cf:87:
cf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7E:B4:9E:93:15:B6:33:EF:AA:D2:86:8B:C5:A2:7B:40:E3:7E:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/344E28CCFF2E11EF880D73AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
23:5d:e3:e1:b1:e8:3a:b7:bd:40:70:68:77:86:08:b9:c3:c6:
0a:4e:57:cd:5e:22:b4:4c:70:ad:b3:57:5d:f5:45:c9:bd:c8:
08:53:0c:da:60:00:c7:02:94:39:ef:bd:10:a7:6e:61:f1:36:
bb:81:f7:8d:31:1c:48:90:f9:77:5b:f8:97:ff:30:e4:3d:e3:
98:93:74:f2:1d:55:9a:e9:25:7a:0a:ba:af:f6:8f:4b:1d:d6:
e1:67:27:db:aa:41:b7:39:2f:67:90:48:99:5d:d0:39:9d:d1:
71:43:c7:f4:3a:b6:aa:a5:6f:9a:8b:96:db:61:a9:6e:04:4b:
36:c6:ed:86:2d:2c:41:aa:2d:d3:e6:16:f6:b9:2a:6c:d4:43:
9b:1e:8a:71:66:58:99:32:42:71:bd:b7:81:60:4b:e2:4b:94:
8e:cc:df:1e:f0:15:c0:3f:38:dc:b2:89:3c:12:9c:70:34:e5:
9d:3e:65:91:ab:d9:ab:dd:89:45:96:ab:b2:56:e7:81:48:e5:
65:d8:4e:be:00:ea:bb:4c:4b:41:3b:95:a3:b9:20:d8:c4:fc:
20:e0:20:09:dd:6d:85:d2:00:37:d0:13:2a:cd:2b:25:90:f7:
50:2c:7e:04:d9:82:f9:06:96:29:76:83:5b:ce:3b:b3:68:aa:
97:bd:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:23 2025 by rpki-client