Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B89FF62F56F11EF9F07C769762E951A.roa
File: 3B89FF62F56F11EF9F07C769762E951A.roa (raw, json)
Hash identifier: 6iHAs2p5UIZv+W8zspYi+JW02i0jkYjy2jOS2wDY9Xk=
Subject key identifier: CF:E9:F2:8F:21:C4:9E:CB:6E:1D:DB:DB:E1:93:1C:8F:E9:33:D7:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B89FF62F56F11EF9F07C769762E951A.roa
Signing time: Fri 28 Feb 2025 00:59:16 +0000
ROA not before: Fri 28 Feb 2025 00:00:12 +0000
ROA not after: Thu 19 Feb 2026 00:00:12 +0000
asID: 984
IP address blocks: 154.193.9.0/24 maxlen: 24
154.193.10.0/24 maxlen: 24
154.193.11.0/24 maxlen: 24
154.193.12.0/24 maxlen: 24
154.193.14.0/24 maxlen: 24
154.193.15.0/24 maxlen: 24
154.193.16.0/24 maxlen: 24
154.193.17.0/24 maxlen: 24
154.193.41.0/24 maxlen: 24
154.193.49.0/24 maxlen: 24
154.193.55.0/24 maxlen: 24
154.193.56.0/24 maxlen: 24
154.193.57.0/24 maxlen: 24
154.193.58.0/24 maxlen: 24
154.193.63.0/24 maxlen: 24
154.193.64.0/24 maxlen: 24
154.193.65.0/24 maxlen: 24
154.193.66.0/24 maxlen: 24
154.193.68.0/24 maxlen: 24
154.193.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92592 (0x169b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 00:00:12 2025 GMT
Not After : Feb 19 00:00:12 2026 GMT
Subject: CN=67c10a64-d384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:9c:c2:c6:47:e1:81:0e:bc:9a:47:51:c8:
16:c8:d7:ac:35:a1:e6:8f:1f:08:4b:be:af:74:04:
bf:06:bd:17:7e:b7:db:3e:10:e3:8d:9f:83:47:59:
c2:0f:ec:0d:52:5b:8c:48:49:dd:4c:c4:a9:e5:b9:
61:83:4f:ef:dd:4d:c0:7b:e3:a8:f1:a9:24:e6:07:
b9:91:7d:cc:32:1f:61:89:6a:65:a3:64:c7:ab:2d:
26:fd:bd:88:2f:f2:4b:2f:76:9d:af:96:86:23:e0:
41:19:20:bb:78:5c:56:eb:97:d9:ac:7b:9a:b6:da:
fd:3f:79:81:18:88:dd:a9:d1:67:12:2c:b7:c9:d8:
95:1c:3c:ff:62:76:1f:88:f7:4f:c4:ef:75:de:c2:
fd:2b:ad:0f:08:be:9b:20:d8:15:92:db:2b:8c:42:
14:b9:2d:d1:5e:1b:d7:8e:07:fb:39:1d:66:33:54:
49:ef:e3:3d:f1:2f:b1:4b:e2:39:f7:aa:c8:68:49:
7f:42:99:4a:45:96:f2:2f:0d:84:ff:56:e7:32:28:
83:eb:f3:ab:bf:05:b3:0f:89:0f:4e:6d:39:1d:71:
bb:ce:36:a2:92:61:a7:d0:a4:89:f4:b9:83:f2:ce:
dd:2f:f8:b4:95:1c:85:9e:86:bb:79:30:90:0d:3b:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E9:F2:8F:21:C4:9E:CB:6E:1D:DB:DB:E1:93:1C:8F:E9:33:D7:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B89FF62F56F11EF9F07C769762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.9.0-154.193.12.255
154.193.14.0-154.193.17.255
154.193.41.0/24
154.193.49.0/24
154.193.55.0-154.193.58.255
154.193.63.0-154.193.66.255
154.193.68.0/24
154.193.95.0/24
Signature Algorithm: sha256WithRSAEncryption
04:14:0b:7c:6a:90:07:ba:9b:9d:14:8a:0e:e7:d9:19:99:6c:
00:3d:ac:ab:4b:43:00:6f:ce:1f:5e:80:71:ae:21:c8:cf:26:
f6:f6:08:37:e8:ec:b7:8b:ec:87:49:a3:02:af:af:8f:cc:14:
70:4f:a7:23:78:14:a0:3c:9d:c7:c2:ee:bf:cb:8b:0d:4b:6a:
2b:b0:f2:bb:d5:3e:5b:3f:63:7b:da:e2:cb:fd:d9:f1:c4:67:
ec:f3:c9:b7:ab:7b:df:52:6f:ad:79:b3:c6:61:d4:9c:85:41:
40:3a:ae:f1:62:eb:e7:c8:6e:1b:f7:c9:83:a3:6a:03:76:d2:
a8:ce:34:13:08:28:58:2a:87:4c:eb:2d:3a:91:81:f1:76:81:
63:e9:ea:0d:01:81:08:93:59:1b:0a:7e:88:aa:6d:b8:02:15:
14:f5:49:0c:66:a8:3a:b0:d0:f4:da:f2:c2:16:e3:7e:d5:50:
a5:70:76:29:b7:95:4c:14:c4:2a:21:7b:98:bc:ca:96:64:0a:
89:24:98:51:8d:86:a0:67:1f:f0:a6:5d:cd:99:70:1f:18:0b:
ac:87:b2:37:9a:9b:11:c7:4c:9e:4a:36:26:c2:8e:11:a5:77:
62:1b:ea:e0:7f:f9:72:5b:17:c8:7e:cc:09:a4:ed:d3:f5:56:
fe:e7:16:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:44:25 2025 by rpki-client