Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F1A6766F65A11EF95DF044B762E951A.roa
File: 3F1A6766F65A11EF95DF044B762E951A.roa (raw, json)
Hash identifier: XRbreTegXzUM91b6IQ41qn+btypzCPVxiPhJ2vv+ibE=
Subject key identifier: BD:FD:AF:03:25:80:CA:01:7C:F3:56:6B:9D:CD:C1:A1:09:19:05:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F1A6766F65A11EF95DF044B762E951A.roa
Signing time: Sat 01 Mar 2025 05:01:34 +0000
ROA not before: Sat 01 Mar 2025 05:01:29 +0000
ROA not after: Sat 19 Feb 2028 05:01:29 +0000
asID: 17561
IP address blocks: 154.193.193.0/24 maxlen: 24
154.193.194.0/24 maxlen: 24
154.193.195.0/24 maxlen: 24
154.193.196.0/24 maxlen: 24
154.193.197.0/24 maxlen: 24
154.193.198.0/24 maxlen: 24
154.193.199.0/24 maxlen: 24
154.193.200.0/24 maxlen: 24
154.193.201.0/24 maxlen: 24
154.193.202.0/24 maxlen: 24
154.193.203.0/24 maxlen: 24
154.193.204.0/24 maxlen: 24
154.193.205.0/24 maxlen: 24
154.193.206.0/24 maxlen: 24
154.193.207.0/24 maxlen: 24
154.193.208.0/24 maxlen: 24
154.193.209.0/24 maxlen: 24
154.193.210.0/24 maxlen: 24
154.193.211.0/24 maxlen: 24
154.193.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93464 (0x16d18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 05:01:29 2025 GMT
Not After : Feb 19 05:01:29 2028 GMT
Subject: CN=67c294ae-cd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:89:f9:dd:30:8b:05:7f:0c:db:01:cc:66:c5:
a8:55:33:f5:e7:84:fc:42:0f:0a:56:46:ad:1f:c1:
f5:79:7c:0b:b4:08:82:00:73:e6:0b:32:8c:54:de:
2b:bd:2b:74:90:0a:2d:38:4b:5f:ed:30:9f:a3:c6:
ec:e4:72:8a:cc:ae:f9:70:77:da:2b:d9:1a:7a:84:
b1:06:a6:7f:3d:3f:a8:a3:32:4a:a4:f3:27:43:3c:
79:72:fc:d0:cd:bc:cb:cd:7e:88:83:05:3e:79:e8:
57:43:c1:35:df:c9:cd:6c:59:71:30:42:c0:d6:36:
a9:65:b6:d5:df:86:e1:18:1d:dc:e6:70:dd:06:7e:
fa:51:44:13:26:85:16:ec:f7:32:0a:3b:3d:d5:93:
8e:94:75:eb:b5:5b:bc:b2:01:58:28:66:09:aa:62:
aa:bb:0d:3e:91:f4:7d:72:23:06:3e:97:2c:55:53:
90:d9:13:c5:a3:3f:a0:43:e7:5c:19:d3:26:32:df:
60:c3:1c:c1:58:70:2a:83:c6:c6:fe:3e:62:59:20:
4e:de:e6:50:91:a8:a0:7f:c8:64:da:89:a9:c5:41:
bb:bc:18:a9:ea:56:0f:29:48:92:89:2f:b0:07:9f:
33:e1:15:7e:62:70:a2:25:85:d0:44:2b:e5:b4:10:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FD:AF:03:25:80:CA:01:7C:F3:56:6B:9D:CD:C1:A1:09:19:05:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F1A6766F65A11EF95DF044B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.193.0-154.193.212.255
Signature Algorithm: sha256WithRSAEncryption
c1:c6:b9:9a:ca:84:67:60:09:56:8d:0c:f0:f6:b1:af:f4:b0:
b7:69:6e:aa:d9:aa:f9:95:03:77:81:06:2d:af:d4:d3:96:da:
8b:2d:eb:b3:9d:55:dd:81:e3:92:39:b1:d2:b6:ec:b6:32:2b:
79:dc:d0:cd:e3:ec:e8:18:04:b5:35:af:62:2f:e7:b1:09:29:
92:fd:38:12:ba:99:9d:e8:c7:90:25:2d:5a:e6:b2:d5:25:0e:
b5:29:49:3b:e9:af:ba:da:9c:31:95:7a:61:bc:f7:ac:e6:5d:
fb:2e:b6:8a:d6:4c:b7:36:63:51:b9:70:3e:ac:e1:1a:5e:92:
45:31:a4:c9:82:57:1c:da:0f:52:ec:b6:85:07:64:7a:e3:b9:
ce:17:87:de:a4:5a:00:b0:37:5c:13:c4:cd:4f:fe:d3:79:b8:
5d:ba:00:0a:42:85:73:d2:a8:86:2a:46:5b:a5:bc:6a:d2:02:
e5:f7:6c:aa:d0:01:86:57:3a:7c:01:e4:73:63:01:25:a8:82:
c2:6b:36:c4:22:5a:9d:7b:e3:93:5d:54:fd:c8:df:00:52:45:
38:9d:8a:7b:c5:8f:48:0b:17:1c:a5:14:61:dc:d0:6e:9d:9f:
94:0b:88:b5:cd:28:51:b7:af:1b:ef:be:a7:0e:ad:fd:be:e0:
fd:c9:b3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:33 2025 by rpki-client