Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51193C8CF66211EFBED4247F762E951A.roa
File: 51193C8CF66211EFBED4247F762E951A.roa (raw, json)
Hash identifier: A6fMPkzzUwSLWzgJ7PzpG/hEr/FCFRsz/zS84tO/NFk=
Subject key identifier: 2E:FA:70:65:A4:7E:72:EB:B9:91:41:24:F0:1F:6D:87:7C:9E:1F:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51193C8CF66211EFBED4247F762E951A.roa
Signing time: Sat 01 Mar 2025 05:59:20 +0000
ROA not before: Sat 01 Mar 2025 05:59:16 +0000
ROA not after: Wed 01 Mar 2028 05:59:16 +0000
asID: 17561
IP address blocks: 154.197.25.0/24 maxlen: 24
154.197.126.0/24 maxlen: 24
154.197.127.0/24 maxlen: 24
154.199.17.0/24 maxlen: 24
154.211.152.0/24 maxlen: 24
154.211.153.0/24 maxlen: 24
154.211.154.0/24 maxlen: 24
154.211.155.0/24 maxlen: 24
154.211.156.0/24 maxlen: 24
154.211.157.0/24 maxlen: 24
154.211.158.0/24 maxlen: 24
154.211.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93492 (0x16d34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 05:59:16 2025 GMT
Not After : Mar 1 05:59:16 2028 GMT
Subject: CN=67c2a238-071e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:19:ca:33:a7:51:b6:d0:f9:3e:c9:27:89:
5e:0f:37:c7:85:2a:3e:17:df:ab:57:9b:91:11:6f:
ef:6a:e1:17:3b:58:12:80:5d:79:ec:d4:21:9c:b9:
d0:b6:4e:59:85:bc:f4:e7:ed:25:be:28:51:ef:d6:
58:57:3c:f0:9b:c1:80:1e:c9:2e:49:73:b7:4a:b2:
4d:93:7f:76:72:d6:5b:69:87:7f:e5:d1:76:04:9f:
e9:a9:3a:cc:0d:c7:d8:0d:8b:28:9c:50:11:1d:2b:
40:fd:bd:41:ca:c3:43:d5:c5:d5:b4:aa:75:7c:85:
d5:de:72:f4:90:29:c2:8a:16:7d:20:a7:02:ef:6d:
ed:3e:5e:11:56:ef:88:f1:ad:7b:37:b8:71:1f:ad:
fc:22:80:da:fd:93:04:f1:87:65:5e:f6:36:36:81:
2f:ac:91:4d:44:f6:62:c3:0e:f4:cc:41:08:1c:22:
77:ff:6d:8a:01:7a:83:60:dc:1c:02:f8:05:6a:a5:
ae:f7:e9:27:2b:38:bd:26:7f:f4:7b:2f:8a:41:39:
a6:6c:1c:62:75:09:d6:92:8a:0c:f2:cc:4a:56:0a:
c7:8b:5b:c9:17:f3:5c:2b:ae:f1:d9:25:34:77:18:
a1:ce:4d:85:58:61:b0:88:8b:b4:23:ae:5a:0b:2f:
a9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FA:70:65:A4:7E:72:EB:B9:91:41:24:F0:1F:6D:87:7C:9E:1F:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51193C8CF66211EFBED4247F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.25.0/24
154.197.126.0/23
154.199.17.0/24
154.211.152.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:0a:7e:07:2e:e6:7c:44:44:29:db:af:ee:82:63:e1:32:30:
9c:e5:0d:44:c8:8b:3b:c2:11:dd:d9:e1:59:56:cb:ba:1d:ec:
d8:94:18:c3:0f:d1:25:db:32:79:ea:ee:c7:47:83:56:03:f1:
9a:dd:18:1d:a3:9c:22:a2:a7:39:32:d4:24:7b:98:54:b1:a5:
3a:a1:08:75:5a:89:c1:1a:ae:af:86:52:a7:7d:71:5a:c3:82:
53:48:27:fe:b4:c7:f5:95:62:8c:7d:db:15:2b:5c:27:b1:8d:
bb:0f:db:ab:cf:11:74:f9:ea:4a:eb:20:53:37:fb:4e:dd:ec:
11:b5:78:85:5d:3c:e2:99:04:be:16:ec:9b:7c:3b:df:a8:06:
cf:5a:c0:5a:25:69:30:f5:54:6b:dd:aa:31:3d:40:82:c8:d2:
b6:40:b5:c1:c2:73:2b:e2:ff:68:19:bc:42:63:6d:4e:7e:22:
83:37:61:a1:ff:0d:2d:c4:81:d8:0d:f9:68:13:bd:8c:50:8e:
55:58:8c:74:7d:bd:8c:d0:98:14:6e:f4:82:76:12:d5:11:44:
ef:bb:c7:79:72:df:3f:0f:a6:f6:8f:3a:de:c2:a8:6c:9f:58:
27:8c:3f:d7:1a:1e:ef:8b:c7:8c:b0:23:0e:d7:4f:49:a9:c4:
0f:2a:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:58:13 2025 by rpki-client