Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51EC9D6A0A2C11F08A7FED5F762E951A.roa
File: 51EC9D6A0A2C11F08A7FED5F762E951A.roa (raw, json)
Hash identifier: wgKbKYK60opyWOHFGngWK/x/Xo4on666x79y2IAEbk8=
Subject key identifier: C8:A8:3A:50:2E:43:6A:E9:DA:79:3B:03:EA:6F:A1:B0:07:84:B9:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017675
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51EC9D6A0A2C11F08A7FED5F762E951A.roa
Signing time: Wed 26 Mar 2025 10:23:12 +0000
ROA not before: Wed 26 Mar 2025 10:23:08 +0000
ROA not after: Sat 17 May 2025 10:23:08 +0000
asID: 138915
IP address blocks: 154.206.64.0/24 maxlen: 24
154.206.65.0/24 maxlen: 24
154.206.66.0/24 maxlen: 24
154.206.98.0/23 maxlen: 24
154.206.102.0/23 maxlen: 24
154.206.104.0/23 maxlen: 24
154.206.106.0/24 maxlen: 24
154.206.107.0/24 maxlen: 24
154.206.108.0/23 maxlen: 24
154.206.110.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95861 (0x17675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 10:23:08 2025 GMT
Not After : May 17 10:23:08 2025 GMT
Subject: CN=67e3d590-14ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:c8:bd:2f:51:f3:aa:66:95:23:68:09:93:
03:cb:10:37:ec:31:f2:6d:9a:8f:10:53:81:54:48:
11:7e:96:84:b5:91:ce:85:58:2f:e6:29:bb:fd:0d:
49:79:82:75:df:40:18:b6:b9:4a:1c:f8:ec:b1:86:
06:a7:d0:d4:74:ce:d4:40:5c:83:74:73:da:d0:86:
89:ef:cf:f0:42:ea:0d:32:ee:06:58:17:8e:3e:19:
40:81:d1:29:d7:39:a5:b2:0c:fa:56:92:ac:4a:6f:
df:cf:49:42:7d:91:ed:e4:b2:5c:6d:0a:5a:56:58:
94:86:5e:5e:8e:9e:6d:be:6c:7f:03:9b:8f:6b:bd:
05:d1:81:3a:1e:5c:07:a7:82:c6:ce:c6:5e:30:6e:
36:f7:6b:49:63:76:08:5f:e7:3b:fa:57:dd:95:1d:
7f:89:41:62:9b:cd:6e:46:a7:6e:a7:cb:ff:28:55:
51:94:15:26:5d:30:6b:b6:f1:48:e7:4e:85:b8:9f:
fe:63:fa:57:03:84:03:f1:70:d0:ca:83:87:65:4b:
03:5c:9e:aa:ac:64:75:2a:c4:9e:9f:63:2a:13:fc:
04:7c:9c:52:46:97:19:f2:9b:b3:48:a2:17:85:97:
74:45:b6:8c:59:4a:91:c7:21:79:e0:7e:ef:93:c5:
4e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A8:3A:50:2E:43:6A:E9:DA:79:3B:03:EA:6F:A1:B0:07:84:B9:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51EC9D6A0A2C11F08A7FED5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.64.0-154.206.66.255
154.206.98.0/23
154.206.102.0-154.206.111.255
Signature Algorithm: sha256WithRSAEncryption
88:d0:d4:96:16:5c:f0:cb:17:66:e9:4e:82:05:ba:78:a0:4c:
4d:1d:a5:90:2b:06:26:ef:36:cb:fa:a5:97:49:b0:a5:8f:ea:
97:ee:f2:fe:f8:f0:49:32:75:88:d0:65:f2:1f:ff:4d:ea:44:
cb:9f:e4:96:13:36:5a:fd:91:dd:a8:cc:fe:f3:54:2b:e3:37:
8c:91:be:20:3d:c3:a6:42:be:bf:87:cf:ad:81:12:48:9a:59:
0c:d8:64:1a:cc:76:99:c1:e0:e0:57:d1:09:75:69:a8:d0:d4:
d7:78:5a:b3:de:78:52:33:fd:e0:22:3e:ed:5f:a2:6b:2d:6c:
5f:26:45:00:9d:c6:86:12:fd:6a:de:34:98:29:2e:cd:24:d0:
ef:23:3c:8f:6f:aa:f0:04:32:27:45:fd:17:df:d0:19:1c:49:
3f:89:44:d1:57:68:a4:1e:ee:46:44:80:41:2a:1d:8a:5a:cd:
0e:87:c1:3d:8e:a0:43:e9:77:00:00:68:bd:9f:93:a4:72:48:
a4:63:3a:0f:d2:a9:c0:39:a1:3f:cd:cc:01:b3:c6:64:49:e2:
8d:b3:73:2b:09:52:c6:73:15:42:fc:f4:0e:ee:c8:ac:16:f0:
87:f5:11:21:7f:94:89:d2:43:40:86:3f:f6:67:7c:a9:67:41:
45:2a:bf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:34 2025 by rpki-client