Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AAFBF26F50111EF8CB94386762E951A.roa
File: 5AAFBF26F50111EF8CB94386762E951A.roa (raw, json)
Hash identifier: mW7Jat9dxxiL3T8h+4FZ9bq+AjY0fcStOLFAoE7qwHk=
Subject key identifier: CA:F7:0A:1F:DC:B7:9E:99:74:D4:4E:DF:0C:32:27:4D:BD:8B:EF:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016814
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AAFBF26F50111EF8CB94386762E951A.roa
Signing time: Thu 27 Feb 2025 11:52:44 +0000
ROA not before: Thu 27 Feb 2025 11:52:33 +0000
ROA not after: Sat 19 Feb 2028 11:52:33 +0000
asID: 17561
IP address blocks: 154.81.9.0/24 maxlen: 24
154.81.11.0/24 maxlen: 24
154.81.49.0/24 maxlen: 24
154.81.51.0/24 maxlen: 24
154.81.63.0/24 maxlen: 24
154.84.130.0/24 maxlen: 24
154.90.71.0/24 maxlen: 24
154.90.72.0/24 maxlen: 24
154.90.73.0/24 maxlen: 24
154.90.75.0/24 maxlen: 24
154.90.76.0/24 maxlen: 24
154.90.77.0/24 maxlen: 24
154.90.78.0/24 maxlen: 24
154.90.79.0/24 maxlen: 24
154.90.80.0/24 maxlen: 24
154.90.81.0/24 maxlen: 24
154.90.82.0/24 maxlen: 24
154.90.83.0/24 maxlen: 24
154.93.1.0/24 maxlen: 24
154.93.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92180 (0x16814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 11:52:33 2025 GMT
Not After : Feb 19 11:52:33 2028 GMT
Subject: CN=67c0520c-461d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:1c:78:53:a3:95:57:c0:7d:a1:4c:6e:1d:
97:82:4a:c8:bc:76:3d:d8:3e:a7:da:4e:3c:d0:3d:
c7:b7:8e:09:d4:a7:33:aa:60:71:4e:45:0c:eb:69:
c6:00:27:51:a5:37:9b:c7:d8:4c:73:32:ff:f7:52:
ac:59:34:47:ae:e8:72:14:e7:e2:07:74:b5:18:de:
84:04:da:1d:72:00:96:21:21:56:07:3d:c1:9b:50:
53:6c:9d:73:c3:0b:6c:6d:3a:ad:7c:f6:c2:07:d0:
31:df:0d:85:db:b5:c1:29:76:73:d5:5f:98:6e:07:
dd:38:0d:5d:49:f3:25:ee:8a:85:9c:c2:52:cc:ba:
41:73:00:06:ae:d1:5c:6c:2e:ef:8c:2e:4f:c0:4b:
15:e9:84:23:7e:c2:c8:e7:2b:ee:28:c0:01:72:0f:
70:52:e9:3a:17:35:30:f2:67:27:d2:29:00:fd:bb:
ec:a8:31:81:fb:c3:02:99:cf:56:15:e2:c9:86:5f:
91:8f:6e:29:ee:99:30:67:b7:d1:90:b1:da:96:6e:
f7:d2:6e:ff:66:07:90:57:ee:66:2e:d9:b8:87:dd:
a8:5d:fa:02:a0:50:c0:db:61:31:3f:39:d9:4f:91:
59:87:ce:15:c5:f4:fc:f0:da:0e:41:d2:ce:d1:12:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F7:0A:1F:DC:B7:9E:99:74:D4:4E:DF:0C:32:27:4D:BD:8B:EF:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AAFBF26F50111EF8CB94386762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.9.0/24
154.81.11.0/24
154.81.49.0/24
154.81.51.0/24
154.81.63.0/24
154.84.130.0/24
154.90.71.0-154.90.73.255
154.90.75.0-154.90.83.255
154.93.1.0/24
154.93.3.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:21:61:12:db:b2:25:b6:8b:07:6e:c4:45:7d:37:56:5c:9b:
75:13:a2:fb:24:1c:45:02:64:bb:63:7b:f3:69:b7:3d:7d:93:
e6:84:fd:29:85:c2:57:d0:6c:47:88:49:5b:56:f6:52:f8:bf:
15:a1:8e:43:58:21:d0:bb:e2:42:f7:06:70:7c:9d:f6:00:81:
99:93:80:d5:13:45:54:19:88:ed:ae:b3:74:b1:04:97:2d:85:
b0:8f:cd:20:c5:6b:2b:60:b6:48:8e:25:f4:ac:81:a4:e9:90:
24:fb:b8:87:18:74:1f:ef:1e:fe:a9:6b:85:0a:d3:2c:4b:d7:
96:16:ba:76:45:03:69:d1:e2:15:4e:01:ad:14:97:00:b0:09:
2d:8d:c3:91:64:f9:8f:9a:c5:14:76:93:ea:ef:03:d5:a3:83:
e8:ab:5a:e0:af:ab:8f:36:ee:0d:de:8f:9c:27:9f:82:d6:5c:
89:76:3a:54:58:b2:35:90:b3:9c:0b:18:25:40:59:67:fe:61:
b9:fe:37:3f:5f:0e:a4:0e:82:13:83:59:df:a7:24:ff:42:f2:
07:62:8e:32:c9:e4:58:bd:6b:9b:ab:db:de:78:0e:96:4f:df:
85:d7:a3:16:7d:5a:21:65:51:dc:d0:9f:c6:b9:9b:e1:3d:8b:
f4:1f:a8:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:07 2025 by rpki-client