Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF705F4040711F094A4F343762E951A.roa
File: 5CF705F4040711F094A4F343762E951A.roa (raw, json)
Hash identifier: 5MZmmm8m8dA9oVGf+mQuF/4xqzN9P1CmKYncHFLaZ7g=
Subject key identifier: E8:2C:F5:72:37:51:5B:47:B4:EA:3F:BD:DA:C6:8E:F2:28:BD:4C:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF705F4040711F094A4F343762E951A.roa
Signing time: Tue 18 Mar 2025 14:43:32 +0000
ROA not before: Tue 18 Mar 2025 14:43:28 +0000
ROA not after: Mon 05 May 2025 14:43:28 +0000
asID: 49505
IP address blocks: 154.209.209.0/24 maxlen: 24
154.209.211.0/24 maxlen: 24
154.209.212.0/24 maxlen: 24
154.209.213.0/24 maxlen: 24
154.209.215.0/24 maxlen: 24
154.209.216.0/24 maxlen: 24
154.209.217.0/24 maxlen: 24
154.209.218.0/24 maxlen: 24
154.212.30.0/24 maxlen: 24
154.213.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95402 (0x174aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 14:43:28 2025 GMT
Not After : May 5 14:43:28 2025 GMT
Subject: CN=67d98694-8535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:47:40:18:06:66:fc:9f:c4:3d:99:82:82:1b:
04:bd:d4:10:63:14:84:84:a0:1b:f1:50:fb:c2:5e:
db:af:0a:a4:fa:13:ad:98:e1:73:59:92:b0:58:7e:
d7:6b:af:eb:31:a5:55:e6:f8:c6:b5:21:a9:cb:9d:
5f:5f:03:25:ee:1f:e6:84:40:56:0d:55:93:ad:42:
df:09:d2:75:3f:c2:af:81:a4:ea:0d:d9:8c:58:6c:
29:90:91:97:9e:79:d6:b4:d6:dc:a5:a3:4a:dc:32:
3b:7a:59:a1:2d:7b:6c:15:fc:e9:f9:c1:40:53:20:
07:fa:63:cc:78:0e:62:59:c8:6c:cc:db:d2:0d:49:
2d:aa:c4:12:4b:0d:57:f4:a8:05:3a:be:a9:93:e9:
e6:cd:e5:a6:40:ce:ef:d1:7f:75:4d:11:ba:01:df:
a0:d4:24:5c:36:3d:02:3f:41:cb:43:38:0b:38:23:
d2:03:87:f7:c9:7e:b3:65:c3:5d:2a:88:1e:b8:2a:
06:58:07:ab:24:5f:25:59:98:cf:56:11:29:51:9a:
b9:dd:52:64:0f:7f:14:b7:22:7d:9c:3e:a1:54:f4:
2a:7b:42:d3:03:01:a5:6c:e4:d4:ca:fa:e4:80:23:
73:2f:c7:30:57:c3:94:ff:49:9b:1c:5e:b2:e1:fc:
9e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2C:F5:72:37:51:5B:47:B4:EA:3F:BD:DA:C6:8E:F2:28:BD:4C:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF705F4040711F094A4F343762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.209.0/24
154.209.211.0-154.209.213.255
154.209.215.0-154.209.218.255
154.212.30.0/24
154.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:30:3b:58:a0:af:b6:b4:ef:43:06:d8:bf:f2:3c:38:75:1f:
bd:07:c8:e4:be:71:81:cf:83:90:68:b4:be:9b:71:7a:5d:a9:
d8:a3:5e:bc:49:50:5f:55:15:e9:4b:b8:69:62:c9:9d:35:a2:
04:41:3d:17:19:77:aa:43:b0:55:e5:ad:68:40:16:4c:ed:00:
99:90:40:2c:4f:c6:2c:55:f6:bb:f3:04:44:d2:ca:b6:26:bc:
89:33:dd:17:3a:45:40:9c:9d:4d:37:6e:de:17:2a:0d:4b:56:
6d:d7:d1:49:f6:bc:21:66:cb:07:48:8d:cc:33:86:c7:74:71:
39:df:ea:21:47:40:39:a8:07:34:2f:fe:6c:c2:7a:f3:45:3d:
73:cc:e2:ed:af:07:67:b4:cd:bb:7b:d4:49:45:00:b4:d7:9e:
5f:e7:a9:12:51:ef:ba:26:2e:c9:c3:94:4d:e8:85:48:72:c4:
c8:64:89:e9:fe:b9:7e:2e:0c:eb:db:57:66:cd:3b:e7:1e:fc:
78:51:65:06:52:74:1b:8d:6a:9e:89:b7:83:78:0a:2b:68:a7:
8e:44:a3:a1:6d:1c:e8:14:ca:00:5e:53:24:d5:69:99:21:96:
aa:e8:4b:12:b4:97:90:03:f7:6c:b3:06:3b:0f:41:32:ff:4c:
4c:03:73:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:39 2025 by rpki-client