Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E79EC70042011F096F2715D762E951A.roa
File: 5E79EC70042011F096F2715D762E951A.roa (raw, json)
Hash identifier: S+fGo33oy6dgs7xGdcdEQsgMSIx0g87HVAh+T4df/PQ=
Subject key identifier: 78:84:C7:FD:E3:5F:6F:50:89:BF:A4:E3:74:F9:05:04:AE:51:88:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E79EC70042011F096F2715D762E951A.roa
Signing time: Tue 18 Mar 2025 17:42:32 +0000
ROA not before: Tue 18 Mar 2025 17:42:28 +0000
ROA not after: Mon 05 May 2025 17:42:28 +0000
asID: 202656
IP address blocks: 154.219.224.0/24 maxlen: 24
154.219.225.0/24 maxlen: 24
154.219.226.0/24 maxlen: 24
154.219.227.0/24 maxlen: 24
154.219.228.0/24 maxlen: 24
154.219.229.0/24 maxlen: 24
154.219.231.0/24 maxlen: 24
154.219.233.0/24 maxlen: 24
154.219.234.0/24 maxlen: 24
154.219.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95454 (0x174de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 17:42:28 2025 GMT
Not After : May 5 17:42:28 2025 GMT
Subject: CN=67d9b088-aee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:3b:c3:88:74:e5:09:5e:01:f9:70:50:94:
88:aa:ae:8a:cf:8f:88:a7:b6:e1:3d:d6:5e:2d:18:
ef:d5:27:b3:5d:82:cf:1a:d8:56:7a:4f:fe:f4:c8:
55:ae:87:c1:b5:04:c6:61:d5:fe:fb:5a:20:35:80:
2a:78:49:9f:6b:6f:2c:ec:ac:5e:47:71:ad:ba:94:
6e:ed:d6:dc:6e:19:75:08:31:24:e1:b3:d4:0d:19:
a2:b8:4c:00:fd:8b:d7:8f:c7:61:fa:4b:b5:c1:43:
fa:83:5d:37:bc:bc:e4:49:98:77:d5:44:45:98:a2:
d4:57:50:31:8d:9b:1d:f7:13:79:d4:9f:ae:91:79:
7d:ac:96:fd:86:e1:3e:87:60:d4:60:d7:a9:cd:c0:
db:ae:45:5b:9b:54:2c:04:29:0d:38:86:2d:95:f5:
fb:ac:86:38:a9:24:2d:14:c3:9e:3b:3f:bd:54:87:
43:7b:78:9f:35:cb:14:08:4f:ea:7c:8b:44:ad:bb:
95:48:40:75:ff:f6:2a:a4:15:39:a2:ee:93:a4:39:
50:2a:fe:7e:79:77:e8:f5:e3:4d:0c:87:46:b3:9e:
91:3a:d0:6c:29:8b:d6:b7:96:08:cc:eb:67:9b:25:
c4:75:21:5e:62:da:b8:04:d9:93:a0:18:78:c9:7a:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:84:C7:FD:E3:5F:6F:50:89:BF:A4:E3:74:F9:05:04:AE:51:88:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E79EC70042011F096F2715D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.224.0-154.219.229.255
154.219.231.0/24
154.219.233.0-154.219.235.255
Signature Algorithm: sha256WithRSAEncryption
d2:51:93:86:1b:0a:e1:b2:e3:01:9a:fc:65:99:7c:17:8f:c9:
d2:0c:48:d4:0e:cd:2c:0f:5a:63:73:4b:bc:b4:3f:6e:c2:ac:
f8:5f:2f:01:25:59:32:cc:5e:9b:45:71:c1:a9:11:04:c9:14:
a1:47:8f:fe:34:c1:63:10:30:9f:c4:fc:b6:9a:4d:21:67:4a:
3e:f7:0b:b7:60:db:28:49:6d:db:98:9f:4a:b0:9d:a6:d5:27:
d6:10:55:82:ae:5e:e5:9f:bc:13:d1:b6:5b:89:c4:f8:72:93:
c1:ba:13:1d:c6:1f:1a:a9:20:12:ee:29:1e:fc:f2:ec:d3:11:
59:7c:17:f5:6b:d0:b8:28:48:d8:fc:ea:70:75:b7:3e:4b:f4:
48:3a:db:7c:a0:58:5f:b2:dd:dd:2c:ce:fb:0f:db:16:b0:5a:
bf:73:f6:6a:ab:ba:76:a4:40:fe:db:87:4c:29:ab:02:d5:3a:
bd:67:e7:46:68:d5:ca:82:4c:71:ee:b1:08:de:99:26:11:61:
eb:97:53:fe:78:bb:6a:e3:8d:97:4d:44:99:50:01:09:0c:d1:
f9:76:d8:d2:6e:e3:91:82:23:40:85:ee:45:d3:e3:ec:42:e7:
51:9f:34:18:9f:a9:33:0e:4d:48:ab:fb:d7:61:0a:81:29:39:
fd:95:f9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:07 2025 by rpki-client