Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61F8241EF80111EFA1EFAF7C762E951A.roa
File: 61F8241EF80111EFA1EFAF7C762E951A.roa (raw, json)
Hash identifier: DEubYQLVzGELLmG6Pea1+A6aGL5iq46COi8BU8fIiKc=
Subject key identifier: 6D:15:F2:59:3F:DA:6D:FC:4A:5E:A0:BA:F2:E8:15:F7:DB:D2:CD:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016F6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61F8241EF80111EFA1EFAF7C762E951A.roa
Signing time: Mon 03 Mar 2025 07:30:29 +0000
ROA not before: Mon 03 Mar 2025 07:30:25 +0000
ROA not after: Sat 31 May 2025 07:30:25 +0000
asID: 984
IP address blocks: 154.193.0.0/16 maxlen: 24
154.194.192.0/18 maxlen: 24
154.196.128.0/17 maxlen: 24
154.199.0.0/16 maxlen: 24
154.200.0.0/16 maxlen: 24
154.202.128.0/17 maxlen: 24
154.211.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94062 (0x16f6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 07:30:25 2025 GMT
Not After : May 31 07:30:25 2025 GMT
Subject: CN=67c55a95-71fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:5a:29:27:b4:92:6e:28:8f:d1:6b:84:9a:
19:6b:14:a1:ca:30:59:f5:ae:bc:ae:61:b4:69:ea:
d8:80:5b:8f:e0:cb:a1:0f:e8:df:48:be:fd:4a:e4:
a2:5b:a4:e4:a8:05:2e:b8:29:cb:1d:1f:48:59:d0:
93:00:17:1a:26:e6:f7:42:ac:dc:72:86:5e:7c:db:
30:ed:e1:9b:69:c9:f4:15:92:c7:ce:57:44:2f:4b:
0e:86:df:1b:af:2e:70:de:f4:b1:3c:7f:d2:4f:40:
82:e9:a3:21:10:86:21:6e:c6:61:4e:06:e0:3d:a4:
06:6a:6a:02:c4:34:7d:57:d9:ec:04:f6:08:2e:cd:
53:12:82:4e:a3:82:be:7c:4d:85:81:c9:32:a7:bf:
ce:b8:db:99:ac:2b:47:a1:c8:44:ac:2d:a5:41:c7:
87:b3:23:a2:67:22:c1:23:72:c1:50:7a:e9:2b:1d:
de:a6:4d:7e:71:15:c3:c5:4e:61:f7:c9:c7:3c:b4:
e2:37:33:9e:59:47:74:0c:82:72:61:f9:26:8f:8f:
cf:f7:90:e5:83:a9:03:8a:6f:0d:cb:1e:99:15:15:
ad:8e:d9:7f:46:2d:4d:1f:95:22:4a:1f:17:34:c7:
03:76:06:7e:1e:17:f8:22:5c:83:6e:c9:f2:a6:57:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:15:F2:59:3F:DA:6D:FC:4A:5E:A0:BA:F2:E8:15:F7:DB:D2:CD:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61F8241EF80111EFA1EFAF7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.0.0/16
154.194.192.0/18
154.196.128.0/17
154.199.0.0-154.200.255.255
154.202.128.0/17
154.211.128.0/17
Signature Algorithm: sha256WithRSAEncryption
75:23:86:96:af:aa:02:62:71:42:ed:88:e2:74:5a:10:79:80:
48:71:23:e7:00:2c:e8:87:71:f4:50:66:74:b9:81:c7:68:31:
af:48:5a:81:da:82:d2:63:45:3f:3a:c5:07:d6:d4:67:9d:ed:
51:8b:c0:a9:eb:93:8b:9d:cd:31:98:68:c6:ca:d5:92:de:23:
7f:17:fd:da:d5:d5:61:9d:50:40:9f:e0:ef:5a:76:36:5b:d9:
f9:5d:7e:13:28:8e:64:c1:ae:af:71:41:41:3a:b8:e1:a2:f5:
b9:ce:0a:b0:7b:c2:b2:06:ad:9d:e0:cf:92:42:06:ff:0d:bf:
18:35:36:9f:9d:8a:c8:7c:16:10:ed:90:bd:87:0e:d8:60:5f:
3f:bd:35:27:2c:9b:55:28:7a:99:29:f3:a4:6f:45:7e:98:9f:
1c:b8:cd:c3:9a:8b:7e:a5:4f:bd:2f:41:17:8e:48:85:bc:d3:
f5:7b:5f:b2:d2:46:77:b1:67:6e:d8:20:d7:28:68:c0:67:bc:
4c:3a:03:17:d5:4d:4f:ab:94:a4:5b:c5:ca:83:db:20:f9:52:
72:7f:0d:2b:80:0e:ba:5e:db:a5:ea:ca:9e:0d:bc:b1:dd:29:
3a:a3:15:fa:91:61:6e:74:f6:1c:fe:4c:58:5a:b9:4a:d5:72:
10:4b:1f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:31 2025 by rpki-client