Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62F95878F8DE11EFA1F93160762E951A.roa
File: 62F95878F8DE11EFA1F93160762E951A.roa (raw, json)
Hash identifier: LxLNzBAP5CeTi9ItbEOokTo2HhBIrXb2CLWj+EHvj1Q=
Subject key identifier: 39:7A:E7:EE:BC:0D:1B:C9:14:AF:0B:10:74:25:59:6B:2C:CD:3B:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01719C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62F95878F8DE11EFA1F93160762E951A.roa
Signing time: Tue 04 Mar 2025 09:52:30 +0000
ROA not before: Tue 04 Mar 2025 09:52:26 +0000
ROA not after: Mon 31 Mar 2025 09:52:26 +0000
asID: 49505
IP address blocks: 154.209.221.0/24 maxlen: 24
154.209.222.0/24 maxlen: 24
154.209.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94620 (0x1719c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 09:52:26 2025 GMT
Not After : Mar 31 09:52:26 2025 GMT
Subject: CN=67c6cd5e-a88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:5d:8e:70:12:e7:3b:ec:87:0d:e1:f8:20:
2b:1d:0f:4b:fb:42:0a:34:b0:b8:4c:ba:bc:7c:f5:
7f:17:7d:03:37:25:39:30:63:75:d1:b8:4a:f9:41:
90:17:a1:3a:07:78:1f:bf:1f:4e:b6:fc:ce:b1:1e:
33:bc:34:7a:61:56:b0:69:2b:92:58:27:01:52:dc:
6c:35:d7:a5:da:da:1e:76:cc:20:08:f4:ec:0a:51:
f6:ce:a7:7a:a5:8c:90:9d:75:10:e4:2d:a4:51:5b:
41:e5:ba:99:74:16:ad:17:5c:87:08:7c:93:99:09:
ce:2d:3a:77:2c:cb:f5:76:24:12:1e:c1:5b:38:51:
08:d9:28:70:40:48:c7:dd:ba:02:39:60:87:b2:21:
2f:cb:ed:c5:3f:a0:23:a0:3d:44:91:67:3f:c2:36:
f0:3b:82:37:a8:5f:86:a4:8b:a4:42:7a:c2:5a:93:
d9:a0:43:75:1c:85:d3:e8:92:7d:62:97:78:2e:f8:
4d:c0:5a:13:53:d1:97:96:29:6d:06:fe:88:4e:72:
b7:f2:0b:be:16:10:87:8e:e1:76:82:d6:a3:6b:f2:
82:cb:28:6e:e7:5c:db:1f:92:f3:19:db:0a:bc:be:
31:b5:42:03:fe:41:5c:e7:0b:68:e8:5e:9f:cf:3c:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7A:E7:EE:BC:0D:1B:C9:14:AF:0B:10:74:25:59:6B:2C:CD:3B:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62F95878F8DE11EFA1F93160762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.221.0-154.209.223.255
Signature Algorithm: sha256WithRSAEncryption
46:8f:b5:82:54:ca:31:09:3e:66:b0:65:29:f3:aa:bc:76:70:
d5:9c:82:1a:f5:2d:f9:34:02:c8:45:6e:91:61:61:29:7e:1a:
04:04:a1:d2:8f:d2:1d:5c:01:26:6b:5a:63:42:5e:99:6d:d6:
df:73:72:fb:f1:03:64:04:e2:ed:47:7c:a1:09:11:8a:3b:b5:
76:82:c5:43:6d:8a:de:87:dd:34:c2:4f:c2:98:42:f8:eb:61:
ca:f7:6b:04:dc:90:3e:c6:94:70:17:3e:4b:a9:f3:66:a1:4a:
18:d2:72:cb:66:07:d8:1f:2c:f4:a2:1b:df:6f:01:7d:02:df:
0f:7b:83:bf:42:69:85:ae:ff:61:ec:ee:3e:ed:92:87:3f:db:
73:6c:23:9b:91:d7:0a:09:97:2b:30:55:c5:61:5f:77:d3:06:
97:74:17:cb:6f:47:f0:19:82:e5:c8:28:63:60:a3:ab:9f:2f:
c6:12:6b:fa:d1:cb:b1:7f:89:d5:31:41:c8:b9:f1:6e:09:2f:
15:f5:75:0c:5c:4f:24:16:61:b9:03:e7:00:15:2b:8b:3b:83:
e4:0e:76:7d:9d:94:25:fa:fd:5a:40:98:ca:c3:ec:dc:57:51:
e7:70:2a:96:e2:f1:92:35:2d:6f:29:36:3a:68:e1:5f:f3:fd:
4c:a8:2c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:22:57 2025 by rpki-client