Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6498A606041F11F094D7E858762E951A.roa
File: 6498A606041F11F094D7E858762E951A.roa (raw, json)
Hash identifier: JtTZG1vu+eNGwxRuYBvxtcpH41C09ur/8s+iYessLeM=
Subject key identifier: DF:39:44:F8:2A:76:00:9C:77:A9:92:24:34:69:F2:FD:A4:92:F9:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6498A606041F11F094D7E858762E951A.roa
Signing time: Tue 18 Mar 2025 17:35:33 +0000
ROA not before: Tue 18 Mar 2025 17:35:29 +0000
ROA not after: Mon 05 May 2025 17:35:29 +0000
asID: 202656
IP address blocks: 154.219.213.0/24 maxlen: 24
154.219.214.0/24 maxlen: 24
154.219.215.0/24 maxlen: 24
154.219.216.0/24 maxlen: 24
154.219.217.0/24 maxlen: 24
154.219.218.0/24 maxlen: 24
154.219.219.0/24 maxlen: 24
154.219.220.0/24 maxlen: 24
154.219.221.0/24 maxlen: 24
154.219.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95452 (0x174dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 17:35:29 2025 GMT
Not After : May 5 17:35:29 2025 GMT
Subject: CN=67d9aee5-04a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:2c:c6:40:11:cc:8b:fe:fe:55:41:49:fe:
15:f3:a5:8f:8c:44:d2:22:ac:34:07:a1:6b:f4:94:
c8:01:3a:a1:bd:23:dc:ca:2e:5a:05:72:ed:fc:f4:
20:94:eb:56:13:7d:11:a7:10:68:ab:25:d7:70:b7:
e5:1b:3f:af:60:6b:be:68:ed:c2:42:85:6a:11:e6:
ce:9c:82:61:78:26:47:73:80:4a:58:76:24:ba:5b:
2d:9b:ea:3f:28:8a:04:86:17:5b:e4:ea:af:e9:b0:
94:91:fb:b0:b8:ba:da:5c:7f:17:22:d8:7f:4c:4b:
8a:cc:95:d5:a3:88:9b:e8:f6:ff:2b:e7:f1:82:0e:
5c:cb:cc:15:23:44:8d:4d:7e:cf:65:1e:cc:ce:eb:
a2:4d:57:cd:60:ec:01:7d:51:bd:d4:3d:29:a5:40:
c3:18:13:f6:c7:1c:95:91:51:a2:40:16:ef:e5:fa:
19:73:d0:0b:e3:a1:ae:3d:87:20:ea:24:40:ea:4a:
90:31:b0:c0:1e:f6:5e:f0:76:7b:92:70:ad:86:4e:
f0:5e:bb:15:5e:01:a4:57:9f:97:e3:d6:0a:26:ca:
f1:ce:ad:5a:0a:a9:28:e7:ea:27:d6:ee:09:8b:7f:
e6:62:bb:6f:cb:28:df:2a:fa:6a:f9:5f:45:dd:69:
0f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:39:44:F8:2A:76:00:9C:77:A9:92:24:34:69:F2:FD:A4:92:F9:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6498A606041F11F094D7E858762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.213.0-154.219.221.255
154.219.223.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4f:65:1e:b1:37:b8:66:a5:b5:49:40:dc:27:39:44:c5:9f:
1c:d9:35:85:ac:f3:65:ca:fe:d2:75:05:22:2b:13:51:b8:9f:
88:90:2c:e3:fb:1f:38:e5:6d:8f:cd:69:12:3f:d0:72:97:6d:
f4:8f:f1:f2:3c:f0:d4:c0:0f:11:60:c1:a1:04:e0:ce:5b:2d:
b8:c5:71:54:a9:d4:89:14:f6:4b:77:4b:02:1a:f1:d8:e3:78:
97:d5:5b:6a:da:1f:82:6e:21:b6:22:7b:ee:9c:68:69:62:88:
70:62:e6:5e:06:1d:6f:01:be:c6:cc:a2:c9:0b:b3:9a:ba:6e:
90:16:58:13:c2:01:06:cf:f2:e3:9f:94:29:cd:b2:55:5b:18:
ba:e3:9c:a0:7a:ba:59:75:11:44:48:f8:5f:b9:dc:86:5a:1f:
9b:7a:f0:e1:d2:fe:6e:0d:fb:c6:d2:f0:63:c6:be:73:2a:60:
4a:a8:64:7a:0e:05:4a:1b:6d:28:b5:10:7d:dd:36:fc:9f:c4:
f4:18:c1:28:d0:a4:48:4c:6f:3c:0b:3f:fb:d7:da:2a:e7:e6:
48:13:0c:16:c6:ae:2f:9c:18:dd:07:50:ca:2b:1f:24:7a:0d:
fa:56:c9:2e:a8:f8:27:40:2c:cc:75:64:41:5c:d2:2e:2d:37:
c3:6a:af:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:19 2025 by rpki-client