Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65035808040511F0ACE6CCB5762E951A.roa
File: 65035808040511F0ACE6CCB5762E951A.roa (raw, json)
Hash identifier: k0skiAk2BWYZOrul0oPCxLqaD4ER4ybPFC3KmFBcSgY=
Subject key identifier: A0:63:BD:3E:4E:76:80:77:76:62:84:52:91:77:3D:77:C1:B1:A6:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65035808040511F0ACE6CCB5762E951A.roa
Signing time: Tue 18 Mar 2025 14:29:26 +0000
ROA not before: Tue 18 Mar 2025 14:29:23 +0000
ROA not after: Mon 05 May 2025 14:29:23 +0000
asID: 49505
IP address blocks: 154.205.247.0/24 maxlen: 24
154.209.210.0/24 maxlen: 24
154.209.221.0/24 maxlen: 24
154.209.222.0/24 maxlen: 24
154.211.10.0/24 maxlen: 24
154.211.18.0/24 maxlen: 24
154.212.31.0/24 maxlen: 24
154.223.198.0/24 maxlen: 24
154.223.199.0/24 maxlen: 24
154.223.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95398 (0x174a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 14:29:23 2025 GMT
Not After : May 5 14:29:23 2025 GMT
Subject: CN=67d98346-5c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:5e:01:e3:2d:60:28:bf:10:05:2c:8d:7e:
4c:10:98:85:37:53:4f:b4:a1:24:49:86:71:7f:7e:
77:18:b4:92:ca:7b:43:26:61:23:ec:ca:6e:91:5a:
b1:17:7a:ba:96:15:19:a9:5b:8b:f9:04:d2:ee:51:
04:48:e1:81:f6:3b:b9:60:ae:00:4d:8b:f0:66:48:
81:14:ed:b1:ae:1b:ee:e4:a5:73:38:a8:ad:9a:fa:
de:5f:dc:71:0c:94:5d:93:38:96:80:fa:18:c6:ef:
3d:59:70:aa:ac:d4:aa:7d:96:b9:52:e2:8a:09:b1:
aa:4f:57:3e:f5:7a:eb:b6:13:d0:4a:b1:f4:3b:fa:
97:3d:df:8e:70:93:d4:b3:2b:40:bf:d6:ce:05:1f:
d2:cb:9d:5b:9a:c5:57:d3:d8:c8:0b:53:16:89:80:
94:7c:a4:d7:f6:e7:a3:d6:44:f4:e7:73:2f:37:39:
93:02:30:4e:3e:f3:e5:3e:c8:05:6f:64:14:b0:62:
97:13:2f:6d:5d:a7:5b:a6:6b:7b:c1:06:eb:49:19:
b5:a4:01:73:b0:1e:16:70:b3:24:e6:92:8c:c8:21:
09:fd:9a:d5:42:d2:be:96:88:f3:ba:c5:90:c4:75:
c6:91:88:a3:b6:f3:37:a0:8f:b7:d9:3a:3d:46:85:
4f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:63:BD:3E:4E:76:80:77:76:62:84:52:91:77:3D:77:C1:B1:A6:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65035808040511F0ACE6CCB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.247.0/24
154.209.210.0/24
154.209.221.0-154.209.222.255
154.211.10.0/24
154.211.18.0/24
154.212.31.0/24
154.223.198.0/23
154.223.204.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f4:94:54:f7:5e:2d:43:e9:ce:a7:92:05:01:ec:2d:f1:fc:
ce:33:3c:d9:da:51:00:33:9c:2a:fa:7e:64:ee:06:e8:57:49:
d4:5f:bc:8e:e9:9c:57:69:f6:37:92:fb:07:ee:51:75:4e:f4:
c4:a9:8c:b2:86:a1:ff:7d:9d:1d:b1:f7:c1:f2:47:09:36:a7:
b2:76:6f:4e:be:54:2c:18:a7:7f:d7:cc:4e:ac:04:6e:bf:c6:
89:7f:bf:d5:eb:f8:7f:32:c2:f3:56:a1:0a:53:34:9c:dc:75:
72:05:1d:d7:58:3b:84:0d:46:52:d7:7a:5c:c4:37:09:dc:4c:
46:4a:38:5c:85:d5:d3:50:0f:5a:bd:81:3e:8b:fe:b8:07:d2:
97:d2:57:17:69:fd:1f:36:96:57:6a:41:52:55:ed:2a:86:86:
50:71:ad:db:f7:ca:c1:97:67:e8:93:99:97:fb:37:4f:68:93:
9a:6b:25:d7:33:18:45:f5:21:06:51:1c:fb:2d:25:6d:51:bc:
4b:1f:f7:a8:b6:92:0a:a5:b7:8d:5e:06:6b:b0:b5:65:e6:ce:
dd:eb:ec:99:3a:f3:93:17:2f:fe:80:e2:1f:91:0f:b3:7e:83:
80:c1:7c:50:90:78:85:95:cc:eb:be:2d:b2:3b:a7:43:79:aa:
d1:0b:8d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:42 2025 by rpki-client