Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B02B29E041E11F09F642F51762E951A.roa
File: 6B02B29E041E11F09F642F51762E951A.roa (raw, json)
Hash identifier: Oh2CHA4Sd8vpYnjdgVGblYEZw3mrsVBQILCIfU4nvZk=
Subject key identifier: EA:E0:4F:BF:B9:0A:C6:81:09:A6:A5:D3:AF:43:7D:C3:AF:08:07:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B02B29E041E11F09F642F51762E951A.roa
Signing time: Tue 18 Mar 2025 17:28:34 +0000
ROA not before: Tue 18 Mar 2025 17:28:30 +0000
ROA not after: Mon 05 May 2025 17:28:30 +0000
asID: 202656
IP address blocks: 154.219.192.0/24 maxlen: 24
154.219.195.0/24 maxlen: 24
154.219.206.0/24 maxlen: 24
154.219.208.0/24 maxlen: 24
154.219.209.0/24 maxlen: 24
154.219.210.0/24 maxlen: 24
154.219.212.0/24 maxlen: 24
154.219.249.0/24 maxlen: 24
154.221.52.0/24 maxlen: 24
154.222.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95450 (0x174da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 17:28:30 2025 GMT
Not After : May 5 17:28:30 2025 GMT
Subject: CN=67d9ad42-db5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a4:22:59:86:d9:a5:21:b2:67:be:bc:d2:07:
82:f6:c2:06:76:c4:b4:e1:f1:36:6e:98:fb:d1:09:
2c:62:0d:79:76:9b:1e:ff:56:00:43:86:9a:c0:94:
f6:f8:4c:92:9e:8d:ea:25:35:21:64:79:d7:7e:62:
94:28:a4:12:06:7d:33:a1:85:53:59:39:c3:01:34:
83:e5:7e:32:43:8e:3e:99:4c:80:55:87:ea:69:c0:
09:be:9a:6c:d1:8d:b2:c9:8d:4c:a4:99:4a:59:10:
fb:85:8e:09:3a:cb:c8:c1:6b:b8:1b:ec:7b:94:20:
25:ae:61:73:0b:bc:f3:86:8e:12:7b:d1:4e:3e:6c:
76:de:79:87:6a:fa:ac:db:6d:59:57:61:08:31:39:
50:a7:a3:17:2f:a8:2f:48:1c:cd:8c:90:ad:82:b0:
30:d5:08:5c:01:a8:4b:42:c6:3d:c4:0b:97:7f:31:
85:31:e8:a5:5c:e3:56:e9:f3:a9:11:4c:47:47:51:
e3:6a:cd:a7:58:df:8a:c1:08:3b:fe:69:a4:aa:a0:
34:39:4e:48:93:51:67:0e:91:06:8a:6b:37:b7:8b:
51:6b:49:d5:3b:f7:92:05:4c:cc:73:83:01:6c:61:
d2:7a:c5:47:19:59:4f:01:9b:14:1f:7c:4d:7c:30:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E0:4F:BF:B9:0A:C6:81:09:A6:A5:D3:AF:43:7D:C3:AF:08:07:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B02B29E041E11F09F642F51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.192.0/24
154.219.195.0/24
154.219.206.0/24
154.219.208.0-154.219.210.255
154.219.212.0/24
154.219.249.0/24
154.221.52.0/24
154.222.197.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:23:33:f1:2c:cd:12:fd:47:35:2e:8e:91:22:97:17:d8:93:
17:ae:61:35:cb:dd:a6:87:7e:e8:b3:26:ad:53:e4:75:91:53:
47:73:c4:f8:99:50:d8:5b:93:e9:37:d9:d6:03:5a:a3:34:2a:
fb:b8:4c:b5:a5:2a:c9:aa:c6:7f:cf:8c:3c:41:59:2f:00:ca:
d3:17:b9:af:b3:53:6f:98:68:15:64:2f:92:1a:f5:ba:89:ea:
57:f9:a6:fa:70:90:b5:39:34:b3:81:49:28:36:a7:9a:9c:08:
52:8a:2a:86:8c:8a:d7:69:c6:c0:8b:8d:25:3e:8c:d4:43:f7:
66:37:34:e6:6f:b0:ba:40:e0:ca:c2:4c:de:f5:2e:df:69:fd:
77:6e:f7:a7:68:34:d6:22:c9:62:10:7c:74:3c:d6:a6:6a:7b:
ba:32:5c:51:dc:27:ed:cf:a5:af:fd:5e:ec:e5:72:88:c0:0f:
18:35:aa:ee:f0:27:5b:26:11:83:31:f0:d5:8d:04:5e:92:60:
a1:f0:d4:41:ce:e7:2f:2e:79:57:2a:f1:09:e1:0e:d3:23:3b:
d0:de:9d:86:4a:c8:98:d4:04:80:42:f9:89:da:57:85:4b:fc:
e0:98:da:ad:9c:12:a9:05:46:74:da:f5:38:e2:fd:2f:bb:0b:
b3:a5:f5:a0
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIDAXTaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzE4MTcyODMwWhcNMjUwNTA1MTcyODMwWjAYMRYw
FAYDVQQDEw02N2Q5YWQ0Mi1kYjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA16QiWYbZpSGyZ7680geC9sIGdsS04fE2bpj70QksYg15dpse/1YAQ4aa
wJT2+EySno3qJTUhZHnXfmKUKKQSBn0zoYVTWTnDATSD5X4yQ44+mUyAVYfqacAJ
vpps0Y2yyY1MpJlKWRD7hY4JOsvIwWu4G+x7lCAlrmFzC7zzho4Se9FOPmx23nmH
avqs221ZV2EIMTlQp6MXL6gvSBzNjJCtgrAw1QhcAahLQsY9xAuXfzGFMeilXONW
6fOpEUxHR1Hjas2nWN+KwQg7/mmkqqA0OU5Ik1FnDpEGims3t4tRa0nVO/eSBUzM
c4MBbGHSesVHGVlPAZsUH3xNfDAUUQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFOrg
T7+5CsaBCaal069DfcOvCAecMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QjAyQjI5RTA0MUUxMUYwOUY2NDJGNTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAmtvAAwQAmtvDAwQAmtvO
MAwDBASa29ADBACa29IDBACa29QDBACa2/kDBACa3TQDBACa3sUwDQYJKoZIhvcN
AQELBQADggEBADwjM/EszRL9RzUujpEilxfYkxeuYTXL3aaHfuizJq1T5HWRU0dz
xPiZUNhbk+k32dYDWqM0Kvu4TLWlKsmqxn/PjDxBWS8AytMXua+zU2+YaBVkL5Ia
9bqJ6lf5pvpwkLU5NLOBSSg2p5qcCFKKKoaMitdpxsCLjSU+jNRD92Y3NOZvsLpA
4MrCTN71Lt9p/Xdu96doNNYiyWIQfHQ81qZqe7oyXFHcJ+3Ppa/9XuzlcojADxg1
qu7wJ1smEYMx8NWNBF6SYKHw1EHO5y8ueVcq8QnhDtMjO9DenYZKyJjUBIBC+Yna
V4VL/OCY2q2cEqkFRnTa9Tji/S+7C7Ol9aA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:19:25 2025 by rpki-client