Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B4885F4F4F511EFB85366B5762E951A.roa
File: 6B4885F4F4F511EFB85366B5762E951A.roa (raw, json)
Hash identifier: hfnDXesV1c6dcGkNM8cBNGuGJM1v19q0zVUbj5wcwv8=
Subject key identifier: A3:23:A1:4A:4B:05:B7:0A:D8:AB:03:A8:7E:7C:41:07:9F:90:35:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0167B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B4885F4F4F511EFB85366B5762E951A.roa
Signing time: Thu 27 Feb 2025 10:27:18 +0000
ROA not before: Thu 27 Feb 2025 10:27:13 +0000
ROA not after: Sat 19 Feb 2028 10:27:13 +0000
asID: 17561
IP address blocks: 154.193.248.0/24 maxlen: 24
154.193.249.0/24 maxlen: 24
154.193.250.0/24 maxlen: 24
154.193.251.0/24 maxlen: 24
154.193.252.0/24 maxlen: 24
154.193.253.0/24 maxlen: 24
154.193.254.0/24 maxlen: 24
154.193.255.0/24 maxlen: 24
154.196.96.0/24 maxlen: 24
154.196.97.0/24 maxlen: 24
154.196.98.0/24 maxlen: 24
154.196.99.0/24 maxlen: 24
154.196.100.0/24 maxlen: 24
154.196.101.0/24 maxlen: 24
154.196.102.0/24 maxlen: 24
154.196.103.0/24 maxlen: 24
154.196.104.0/24 maxlen: 24
154.196.105.0/24 maxlen: 24
154.209.24.0/24 maxlen: 24
154.209.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92089 (0x167b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 10:27:13 2025 GMT
Not After : Feb 19 10:27:13 2028 GMT
Subject: CN=67c03e05-5853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:7f:83:00:50:d7:f3:3d:f8:1c:44:67:8e:
b2:bf:13:54:87:79:5b:02:c7:64:f7:ef:8d:41:0f:
8a:8f:83:c0:37:cb:34:be:fb:54:72:d8:45:c6:58:
87:dd:99:64:5b:41:39:c5:19:66:d3:ff:de:a3:1a:
cf:48:6b:12:73:59:1f:58:70:96:e2:a0:ce:d0:42:
26:d5:e6:b0:88:bd:b6:69:e6:9b:6f:e4:21:9f:fc:
c8:6d:66:cd:a7:cb:4c:26:5b:d4:5f:ec:08:72:30:
f2:e4:af:a4:b1:7c:09:ed:4c:1d:68:10:ed:cb:1f:
38:43:02:73:d8:99:b3:19:ad:da:89:21:e6:08:40:
76:86:da:9e:1f:4b:3e:7b:5d:3e:44:8d:aa:91:47:
30:fa:85:c6:7c:90:b0:38:e7:a6:6b:ca:76:b6:bd:
8b:f3:40:71:86:95:a8:1d:8d:d6:dd:40:b1:f5:b6:
3e:38:ae:7c:d6:08:63:3d:74:04:39:f5:b3:eb:ae:
c2:79:50:22:33:85:1e:4a:85:6d:19:cb:a2:e4:79:
8a:9f:fa:7d:c1:06:ae:47:ae:ae:79:fd:09:00:c6:
3d:20:93:07:21:29:b6:58:87:fd:f8:ea:d5:e4:3a:
c2:fe:ba:44:28:f1:a8:4b:b4:60:7e:38:05:74:07:
36:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:23:A1:4A:4B:05:B7:0A:D8:AB:03:A8:7E:7C:41:07:9F:90:35:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B4885F4F4F511EFB85366B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.248.0/21
154.196.96.0-154.196.105.255
154.209.24.0/24
154.209.66.0/24
Signature Algorithm: sha256WithRSAEncryption
05:dd:da:64:3a:c0:ab:d6:29:99:64:88:df:d4:76:83:f8:b7:
bf:2c:03:ed:4c:4d:7f:b3:f7:38:1b:69:90:79:9b:58:8d:62:
9a:e7:d3:e2:86:12:23:6d:38:8f:12:8f:fb:6b:fa:a9:40:e9:
b0:e2:62:fd:52:6f:29:b6:ba:ab:6e:44:a9:72:37:28:9d:94:
0a:47:22:f1:fb:7d:aa:1d:b5:62:e2:d5:f3:37:2a:52:39:d6:
4e:0f:6f:64:77:36:82:75:ac:49:ff:d2:c0:48:66:ba:48:85:
bf:ff:10:f5:7c:6b:0f:a0:55:99:f9:ed:a4:bc:d9:ce:c3:0b:
f6:83:2e:f9:e3:6c:f6:64:47:27:82:a5:41:07:ce:a8:45:f3:
69:43:1e:b9:f5:6e:eb:94:78:eb:60:82:b8:88:e7:ac:cc:05:
32:5f:c9:93:15:f8:7a:41:0c:db:b4:59:2c:1c:3d:61:ec:a3:
71:22:58:9f:c0:b3:9d:09:70:dc:d4:a7:06:34:ce:04:f5:8f:
5b:55:59:5d:cf:06:6d:97:3f:5b:0a:fe:68:78:27:dc:9f:a4:
40:1a:1d:0d:a9:cc:be:3f:2c:c4:b8:63:11:9c:96:b8:a6:08:
6e:73:c7:b9:fe:d6:ee:73:2e:fa:16:01:22:b8:7a:0a:9a:57:
4a:4d:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:23 2025 by rpki-client