Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DC1AAE6F8E611EFAA21EA92762E951A.roa
File: 6DC1AAE6F8E611EFAA21EA92762E951A.roa (raw, json)
Hash identifier: ItVVNRJfKHY7bn8L9wPHKXC10mgfGBX9G9xdGG9Dru4=
Subject key identifier: CF:82:89:12:2A:D1:4F:27:B5:5A:80:0F:96:2F:38:B4:17:82:E1:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0171B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DC1AAE6F8E611EFAA21EA92762E951A.roa
Signing time: Tue 04 Mar 2025 10:50:04 +0000
ROA not before: Tue 04 Mar 2025 10:50:00 +0000
ROA not after: Sun 06 Apr 2025 10:50:00 +0000
asID: 203020
IP address blocks: 154.217.8.0/24 maxlen: 24
154.217.21.0/24 maxlen: 24
154.217.22.0/24 maxlen: 24
154.217.23.0/24 maxlen: 24
154.217.24.0/23 maxlen: 24
154.217.26.0/23 maxlen: 24
154.217.28.0/24 maxlen: 24
154.217.29.0/24 maxlen: 24
154.217.30.0/24 maxlen: 24
154.217.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94646 (0x171b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 10:50:00 2025 GMT
Not After : Apr 6 10:50:00 2025 GMT
Subject: CN=67c6dadc-9e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:06:7e:f1:01:2c:59:9d:38:46:bf:48:fd:82:
9b:78:56:9a:cf:b5:55:6e:9f:6d:19:b1:59:9b:4f:
48:a4:31:b0:59:7f:92:7e:5c:6d:3a:a5:f8:82:aa:
1f:82:ab:b4:fd:14:04:91:71:8b:cd:41:66:f6:54:
64:49:6e:23:11:9c:52:82:bb:8c:b2:4f:0c:35:81:
b7:f9:5f:1a:27:07:1d:91:01:3d:d9:ba:84:22:7b:
94:19:ec:78:80:60:3e:b0:47:af:b8:ec:27:5f:e2:
d1:33:1b:4d:ad:89:5e:ae:e6:18:31:96:19:c4:b2:
4d:2a:fe:4c:c2:14:d9:76:eb:50:a9:96:74:fa:6e:
d3:8d:35:97:e7:89:ad:d1:9d:42:60:37:f1:00:e7:
67:2c:13:1f:e0:5d:8d:f4:3b:fc:a9:e0:50:06:37:
d5:9d:29:c2:8c:47:64:d6:08:34:19:4b:8d:ba:51:
6c:a0:41:c0:c1:39:a7:a5:8a:a6:32:77:c5:fa:84:
42:19:71:7b:4c:b3:53:0f:dd:8a:90:1b:67:a4:35:
f9:ce:35:55:0f:02:eb:f7:54:bb:ba:04:d5:ee:cf:
e9:6d:cf:c5:81:9f:6b:e3:44:a9:9b:20:ed:17:52:
c5:75:a8:42:56:3e:52:73:55:67:5e:f5:47:88:fe:
b3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:82:89:12:2A:D1:4F:27:B5:5A:80:0F:96:2F:38:B4:17:82:E1:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DC1AAE6F8E611EFAA21EA92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.8.0/24
154.217.21.0-154.217.31.255
Signature Algorithm: sha256WithRSAEncryption
9a:8b:98:89:6f:cf:9c:eb:a8:bd:2c:2a:6f:fb:15:5f:f8:d1:
5c:eb:c1:58:0a:c5:52:d9:b1:ca:c4:a4:d4:70:50:c3:e3:1d:
7a:6f:fb:25:86:30:ae:81:ec:4f:f9:87:e4:11:50:50:09:a4:
ca:59:fa:4d:2e:06:88:19:c8:61:f4:0e:48:a3:5d:19:9f:6c:
8f:e9:8a:d4:a7:81:30:1a:01:38:f4:c5:97:a3:6e:9c:b5:52:
f7:26:69:92:82:a4:ec:09:29:1b:f6:e2:19:40:1d:6d:a3:d9:
ac:ce:ad:e1:58:9a:91:cc:60:00:62:00:c2:e9:34:47:8e:7b:
de:35:0a:0a:ee:c7:8f:09:81:bb:b6:a8:5e:f8:60:57:d2:41:
2d:8d:54:76:2d:a7:d3:75:e0:49:62:a9:15:1d:ce:ba:cd:60:
f4:4c:c1:70:b2:2e:cc:f8:a5:c3:e7:a6:7d:6d:35:34:20:56:
72:c7:c3:a1:c5:1e:b7:bf:64:01:d5:93:99:b5:12:06:ee:54:
71:c4:fa:98:e3:fc:bc:ae:29:e2:63:80:3c:ac:c0:e4:22:ec:
3c:88:b4:01:da:18:ae:ce:cb:d7:78:0f:f7:75:b5:fd:be:6b:
da:7c:2e:d7:47:af:ef:ff:59:b9:73:19:bb:37:01:73:8a:9d:
3f:07:c8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:52:25 2025 by rpki-client