Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DF23C68F65411EFA3E657A1762E951A.roa
File: 6DF23C68F65411EFA3E657A1762E951A.roa (raw, json)
Hash identifier: NTBtKAuy4G2Q8NSLvmEc2VVErkrWVOjvPjZrErdYw9I=
Subject key identifier: 83:DD:6A:86:5A:49:86:B6:83:D3:E2:D6:24:08:A5:2D:D8:B2:84:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DF23C68F65411EFA3E657A1762E951A.roa
Signing time: Sat 01 Mar 2025 04:19:55 +0000
ROA not before: Sat 01 Mar 2025 04:19:52 +0000
ROA not after: Thu 19 Feb 2026 04:19:52 +0000
asID: 984
IP address blocks: 154.202.93.0/24 maxlen: 24
154.202.94.0/24 maxlen: 24
154.202.95.0/24 maxlen: 24
154.202.96.0/24 maxlen: 24
154.202.97.0/24 maxlen: 24
154.202.98.0/24 maxlen: 24
154.202.99.0/24 maxlen: 24
154.202.102.0/24 maxlen: 24
154.202.107.0/24 maxlen: 24
154.202.108.0/24 maxlen: 24
154.202.109.0/24 maxlen: 24
154.202.110.0/24 maxlen: 24
154.202.111.0/24 maxlen: 24
154.202.112.0/24 maxlen: 24
154.202.113.0/24 maxlen: 24
154.202.114.0/24 maxlen: 24
154.202.115.0/24 maxlen: 24
154.202.116.0/24 maxlen: 24
154.213.160.0/24 maxlen: 24
154.213.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93446 (0x16d06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 04:19:52 2025 GMT
Not After : Feb 19 04:19:52 2026 GMT
Subject: CN=67c28aeb-b590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:35:0a:74:a9:6d:c9:fc:38:93:93:cd:6f:
47:1f:0d:06:84:8d:df:f6:38:8b:90:9a:00:ad:a4:
47:d2:2e:9f:cd:1d:78:4f:79:dd:c7:73:94:08:92:
51:69:3d:e8:24:e1:8c:da:ed:67:07:8d:b7:f1:97:
fe:45:bb:58:d5:b4:85:ef:67:41:8a:58:4b:89:8a:
3a:e0:03:ba:25:b0:f0:33:b6:bd:5c:d0:b7:2c:9c:
45:97:13:a5:36:c4:2d:9c:74:8e:2a:43:0f:8e:d2:
a0:42:e6:00:af:f9:10:a4:03:7b:f4:a3:2e:fe:f7:
37:3c:a4:40:88:30:e8:3b:e4:1a:1d:8a:f0:6c:c3:
44:74:34:4f:b8:3f:83:54:a0:71:15:33:66:12:f0:
ae:9d:19:ad:b0:9c:3e:9b:1c:ea:9e:18:00:75:8e:
f2:ed:79:3e:08:61:3a:9b:c6:1b:5e:3b:df:7a:02:
10:9c:25:e3:16:35:36:94:6e:fa:c8:4d:53:be:54:
aa:91:9e:3b:63:92:04:64:e0:38:f6:e7:79:ff:8a:
10:18:89:66:eb:9f:70:97:e0:10:8f:f9:69:02:9d:
a3:27:03:cd:2d:da:f9:6f:2d:e2:15:07:0c:e9:bf:
ca:df:64:8e:5f:93:9c:2d:9e:b3:62:c3:87:a5:0a:
dc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DD:6A:86:5A:49:86:B6:83:D3:E2:D6:24:08:A5:2D:D8:B2:84:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DF23C68F65411EFA3E657A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.93.0-154.202.99.255
154.202.102.0/24
154.202.107.0-154.202.116.255
154.213.160.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:f8:de:bb:d8:ac:63:aa:85:cb:b6:d8:dd:27:c8:fe:e3:0d:
bd:f8:d8:e4:0f:69:4d:12:7e:84:93:04:fe:4f:8b:b2:bd:4b:
a3:07:9b:bc:e3:71:35:a7:d2:44:c0:c0:05:fb:ce:78:df:22:
14:eb:0c:91:fc:5d:c3:49:16:71:0d:6d:07:04:02:47:81:15:
d7:4c:1d:f2:c5:01:66:84:93:62:c5:fb:43:06:47:55:0e:53:
b4:af:87:69:1a:cb:b0:c4:8d:7d:88:1a:63:54:f6:f0:e6:b8:
df:c3:dd:e0:49:e4:fd:14:6e:ba:54:e7:a0:98:74:74:f7:6f:
71:1f:38:54:10:99:18:d8:25:f4:51:1e:31:fe:82:b4:66:34:
8d:f0:1a:8b:a3:d3:61:c3:d8:d3:67:1c:fa:ea:d7:1f:eb:55:
93:43:0a:1a:9e:1f:b1:02:66:04:8b:c6:a0:ff:f9:00:ff:33:
9d:c4:10:19:40:fa:c3:a1:7f:51:99:85:f9:7f:44:2f:d5:30:
b6:5a:c9:4e:aa:86:87:6a:09:d2:ff:56:9c:ef:b3:eb:d9:4b:
2b:a6:d3:4a:bf:0e:33:a5:93:99:ad:96:62:7a:2b:0c:2e:d6:
ee:29:2a:9d:1f:e4:30:05:fe:13:d3:14:2e:fd:45:00:63:6c:
91:a5:ea:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:44 2025 by rpki-client