Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7192A01AF4F611EFA0AC9ABA762E951A.roa
File: 7192A01AF4F611EFA0AC9ABA762E951A.roa (raw, json)
Hash identifier: zMg+C3lQoFQjYQvIYWZKk5RoK2exie0PdARUBv4HosI=
Subject key identifier: 6C:DE:ED:4B:0C:99:87:49:26:59:07:0D:71:5D:85:C1:57:E5:7A:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0167C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7192A01AF4F611EFA0AC9ABA762E951A.roa
Signing time: Thu 27 Feb 2025 10:34:38 +0000
ROA not before: Thu 27 Feb 2025 10:34:33 +0000
ROA not after: Thu 19 Feb 2026 10:34:33 +0000
asID: 328608
IP address blocks: 154.200.134.0/24 maxlen: 24
154.200.135.0/24 maxlen: 24
154.200.136.0/24 maxlen: 24
154.200.137.0/24 maxlen: 24
154.200.138.0/24 maxlen: 24
154.200.139.0/24 maxlen: 24
154.200.141.0/24 maxlen: 24
154.200.148.0/24 maxlen: 24
154.200.151.0/24 maxlen: 24
154.200.152.0/24 maxlen: 24
154.200.163.0/24 maxlen: 24
154.200.168.0/24 maxlen: 24
154.200.169.0/24 maxlen: 24
154.200.170.0/24 maxlen: 24
154.200.171.0/24 maxlen: 24
154.200.172.0/24 maxlen: 24
154.200.173.0/24 maxlen: 24
154.200.174.0/24 maxlen: 24
154.200.175.0/24 maxlen: 24
154.200.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92105 (0x167c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 10:34:33 2025 GMT
Not After : Feb 19 10:34:33 2026 GMT
Subject: CN=67c03fbe-4a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:6d:a4:17:69:f5:c7:2a:3b:a8:e0:03:2c:
6d:f7:43:d7:7e:1d:1d:b7:82:bb:93:af:b6:63:53:
db:63:2f:27:53:41:1e:f8:37:59:7f:01:5f:41:90:
00:7a:dd:5c:2b:65:72:2f:1d:8f:ed:7e:0a:62:7b:
80:d7:f1:f9:10:82:b2:71:90:16:b6:59:8f:a3:dd:
a8:fb:8b:7a:2a:f4:8d:01:75:aa:8b:cb:2b:ae:ff:
8c:a9:75:47:c7:c3:69:89:2d:a3:10:7d:92:fa:55:
f9:da:df:29:34:a6:ab:08:fd:b9:06:ea:f1:cf:3d:
cd:f8:f2:6b:f9:a5:ee:71:d9:e6:3e:46:a2:b5:7e:
b5:09:86:08:e2:99:1f:bb:96:27:98:cc:2e:2f:56:
a7:f1:6a:0e:f0:0e:82:f9:d7:ea:0e:d2:ec:50:db:
d5:7a:4a:43:ca:34:e5:04:79:8e:99:c6:18:78:6c:
a2:9a:f7:0b:9e:16:b7:0f:f6:a4:82:6d:f3:59:7f:
2e:16:76:50:67:87:24:c0:5d:90:e4:fd:ff:74:71:
b7:2c:4f:ef:0c:ac:e7:06:7c:54:4b:92:2c:a5:77:
32:1b:45:58:c3:21:74:5a:5a:ce:e9:88:f9:8c:fe:
c1:94:b0:dd:c3:71:4f:78:18:42:0b:78:78:48:59:
74:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DE:ED:4B:0C:99:87:49:26:59:07:0D:71:5D:85:C1:57:E5:7A:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7192A01AF4F611EFA0AC9ABA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.134.0-154.200.139.255
154.200.141.0/24
154.200.148.0/24
154.200.151.0-154.200.152.255
154.200.163.0/24
154.200.168.0-154.200.176.255
Signature Algorithm: sha256WithRSAEncryption
2c:85:2b:b6:77:c7:71:ff:a0:77:32:f3:f2:52:fe:c5:66:a3:
60:84:51:9d:12:ad:aa:46:7d:21:5d:c5:4b:51:1b:c6:ca:e2:
72:c5:bf:59:99:19:45:a5:3f:0b:a7:0d:d1:c2:05:e7:b5:e8:
80:32:c1:4f:56:fe:66:6f:df:a3:48:ef:95:3d:36:d4:cc:63:
25:00:61:be:10:ac:e1:ba:8b:90:39:96:4e:0e:af:0e:1a:34:
aa:91:31:b0:48:a7:3e:31:1f:07:51:ce:bf:2e:65:a8:50:94:
fc:3b:4d:46:0a:b1:44:d5:91:e6:de:bc:bf:65:57:88:6b:b1:
87:5d:b1:d4:7b:5c:95:7d:f6:f3:2c:ef:a5:2a:94:4f:b6:54:
31:ef:e6:44:3b:19:e8:0a:50:2e:a9:6c:99:9b:bb:f0:4b:68:
d0:5e:10:da:13:de:87:df:e9:33:14:3c:0f:52:c7:8e:cf:91:
d4:f5:92:18:54:0a:06:61:43:00:57:46:ed:85:53:e7:17:48:
c1:0f:97:7c:90:8d:5f:1a:ab:4d:e3:37:5d:16:1e:51:94:1c:
3d:17:0f:56:74:65:08:9b:86:c4:ca:c8:26:f4:d2:fe:36:c9:
b0:c3:e6:56:67:d9:99:4a:50:f9:c3:31:2f:68:7e:0a:8f:f2:
12:2a:ac:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:48:15 2025 by rpki-client