Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/724877DA041B11F099F3FFBD762E951A.roa
File: 724877DA041B11F099F3FFBD762E951A.roa (raw, json)
Hash identifier: faGKHIxqx65C6c5WpL9tZJQEP2iGmMUo4VbKikUVXO8=
Subject key identifier: 67:4F:DD:E7:77:AA:5B:AE:B6:A0:C4:0B:AA:D2:9F:66:8F:74:DA:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/724877DA041B11F099F3FFBD762E951A.roa
Signing time: Tue 18 Mar 2025 17:07:18 +0000
ROA not before: Tue 18 Mar 2025 17:07:14 +0000
ROA not after: Mon 05 May 2025 17:07:14 +0000
asID: 202656
IP address blocks: 154.221.56.0/24 maxlen: 24
154.221.57.0/24 maxlen: 24
154.221.58.0/24 maxlen: 24
154.221.59.0/24 maxlen: 24
154.221.61.0/24 maxlen: 24
154.222.1.0/24 maxlen: 24
154.222.12.0/24 maxlen: 24
154.222.13.0/24 maxlen: 24
154.222.14.0/24 maxlen: 24
154.222.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95444 (0x174d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 17:07:14 2025 GMT
Not After : May 5 17:07:14 2025 GMT
Subject: CN=67d9a846-d38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:9b:5f:f3:76:be:cc:7d:0b:c9:a2:1c:72:
9e:70:47:e7:13:c2:6c:9c:35:5a:73:cb:43:bb:9e:
da:96:f2:fa:22:db:87:bd:2d:af:a0:3b:0b:b5:ed:
16:67:18:73:92:30:a0:dd:bb:9b:15:08:bf:f5:99:
af:b1:fb:60:8f:80:56:7b:f7:d1:95:18:ae:3a:e4:
73:82:91:e9:50:17:9a:f9:b0:b3:6d:bf:58:29:13:
a0:b2:e9:9e:6c:0b:72:d8:4e:f9:42:05:e1:1f:5c:
d9:71:35:f3:aa:cf:1b:d0:37:60:ae:59:db:16:48:
dd:26:c7:44:81:00:0a:00:46:e6:a8:9d:0f:3a:f9:
84:c3:83:a9:58:a0:6a:29:18:ad:4f:26:7e:35:fb:
c5:0c:89:ef:06:b7:d6:9a:40:d7:48:fc:e1:9f:e2:
d6:cc:c0:ba:d5:1e:ab:3e:1a:56:b1:bb:6b:c9:17:
28:74:08:81:72:ed:7c:e6:84:18:c1:d7:e9:75:77:
d0:dd:db:ee:0f:ab:c4:51:67:16:e9:63:98:64:f8:
57:22:ad:6a:94:2a:18:79:76:63:c8:b5:82:a1:88:
31:ee:a5:09:b1:05:6b:19:6c:ed:49:3e:f7:ea:c9:
ae:b0:68:63:79:b5:37:8e:88:ec:f0:71:6b:08:78:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4F:DD:E7:77:AA:5B:AE:B6:A0:C4:0B:AA:D2:9F:66:8F:74:DA:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/724877DA041B11F099F3FFBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.56.0/22
154.221.61.0/24
154.222.1.0/24
154.222.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:ac:4f:10:a0:be:60:e9:58:bc:6d:c2:38:fa:ce:77:7c:76:
60:d4:53:9d:58:d9:30:95:d2:c8:78:d2:31:a4:7c:74:db:6d:
43:d2:42:87:ee:e6:d5:3e:84:55:02:6b:b4:98:71:38:45:e8:
84:c0:82:bd:cd:9e:63:30:03:c4:d8:a7:6a:8a:21:4b:7e:8b:
42:9b:9b:f0:13:3b:b9:67:3f:a5:65:ad:cd:44:b2:dc:0c:1e:
3e:a5:f9:ac:66:76:82:47:d1:0c:50:bf:49:63:67:50:71:a9:
b6:cb:7c:57:9c:05:d3:be:67:72:fb:45:5f:f7:21:d3:35:ed:
16:c6:2c:bb:90:e1:7c:cc:a5:79:70:14:17:13:8e:1b:5f:43:
97:04:83:f3:bf:13:3f:72:ae:3e:ea:d5:e2:4f:85:27:c1:d6:
92:9d:1e:e0:d9:b8:25:4f:2b:78:84:ea:92:db:48:51:a8:90:
5b:08:d3:15:dc:ad:d8:e4:91:dc:81:e7:e5:f1:67:69:04:22:
d6:23:97:95:30:88:4f:38:ed:3b:a7:88:be:f6:b1:9e:ec:bc:
db:e3:ac:15:9f:3a:4c:cc:20:f9:33:0f:c8:09:68:1c:45:62:
26:ca:71:0a:e6:62:fa:69:3d:46:6c:72:68:c5:c8:56:c6:57:
34:e0:ce:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:54 2025 by rpki-client