Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73C999ECF65E11EF88543E66762E951A.roa
File: 73C999ECF65E11EF88543E66762E951A.roa (raw, json)
Hash identifier: 6jTJCgfRxFqTj4sAxZuH0p8JHTBmzHJk8uZlnaQqsWA=
Subject key identifier: FA:30:7F:CD:BC:0E:62:C7:EF:C7:D6:F1:50:CE:07:6C:FE:81:49:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73C999ECF65E11EF88543E66762E951A.roa
Signing time: Sat 01 Mar 2025 05:31:40 +0000
ROA not before: Sat 01 Mar 2025 05:31:36 +0000
ROA not after: Sat 19 Feb 2028 05:31:36 +0000
asID: 17561
IP address blocks: 154.196.230.0/24 maxlen: 24
154.196.231.0/24 maxlen: 24
154.196.236.0/24 maxlen: 24
154.220.138.0/24 maxlen: 24
154.220.140.0/24 maxlen: 24
154.220.146.0/24 maxlen: 24
154.220.149.0/24 maxlen: 24
154.220.157.0/24 maxlen: 24
154.220.162.0/24 maxlen: 24
154.220.173.0/24 maxlen: 24
154.220.180.0/24 maxlen: 24
154.220.182.0/24 maxlen: 24
154.220.190.0/24 maxlen: 24
154.220.232.0/24 maxlen: 24
154.220.233.0/24 maxlen: 24
154.220.234.0/24 maxlen: 24
154.220.235.0/24 maxlen: 24
154.220.236.0/24 maxlen: 24
154.220.237.0/24 maxlen: 24
154.220.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93478 (0x16d26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 05:31:36 2025 GMT
Not After : Feb 19 05:31:36 2028 GMT
Subject: CN=67c29bbc-04b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:59:05:e6:53:e5:a9:c2:14:4f:e5:f8:4f:
92:a0:d9:f8:4e:33:42:1b:ba:09:42:7f:ca:74:74:
f7:74:0f:07:78:2c:7f:1e:85:99:e5:2a:8a:26:6d:
12:35:de:da:3e:72:41:6e:22:a7:fb:f6:85:ca:29:
cf:7c:82:5a:52:d8:46:35:2e:51:0e:c9:76:79:e7:
eb:5a:fe:09:ee:bf:10:fb:f1:1f:a2:7d:ff:f3:28:
a3:89:0a:87:7d:5b:e8:15:f8:95:41:8a:cf:b6:41:
98:3f:60:c0:e1:96:8d:65:c7:ef:0b:ee:f0:01:d3:
ee:82:3e:b7:b7:10:53:98:6d:a5:9d:cf:9a:cf:9b:
64:d4:6f:1f:cb:9a:bb:aa:c8:e9:3f:32:8f:fe:b7:
a5:cc:14:43:9a:fd:c2:e4:bc:0a:ff:8a:cb:90:75:
85:c6:28:8a:b8:0e:ee:b3:a7:0f:29:d7:97:6d:55:
75:db:d0:ac:f0:c5:df:c1:d3:be:e6:82:82:69:8f:
03:27:90:39:25:c6:98:41:58:07:73:50:22:c2:d6:
17:df:bc:e0:c7:53:78:60:a1:a1:cb:62:b4:2f:c6:
79:52:27:bb:e2:d8:22:00:fc:c9:52:0c:fe:7d:2e:
39:1f:52:f4:e1:4e:de:9b:7f:0e:63:01:7e:7d:45:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:30:7F:CD:BC:0E:62:C7:EF:C7:D6:F1:50:CE:07:6C:FE:81:49:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73C999ECF65E11EF88543E66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.230.0/23
154.196.236.0/24
154.220.138.0/24
154.220.140.0/24
154.220.146.0/24
154.220.149.0/24
154.220.157.0/24
154.220.162.0/24
154.220.173.0/24
154.220.180.0/24
154.220.182.0/24
154.220.190.0/24
154.220.232.0-154.220.238.255
Signature Algorithm: sha256WithRSAEncryption
76:c7:48:f3:6f:16:12:08:f6:38:f3:03:bd:75:35:8f:d9:9e:
16:4e:14:72:56:2a:5e:ac:35:e4:1b:96:f4:b6:dc:6c:f7:10:
23:fd:82:b2:21:b6:14:05:43:d2:5b:16:53:39:ea:24:99:e2:
0b:c9:f4:b6:4e:26:87:26:ad:50:a9:d3:e5:93:55:5c:e1:8a:
7b:c7:b2:71:0a:51:5d:56:17:f3:e9:0b:71:da:3e:40:94:c7:
66:07:54:9b:8a:4c:6a:e4:35:a2:f4:77:d2:ef:1a:13:83:36:
96:8a:fd:32:d3:64:a6:33:cc:d8:2a:24:16:f1:95:18:f4:29:
ae:dc:31:8a:6b:a9:0d:56:8f:f6:ca:43:9d:c8:a1:af:50:13:
8c:7d:a7:66:e1:ea:88:a3:f6:9c:05:9c:1f:68:f1:1a:f9:df:
8b:1b:51:a5:c4:cb:01:d7:45:78:e9:5e:d7:ab:52:5c:97:46:
ad:80:c6:6d:2d:8c:b4:13:76:3f:a8:6a:ad:bb:fd:e6:21:70:
9e:86:5a:09:41:f4:3a:c1:71:1f:6d:3b:59:66:08:69:08:07:
64:c1:c2:ab:a9:a1:2c:7e:77:0f:a4:fc:00:6e:1a:a1:7e:e5:
6d:7c:6e:14:63:0e:97:ae:3a:41:5a:d3:fd:8e:32:6b:5c:0e:
64:6d:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:10 2025 by rpki-client