Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A841CB8F4E611EFA8D5E74E762E951A.roa
File: 7A841CB8F4E611EFA8D5E74E762E951A.roa (raw, json)
Hash identifier: 3HFvO+6CiPA+F5Ho3z24gzVBTI5XBdaDEEILR5+L/6U=
Subject key identifier: 87:2A:E2:31:47:CD:47:B4:49:39:29:C8:8B:01:9F:58:50:F5:D2:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A841CB8F4E611EFA8D5E74E762E951A.roa
Signing time: Thu 27 Feb 2025 08:40:21 +0000
ROA not before: Thu 27 Feb 2025 08:40:17 +0000
ROA not after: Sat 19 Feb 2028 08:40:17 +0000
asID: 17561
IP address blocks: 154.91.38.0/24 maxlen: 24
154.91.138.0/24 maxlen: 24
154.91.140.0/24 maxlen: 24
154.91.141.0/24 maxlen: 24
154.91.142.0/24 maxlen: 24
154.91.167.0/24 maxlen: 24
154.91.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91898 (0x166fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 08:40:17 2025 GMT
Not After : Feb 19 08:40:17 2028 GMT
Subject: CN=67c024f5-e259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:23:bb:a2:7b:02:c5:6d:b7:db:70:75:f8:
de:04:34:c7:a0:92:28:1d:1a:42:c1:c5:e4:41:b1:
86:31:79:1f:11:ae:5e:c5:8b:5d:69:cf:a2:5c:88:
e8:09:fd:30:fb:84:62:46:dc:34:f4:02:4d:ce:13:
43:9e:56:59:5d:2b:12:d8:8c:5c:d7:9e:69:c7:36:
e5:9b:95:ce:a1:60:17:98:ae:f5:62:a8:5b:2a:76:
1e:95:60:24:8c:9c:d1:36:14:c2:64:47:c5:6b:d8:
89:0a:d3:f5:f0:67:04:f4:22:e4:59:6b:47:ab:51:
7d:5f:36:cb:ec:ee:da:4a:84:9e:84:f5:88:55:bf:
42:e2:0d:e9:3f:9b:77:a7:d3:54:ab:51:d6:7f:31:
76:cd:1e:bc:81:1d:3e:f7:be:a8:36:cc:8a:78:fa:
5e:9d:f5:22:5a:6c:c5:1c:55:2d:ae:7b:76:ef:7b:
0f:63:49:fd:e3:09:e0:f6:46:2a:e5:53:c6:5d:c3:
60:a9:4a:f9:8b:55:e6:34:2f:63:90:55:dc:2e:ea:
df:a5:73:23:bd:c7:70:81:2c:46:f3:62:8e:ec:c9:
f5:ea:3b:80:60:35:ac:83:9b:84:6e:45:bf:79:03:
4a:7d:a3:7c:45:e7:bd:29:5e:2c:72:d0:f9:b1:41:
82:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2A:E2:31:47:CD:47:B4:49:39:29:C8:8B:01:9F:58:50:F5:D2:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A841CB8F4E611EFA8D5E74E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.38.0/24
154.91.138.0/24
154.91.140.0-154.91.142.255
154.91.167.0/24
154.91.199.0/24
Signature Algorithm: sha256WithRSAEncryption
83:8e:de:56:4c:a1:7d:99:37:15:e9:b9:6d:ff:60:59:ef:b8:
e1:a5:75:92:b7:22:43:6c:81:45:f7:e1:6f:41:be:85:a8:93:
51:d3:5b:ec:b7:0b:5d:80:c0:aa:b1:d4:f8:54:03:cb:2f:f0:
20:29:a9:db:65:cf:cf:09:e3:de:ae:bd:7c:3d:2e:e8:43:a5:
46:d7:f0:5b:8e:a4:6e:2f:e7:d5:4d:16:a8:ee:1a:01:44:9e:
09:65:df:c7:b3:d7:93:af:2d:25:19:94:8d:96:b6:a0:b1:96:
ec:4c:73:a5:b3:29:ca:a7:45:ab:7f:6c:1e:a6:da:87:7e:4b:
8b:f0:3c:1e:30:11:55:2d:7c:83:28:4b:ae:c6:ba:b5:67:66:
54:65:62:34:2e:3c:f4:a2:92:6e:55:9d:94:16:33:99:f6:a1:
bd:d1:37:06:97:da:b5:e2:85:f5:48:ff:8b:50:28:8d:9e:82:
1f:30:ba:77:ef:d0:35:a1:45:0b:54:b5:48:e2:03:7f:13:92:
45:8e:98:6d:41:1e:71:83:7d:a5:da:f9:aa:4a:a2:c1:40:41:
0f:34:e9:8b:0e:d4:ea:0f:1f:6e:d6:98:05:c4:3a:c5:19:dd:
a8:2e:57:ea:e2:9e:e4:6e:e8:ea:a7:34:4b:9d:88:09:c9:86:
8b:32:ee:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:12 2025 by rpki-client