Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B169FE4041711F0AE3E57A5762E951A.roa
File: 7B169FE4041711F0AE3E57A5762E951A.roa (raw, json)
Hash identifier: LWGtLfEu7Ve7Dfi3y8XSqlpXys3JNx3cQZi7vfWqIMk=
Subject key identifier: BD:B2:6D:A7:2C:A9:12:45:95:FC:92:CA:4A:29:83:DC:DD:05:FD:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B169FE4041711F0AE3E57A5762E951A.roa
Signing time: Tue 18 Mar 2025 16:38:54 +0000
ROA not before: Tue 18 Mar 2025 16:38:50 +0000
ROA not after: Mon 05 May 2025 16:38:50 +0000
asID: 202656
IP address blocks: 154.219.16.0/24 maxlen: 24
154.219.24.0/24 maxlen: 24
154.219.28.0/24 maxlen: 24
154.219.246.0/24 maxlen: 24
154.219.250.0/24 maxlen: 24
154.219.252.0/24 maxlen: 24
154.219.253.0/24 maxlen: 24
154.219.254.0/24 maxlen: 24
154.219.255.0/24 maxlen: 24
154.222.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95436 (0x174cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 16:38:50 2025 GMT
Not After : May 5 16:38:50 2025 GMT
Subject: CN=67d9a19e-d0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:08:6f:6b:5a:d1:2f:a4:e3:7e:33:0c:e5:
c8:85:12:97:ae:5a:f0:da:ba:fa:c1:47:70:fa:fa:
13:3d:e2:cb:c8:c6:2f:39:7c:24:54:16:ea:a3:ac:
e0:cc:b8:ae:f1:04:bc:f9:aa:ba:9b:94:ba:65:66:
57:0e:71:55:d1:af:ea:16:df:d2:ff:9f:b9:89:06:
1a:2c:d0:50:e3:5c:de:61:df:03:a1:ae:a8:b1:65:
33:37:ed:4c:3d:d6:a6:da:96:9e:73:ef:df:6c:bd:
78:5f:0f:3c:59:d0:2a:f9:90:05:bb:f4:e9:2d:62:
7e:07:5d:ce:0e:f1:de:3e:96:25:37:f2:8b:3b:79:
73:f9:de:22:ac:c8:47:8c:36:5c:f7:a4:36:b0:e9:
b9:2b:ad:2d:87:41:07:64:9d:13:af:63:a9:1a:8b:
23:f0:d6:81:b4:47:14:71:b9:0e:e9:c9:57:5d:61:
1d:d1:67:61:8e:40:81:ad:7a:57:a0:bf:a3:e6:cf:
79:7c:eb:f9:59:8f:af:ed:85:85:ac:2f:d9:b3:81:
b0:8a:ee:1a:83:87:41:db:f7:2f:f6:1d:06:4c:00:
7d:3c:49:b4:c8:b0:ef:d6:d8:6c:6f:f4:05:a5:46:
8b:e6:c1:b1:95:0d:4e:89:da:6a:11:5b:c1:b7:7c:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B2:6D:A7:2C:A9:12:45:95:FC:92:CA:4A:29:83:DC:DD:05:FD:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B169FE4041711F0AE3E57A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.16.0/24
154.219.24.0/24
154.219.28.0/24
154.219.246.0/24
154.219.250.0/24
154.219.252.0/22
154.222.192.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:4b:31:a8:59:1c:6d:6b:c8:f5:47:1c:52:a4:f1:05:72:bc:
7a:0f:ed:12:86:8c:94:46:3d:a9:c4:60:18:92:75:04:90:5d:
3a:10:e6:d4:5c:a9:2e:3c:21:0d:8d:32:96:d7:96:7c:a5:7a:
5b:46:bd:93:39:10:26:16:87:15:18:62:fa:9b:9b:f3:ca:19:
72:e5:b3:51:6c:fd:7e:1a:df:ce:b0:17:e4:9d:09:c6:7e:b9:
3a:28:0e:94:e8:63:5c:e4:ef:ce:83:4b:3a:f2:ce:e4:40:0c:
76:54:4f:f7:b8:9b:ed:eb:6d:a1:29:ea:40:7a:b6:8a:39:95:
c5:cb:79:ba:cb:48:41:a9:71:83:12:92:60:f7:9c:be:34:4f:
0b:c7:b3:f8:31:4f:66:23:9b:d7:ee:00:bc:9b:2f:7d:c3:1a:
54:95:1d:65:77:76:a2:31:d0:de:fe:2f:6e:50:60:be:8e:7b:
1c:d6:d9:6c:72:39:bb:ba:dc:d6:57:03:e8:8d:55:02:be:b8:
fb:bd:b2:24:c5:d1:29:a6:0b:7e:b6:d8:f5:b6:1b:55:81:bb:
6b:19:73:64:08:2b:60:6e:5a:a3:4d:a3:33:3e:18:22:e3:be:
54:8a:e3:d7:fd:a6:b2:38:a2:18:5d:ef:8c:91:a4:bd:be:a8:
81:b2:13:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:08:27 2025 by rpki-client