Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FD7AF20F83A11EFB9A55F80762E951A.roa
File: 7FD7AF20F83A11EFB9A55F80762E951A.roa (raw, json)
Hash identifier: cXm00+apXPEPVsmeGtyHfzdGHCAn1splefR5FHWQ6vA=
Subject key identifier: 09:13:B6:19:F9:AB:BE:F0:7B:2B:4B:4F:6D:EF:51:50:F8:B3:05:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0170E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FD7AF20F83A11EFB9A55F80762E951A.roa
Signing time: Mon 03 Mar 2025 14:19:21 +0000
ROA not before: Mon 03 Mar 2025 14:19:17 +0000
ROA not after: Sun 06 Apr 2025 14:19:17 +0000
asID: 395793
IP address blocks: 154.196.208.0/24 maxlen: 24
154.196.209.0/24 maxlen: 24
154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94435 (0x170e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 14:19:17 2025 GMT
Not After : Apr 6 14:19:17 2025 GMT
Subject: CN=67c5ba69-eeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:21:07:d6:cb:7f:f7:ac:b6:fd:f9:65:ed:
33:69:87:89:aa:34:39:29:c9:db:55:cd:86:f8:32:
0b:d1:3e:97:96:e8:e1:aa:40:b6:12:d2:37:e0:14:
8b:39:27:1f:07:a4:7c:00:8f:4f:c5:8f:27:f4:a8:
b9:b0:17:4d:4f:c8:93:8e:96:2a:7f:19:f8:91:12:
02:74:da:15:a6:bd:28:f8:84:02:34:5d:4b:eb:4f:
a5:19:65:6a:a8:79:4f:c7:e5:ec:92:ae:33:24:0a:
95:64:15:71:3b:d7:8d:6a:7d:d8:bd:c8:81:31:f5:
02:a4:49:11:71:81:25:04:47:d8:37:0b:fd:eb:5b:
63:ce:c5:69:2b:21:48:ed:51:91:4c:a5:ab:94:30:
92:9b:46:6e:be:f5:a9:26:e6:1a:96:f0:0d:2e:ae:
b4:bb:96:e9:ef:4f:82:3e:b1:b8:1e:ad:98:a2:ad:
35:08:ab:b7:b9:27:37:63:57:d7:05:d2:8c:fd:85:
68:e0:c9:56:75:f7:b0:11:83:7b:23:d9:b7:02:f0:
82:a4:d1:a9:34:22:85:06:e8:18:18:f8:f4:61:0d:
02:12:68:76:93:0f:45:98:77:45:60:c8:30:ac:0e:
28:d0:53:91:7a:bb:b8:23:8d:d5:bf:2d:1d:af:f5:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:13:B6:19:F9:AB:BE:F0:7B:2B:4B:4F:6D:EF:51:50:F8:B3:05:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FD7AF20F83A11EFB9A55F80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.208.0-154.196.212.255
Signature Algorithm: sha256WithRSAEncryption
5e:8a:a0:bf:52:c9:63:33:ad:74:e7:65:ff:f4:58:04:6d:1d:
24:ca:98:9b:73:aa:73:2e:66:ab:56:cf:3c:d4:5e:54:d4:08:
b5:99:8e:c5:13:c9:29:35:d9:ff:6c:3d:7b:b5:be:37:88:2c:
55:82:b9:d5:ff:2f:40:d0:98:9a:a4:95:45:95:e4:84:a4:56:
8e:60:73:d0:14:35:d0:11:04:b4:cb:c1:22:e1:6b:39:bd:b9:
a0:de:ce:5b:b4:58:b4:01:71:ca:df:81:c2:cd:b9:29:d2:ed:
aa:24:71:6a:d5:07:5b:33:12:e4:39:24:c3:c6:ff:b1:e3:13:
d0:e1:82:cf:fc:a3:45:12:07:2b:2b:b2:a9:9b:7d:24:fc:7a:
94:a1:3f:74:47:cb:b7:7d:07:21:1d:e8:91:ab:6d:e2:d3:9a:
01:84:e1:f0:14:0d:72:ac:30:6c:ca:4c:d3:8b:46:ab:a5:75:
70:a1:c2:15:cc:c2:83:3c:3a:67:63:2f:85:dc:a3:ad:a1:3c:
5b:aa:39:32:2e:a7:3f:05:2b:4e:87:60:7b:0d:16:bb:de:ba:
67:cf:27:db:a5:bd:f7:1b:38:fa:bc:b7:c1:73:71:30:02:4c:
c3:b2:62:36:64:89:84:63:2c:76:b4:be:42:f3:0b:3a:5e:3c:
46:c1:af:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:39 2025 by rpki-client