Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/851097AC04C611F0A4226D6F762E951A.roa
File: 851097AC04C611F0A4226D6F762E951A.roa (raw, json)
Hash identifier: uQovX/CigDu+2uFlVQQ7SvcBUEFbkT+QvlboGQlbomk=
Subject key identifier: CE:10:CD:B0:91:91:04:3D:D9:AC:47:68:61:F1:1A:58:F9:C9:32:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01751E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/851097AC04C611F0A4226D6F762E951A.roa
Signing time: Wed 19 Mar 2025 13:31:53 +0000
ROA not before: Wed 19 Mar 2025 13:31:49 +0000
ROA not after: Wed 30 Apr 2025 13:31:49 +0000
asID: 62240
IP address blocks: 154.195.6.0/24 maxlen: 24
154.195.7.0/24 maxlen: 24
154.195.16.0/24 maxlen: 24
154.195.17.0/24 maxlen: 24
154.195.18.0/24 maxlen: 24
154.195.19.0/24 maxlen: 24
154.195.20.0/24 maxlen: 24
154.195.21.0/24 maxlen: 24
154.195.22.0/24 maxlen: 24
154.195.23.0/24 maxlen: 24
154.195.24.0/24 maxlen: 24
154.195.25.0/24 maxlen: 24
154.195.26.0/24 maxlen: 24
154.195.27.0/24 maxlen: 24
154.195.28.0/24 maxlen: 24
154.195.29.0/24 maxlen: 24
154.195.30.0/24 maxlen: 24
154.195.31.0/24 maxlen: 24
154.195.96.0/24 maxlen: 24
154.195.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95518 (0x1751e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 19 13:31:49 2025 GMT
Not After : Apr 30 13:31:49 2025 GMT
Subject: CN=67dac749-a3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:01:69:ca:b1:a9:7d:58:22:64:f6:52:10:
c7:f1:8d:3d:5f:e7:63:f6:88:3e:63:d0:86:42:75:
9e:50:8d:94:70:2e:c4:f1:c5:3e:b0:11:82:3f:36:
83:78:16:69:a2:5b:6d:18:e7:12:ec:00:62:2e:14:
3f:57:8f:d9:35:11:1d:9e:e1:11:e1:38:78:5a:bf:
9a:51:26:74:c1:cf:dc:fd:a5:0e:bf:30:1e:47:9c:
6a:2f:3e:f8:b1:00:56:6a:01:f2:13:5e:0d:2b:4b:
ec:df:04:d8:ca:10:8d:e2:bb:fa:4d:d2:e3:dd:56:
67:4d:99:2f:d7:c3:34:0e:cb:0d:71:39:33:ab:40:
d1:b1:32:a7:84:d1:16:3d:30:6c:94:14:f7:7a:5b:
c1:c1:8f:88:1f:03:de:02:dc:2c:03:f6:fb:38:1b:
e4:0b:55:21:e3:ef:68:1f:5a:11:7c:21:40:de:dd:
cf:9c:b5:88:c3:6f:92:cd:87:96:67:08:a2:00:6b:
12:d9:03:ad:77:35:8f:74:83:ad:e4:61:96:ce:db:
a2:3e:f9:d9:ec:c1:0a:9d:35:a7:e0:58:8f:ac:46:
58:b7:0e:e2:ef:06:2b:4a:30:d2:d3:d3:45:79:73:
e2:5f:ef:5e:bb:08:ad:7d:5b:0b:e0:06:ca:d3:30:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:10:CD:B0:91:91:04:3D:D9:AC:47:68:61:F1:1A:58:F9:C9:32:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/851097AC04C611F0A4226D6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.6.0/23
154.195.16.0/20
154.195.96.0/24
154.195.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:d9:cb:d9:62:fb:ee:59:75:c2:d4:6e:f2:65:8c:6b:6e:7a:
58:7e:fe:f8:08:59:32:9f:27:5d:fd:73:b2:98:42:5c:5e:a0:
06:93:40:01:5b:72:bb:12:65:f4:cd:fa:05:03:0a:3a:be:30:
e5:79:b5:94:1e:82:b3:88:83:b0:fa:74:30:7a:58:ea:81:d0:
f8:32:12:63:fc:cc:6c:ce:37:77:ff:23:89:b2:aa:3a:5f:bb:
45:48:ba:55:21:15:73:cb:29:2c:eb:39:86:5d:c5:99:21:8d:
ea:ae:6f:93:b8:c6:22:90:55:b3:a4:fb:4f:5c:fb:c3:d5:85:
26:5b:66:f2:5a:80:e2:df:6b:13:71:05:92:6d:7c:44:62:44:
1a:3b:83:8d:8c:e3:72:18:77:83:d1:0e:6b:21:5f:10:4c:96:
b8:5d:66:74:ab:a7:bf:37:fd:67:6a:8c:d6:de:12:32:d7:de:
bb:09:47:90:e9:7e:b0:4e:4b:40:26:19:2c:d0:3a:7c:ff:4b:
2c:2f:e9:f0:aa:35:a8:25:72:27:6f:3b:96:db:9b:b4:a8:34:
cd:68:a2:27:b1:b6:86:35:43:fe:bd:68:04:fd:db:91:87:3d:
a6:ad:19:2d:f5:93:b0:61:bd:70:58:d9:60:b2:f6:7d:a7:66:
81:f5:d9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:34:22 2025 by rpki-client