Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86032712F8E911EF838FF5A8762E951A.roa
File: 86032712F8E911EF838FF5A8762E951A.roa (raw, json)
Hash identifier: treMAO4mXHT0tTDr/8XjKGizAKjEY+A1hbQI5bzluCk=
Subject key identifier: 8C:16:23:F4:B9:33:FB:1E:45:12:FA:B3:F9:E9:A4:1D:5C:8C:02:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0171BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86032712F8E911EF838FF5A8762E951A.roa
Signing time: Tue 04 Mar 2025 11:12:13 +0000
ROA not before: Tue 04 Mar 2025 11:12:09 +0000
ROA not after: Sun 06 Apr 2025 11:12:09 +0000
asID: 203020
IP address blocks: 154.217.84.0/24 maxlen: 24
154.217.86.0/24 maxlen: 24
154.217.88.0/24 maxlen: 24
154.217.89.0/24 maxlen: 24
154.217.90.0/24 maxlen: 24
154.217.91.0/24 maxlen: 24
154.217.92.0/24 maxlen: 24
154.217.93.0/24 maxlen: 24
154.217.94.0/24 maxlen: 24
154.217.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94652 (0x171bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 11:12:09 2025 GMT
Not After : Apr 6 11:12:09 2025 GMT
Subject: CN=67c6e00d-dd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:80:fe:5d:7b:86:98:56:fb:0e:4a:b5:23:
5e:7b:34:d5:30:7e:12:e6:29:9e:38:b6:6a:a8:f5:
d3:f5:4d:24:72:81:1f:10:75:ab:72:b4:bb:9c:8b:
2d:6d:a2:75:2b:82:e5:4c:9f:3e:15:e3:14:d0:b2:
91:1f:f3:23:b1:3d:29:f2:d7:5f:df:f3:8d:65:57:
8a:f3:a7:ae:9d:15:22:4d:96:e3:66:f5:9b:45:d9:
a7:b8:8f:79:29:d7:d1:c7:7d:ae:3a:16:65:43:8b:
17:c0:9d:35:84:44:5b:59:02:cf:9f:a6:ae:b2:32:
23:1b:49:61:e9:cb:c4:ed:ba:15:f7:7f:b9:f7:84:
90:aa:ea:cc:2b:d3:e9:05:88:53:58:f6:e7:a4:9c:
03:06:e4:b5:84:18:94:08:76:5b:da:53:02:7d:8e:
a4:dd:61:30:9c:8d:f6:55:24:7b:3e:af:18:28:80:
de:61:7d:db:aa:be:50:8e:80:27:2d:dd:e7:d6:94:
e2:50:2e:e7:7f:a2:8c:d3:b5:60:08:6f:f5:fa:d6:
c6:20:9f:ac:e1:e5:fc:1e:0a:68:de:46:3b:d3:ff:
66:3a:9c:0a:0f:9e:bb:6e:87:94:71:10:ec:40:b9:
ea:b7:92:82:60:3a:4f:8c:89:ee:ba:66:62:88:76:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:16:23:F4:B9:33:FB:1E:45:12:FA:B3:F9:E9:A4:1D:5C:8C:02:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86032712F8E911EF838FF5A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.84.0/24
154.217.86.0/24
154.217.88.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:9f:89:97:97:94:65:44:dc:42:27:b2:19:77:3a:12:63:d0:
a1:d4:a8:b2:42:e2:34:95:97:74:d0:11:32:6a:48:94:f0:94:
06:0b:c7:5c:aa:9a:3a:b3:cb:f1:c3:a7:8e:ad:a6:aa:4c:54:
32:23:5c:19:07:6d:45:47:63:64:42:93:78:49:7b:76:60:b7:
1b:1f:1d:08:40:25:e8:17:47:e4:d6:d8:31:25:b7:11:82:ba:
b3:bb:10:98:f9:9c:9d:2c:00:c5:c0:fc:c4:73:f5:65:03:fd:
28:0d:7e:ce:d5:fc:d8:21:92:4b:ef:bb:45:6c:7d:33:62:a8:
6b:03:db:f3:a8:33:c9:9d:01:08:9b:47:d0:c2:a3:74:16:fd:
e0:f7:8a:a7:56:5b:75:fe:a5:a8:b0:2e:39:bf:91:86:a7:b0:
fe:c0:62:51:0b:63:2b:71:b1:09:cf:f5:c2:16:12:a7:57:83:
f1:ac:ca:17:61:e8:e6:f0:a8:db:c5:7f:d4:0d:10:f4:a6:ae:
0b:a5:81:77:d5:d6:9e:07:a1:e3:1a:f1:d9:be:1f:73:0d:6a:
b9:51:cc:59:64:89:57:2f:e1:08:e4:42:40:54:8a:9e:16:3d:
3e:49:f0:56:59:3d:36:67:bf:df:70:ad:f0:48:80:57:5d:91:
7c:87:5a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:02 2025 by rpki-client