Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C284B900AEB11F0AC9C8F6A762E951A.roa
File: 8C284B900AEB11F0AC9C8F6A762E951A.roa (raw, json)
Hash identifier: qA2J+v/Nmc+0AwfjzJ8bva+2rhBem2zFr6s4S1D0a1E=
Subject key identifier: 92:85:6D:C8:5E:BA:12:78:78:20:B1:B3:70:7C:E9:E6:D5:FC:23:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017686
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C284B900AEB11F0AC9C8F6A762E951A.roa
Signing time: Thu 27 Mar 2025 09:12:03 +0000
ROA not before: Thu 27 Mar 2025 09:11:58 +0000
ROA not after: Wed 16 Apr 2025 09:11:58 +0000
asID: 174
IP address blocks: 154.88.32.0/24 maxlen: 24
154.88.33.0/24 maxlen: 24
154.88.34.0/24 maxlen: 24
154.88.35.0/24 maxlen: 24
154.88.41.0/24 maxlen: 24
154.88.42.0/23 maxlen: 24
154.88.44.0/22 maxlen: 24
154.88.48.0/22 maxlen: 24
154.88.55.0/24 maxlen: 24
154.88.59.0/24 maxlen: 24
154.88.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95878 (0x17686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 27 09:11:58 2025 GMT
Not After : Apr 16 09:11:58 2025 GMT
Subject: CN=67e51663-7e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:84:14:8d:f9:0c:1d:bc:64:86:e9:61:49:4f:
21:b2:f0:02:04:8f:fe:e9:b9:15:2b:7d:3b:80:e5:
25:b2:6b:c1:b6:4c:42:e2:cf:53:6b:34:c0:a7:01:
f3:ed:e1:78:9f:1a:40:5e:f9:2b:be:c5:21:ce:5e:
e8:fa:73:ed:d4:a5:b3:78:34:f7:e4:ec:c2:64:1e:
05:a6:18:a5:89:ee:93:92:23:f8:e9:eb:1d:47:20:
c8:c8:4a:0d:7a:b1:3e:ce:14:81:d3:d2:0e:dd:c7:
04:3f:fc:72:e0:92:46:33:fe:81:be:65:9d:b7:b9:
53:e5:e7:f6:e2:b0:67:0d:60:ff:bb:6b:3d:6c:89:
54:27:59:0d:5c:b3:ad:e0:dd:09:b3:0f:9f:b8:07:
06:a3:1f:6e:0e:90:3f:78:d5:00:52:6e:81:b3:05:
c8:d4:fe:2f:1d:34:bc:03:19:9c:cd:0c:73:b2:67:
ef:bc:ac:50:2f:4c:78:92:77:ea:f8:f4:6e:71:97:
f7:04:54:6c:95:cd:90:26:8d:98:d4:79:fe:b7:72:
e9:5c:a4:52:df:ec:41:08:d3:f8:dc:e0:cc:d3:74:
b2:37:df:77:9b:21:45:90:a5:26:68:be:a8:1b:97:
e2:29:97:4a:82:ac:58:58:41:62:7f:e1:15:46:12:
66:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:85:6D:C8:5E:BA:12:78:78:20:B1:B3:70:7C:E9:E6:D5:FC:23:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C284B900AEB11F0AC9C8F6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.32.0/22
154.88.41.0-154.88.51.255
154.88.55.0/24
154.88.59.0-154.88.63.255
Signature Algorithm: sha256WithRSAEncryption
31:6d:13:9f:c8:80:7f:e2:3f:4f:fe:47:06:4d:ac:c1:12:01:
2f:cf:8e:e6:0f:44:03:5c:ce:84:6a:2a:a1:8d:1f:f6:17:db:
88:7a:d0:9b:5f:7b:b9:93:00:de:ea:16:2a:a3:cc:37:1d:53:
ca:5e:b7:a0:7a:21:a3:a6:93:1e:c5:9c:e5:68:ec:ba:a4:fb:
13:de:2c:4a:e6:fc:43:d3:b6:ea:3a:99:c4:6d:ae:19:bf:33:
ad:24:33:52:a8:65:85:c3:ed:82:ee:79:ed:70:c1:16:e8:93:
3d:e9:94:d9:5f:53:5b:b0:5e:5d:95:04:3b:fe:9e:af:23:3c:
ef:c8:41:d8:46:51:e6:eb:00:f6:eb:65:6c:2c:69:31:fd:db:
5f:d7:59:1b:b9:04:b8:08:ff:55:d5:0a:be:90:26:cf:b4:4f:
80:be:69:4b:8d:4f:2a:f6:54:0a:5b:ce:b5:38:d1:db:75:ea:
12:50:23:eb:3b:0c:e4:74:13:40:d1:60:ec:6a:cf:f8:a3:58:
67:5c:69:a8:4f:33:38:6b:72:ec:9b:16:83:8c:24:b8:4e:e6:
18:3e:1e:ae:7b:cb:88:60:ca:8d:70:a0:03:d0:9c:dc:0f:5c:
0b:52:9f:0d:a5:4c:92:5e:a8:36:54:b2:a3:eb:95:98:be:dc:
cf:b9:f0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:46 2025 by rpki-client