Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F08D14A07B211F090BF0248762E951A.roa
File: 8F08D14A07B211F090BF0248762E951A.roa (raw, json)
Hash identifier: vD8TJ1XNWtIUJM+aLTf/1D/XgeKsK71dn9n9RD/hnqY=
Subject key identifier: CB:A9:F2:6B:BE:B8:C7:9E:B7:5D:F5:27:38:DB:FD:F2:2D:24:96:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F08D14A07B211F090BF0248762E951A.roa
Signing time: Sun 23 Mar 2025 06:46:33 +0000
ROA not before: Sun 23 Mar 2025 06:46:29 +0000
ROA not after: Sat 03 May 2025 06:46:29 +0000
asID: 203020
IP address blocks: 154.205.186.0/24 maxlen: 24
154.223.137.0/24 maxlen: 24
154.223.138.0/24 maxlen: 24
154.223.139.0/24 maxlen: 24
154.223.140.0/24 maxlen: 24
154.223.141.0/24 maxlen: 24
154.223.142.0/24 maxlen: 24
154.223.143.0/24 maxlen: 24
154.223.160.0/24 maxlen: 24
154.223.161.0/24 maxlen: 24
154.223.162.0/24 maxlen: 24
154.223.163.0/24 maxlen: 24
154.223.172.0/24 maxlen: 24
154.223.173.0/24 maxlen: 24
154.223.174.0/24 maxlen: 24
154.223.175.0/24 maxlen: 24
154.223.184.0/24 maxlen: 24
154.223.185.0/24 maxlen: 24
154.223.186.0/24 maxlen: 24
154.223.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95663 (0x175af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 23 06:46:29 2025 GMT
Not After : May 3 06:46:29 2025 GMT
Subject: CN=67dfae49-b3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:3a:5e:0d:11:1c:cd:a9:d9:5a:ac:9c:70:
2e:fa:f2:51:bc:f8:bb:74:d5:b4:b8:49:76:87:82:
a7:1e:cd:9f:21:47:49:5f:4e:ef:2d:45:7d:76:b8:
11:f7:a0:a4:14:e7:b4:72:0d:6a:62:ce:cb:31:8b:
0f:fd:c0:57:83:82:6d:70:3f:be:5b:c9:63:02:77:
7b:1d:f8:d7:ec:cf:7b:8b:90:47:b3:97:53:75:c7:
0e:f2:b0:2c:f4:5d:0e:e7:d8:c2:cc:0e:0c:65:18:
68:07:ba:76:57:db:44:c4:86:0d:50:22:2f:77:67:
da:8e:05:ea:93:29:7e:34:b3:9f:37:2c:e9:b2:93:
63:c6:47:39:c1:9a:93:ec:77:88:b2:6e:ef:ae:31:
fc:7e:0f:64:08:5b:c4:bb:cf:20:75:27:70:4d:f1:
ad:c2:21:e7:5c:07:88:11:df:05:7c:e7:7c:1c:5d:
53:2b:13:4d:1e:25:23:fb:b3:5e:e3:4c:0e:7f:f1:
74:e2:0c:c9:a0:14:3a:e4:79:a5:b1:92:67:1e:6f:
0c:ea:56:46:28:41:6d:e5:cd:28:f7:e8:f5:ea:91:
fc:a1:11:36:37:f6:4e:43:cb:53:79:23:52:ba:46:
a9:ae:6b:45:cc:b2:9a:8c:53:41:66:e3:2a:b5:0f:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A9:F2:6B:BE:B8:C7:9E:B7:5D:F5:27:38:DB:FD:F2:2D:24:96:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F08D14A07B211F090BF0248762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.186.0/24
154.223.137.0-154.223.143.255
154.223.160.0/22
154.223.172.0/22
154.223.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:05:b5:c9:52:ed:97:6c:ec:c5:c2:56:cd:e3:dd:a7:92:6d:
43:14:84:ed:10:ec:29:82:65:83:df:69:c2:a0:04:25:19:87:
7c:6c:14:87:20:f9:33:b5:48:00:1e:df:e6:62:de:70:3b:de:
b1:ba:e8:18:97:eb:21:33:97:eb:77:f4:f0:b4:5f:04:23:29:
71:f1:ef:f9:78:ae:04:fb:7d:ee:46:76:c9:19:94:99:63:08:
c6:e2:4d:57:d1:4c:21:32:bf:11:45:0f:dd:31:58:50:cf:ff:
b4:b6:34:bc:c7:35:ec:2c:29:ea:59:1e:6f:7f:05:92:74:8a:
99:83:13:4f:f9:9d:6a:f4:c5:43:4c:75:a1:c8:86:03:cf:10:
09:f2:14:4d:8e:56:f8:62:76:9c:67:a3:63:8a:af:ca:ad:77:
27:b3:1b:c2:44:81:b8:10:34:99:b3:14:f5:c6:68:3d:b9:d4:
18:23:90:30:da:c4:20:9c:86:5a:9a:b0:5e:89:ec:7b:92:30:
a3:00:5b:94:b2:86:4a:94:db:08:69:2b:e1:a3:f0:da:25:d5:
d8:24:27:eb:bd:a4:0d:e0:ce:ff:05:b1:97:a3:8b:10:34:0c:
85:62:64:0c:a5:e3:6e:60:a0:71:64:62:a7:c3:44:01:76:46:
63:83:8f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:49:03 2025 by rpki-client