Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9071C07EF56E11EF85367E64762E951A.roa
File: 9071C07EF56E11EF85367E64762E951A.roa (raw, json)
Hash identifier: PW3UfPcMQ8uWJNWeXAoqUPg77bgJ8FuYBqP6lu+wNDI=
Subject key identifier: 5A:14:B3:1E:AB:28:72:F8:B2:B0:FD:E3:BF:12:8F:12:C8:1F:C0:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9071C07EF56E11EF85367E64762E951A.roa
Signing time: Fri 28 Feb 2025 00:54:29 +0000
ROA not before: Fri 28 Feb 2025 00:00:25 +0000
ROA not after: Sat 19 Feb 2028 00:00:25 +0000
asID: 17561
IP address blocks: 154.196.131.0/24 maxlen: 24
154.196.140.0/24 maxlen: 24
154.196.143.0/24 maxlen: 24
154.196.144.0/24 maxlen: 24
154.196.145.0/24 maxlen: 24
154.196.237.0/24 maxlen: 24
154.196.238.0/24 maxlen: 24
154.196.239.0/24 maxlen: 24
154.196.248.0/24 maxlen: 24
154.196.249.0/24 maxlen: 24
154.196.250.0/24 maxlen: 24
154.196.251.0/24 maxlen: 24
154.196.254.0/24 maxlen: 24
154.196.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92590 (0x169ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 00:00:25 2025 GMT
Not After : Feb 19 00:00:25 2028 GMT
Subject: CN=67c10945-7163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:8a:eb:a6:b5:00:c7:d7:c9:ff:7a:20:ea:
c9:4c:66:df:53:a3:fe:a9:37:51:91:0d:6b:c3:70:
b9:8d:89:2a:4e:e9:8a:ed:6e:8b:cc:c5:3a:84:c2:
b4:d0:f1:4f:8a:17:3a:3d:2f:30:0b:9d:85:19:33:
eb:d5:7a:9d:92:3d:d9:94:43:25:a4:ca:26:fe:c4:
09:4e:26:7d:ca:c0:c1:f7:07:a5:03:8d:79:2d:3e:
a3:e7:dc:c8:a1:82:01:0c:30:34:20:95:f7:65:23:
21:82:ee:db:81:c6:1f:6f:18:ff:31:4f:43:bd:6a:
eb:8c:24:2c:55:61:54:1c:b6:7f:b3:cc:dd:17:4f:
d4:bb:94:2e:df:3e:3d:c2:ba:f4:83:70:2c:7e:59:
7a:3e:0a:4a:bd:c0:ec:83:15:5a:77:0a:3b:53:26:
85:74:30:98:64:be:a8:90:0b:de:8d:a6:da:00:69:
b8:d3:03:cf:4c:aa:09:66:f8:be:80:48:72:54:f3:
f5:f1:40:4f:d2:bd:c5:03:02:fa:00:4a:3a:d3:75:
54:a5:20:4e:be:3d:a9:d6:b0:bf:7b:d5:78:11:db:
f8:6b:ef:95:af:09:3c:13:01:ce:d4:80:3e:e4:90:
a4:15:ac:eb:f2:e6:66:d8:df:e5:19:f3:df:69:6d:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:14:B3:1E:AB:28:72:F8:B2:B0:FD:E3:BF:12:8F:12:C8:1F:C0:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9071C07EF56E11EF85367E64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.131.0/24
154.196.140.0/24
154.196.143.0-154.196.145.255
154.196.237.0-154.196.239.255
154.196.248.0/22
154.196.254.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:62:71:45:1b:4f:19:4c:7a:8e:00:aa:23:6a:bb:3c:65:ff:
49:b7:4d:92:e1:66:58:c3:06:cd:ce:84:ab:f3:07:41:b2:d7:
50:2e:0a:8f:66:d8:48:30:18:10:8d:d6:fc:25:17:72:47:ca:
82:30:aa:57:cd:3b:dd:ee:bd:53:67:46:e5:a6:6b:b8:ae:cc:
55:cd:8a:1a:d8:f1:5e:17:7f:f4:a5:10:cc:79:a0:fe:e4:52:
43:a1:c0:dc:76:01:2d:01:42:93:b5:f1:7f:7b:83:16:6f:59:
96:47:ba:35:2d:cc:1a:cd:6a:47:e9:38:33:ea:4a:f0:e2:40:
00:a4:1d:77:86:69:b5:52:61:23:60:c4:71:8a:e7:e2:4a:98:
da:00:cb:b1:ce:8e:d3:a7:21:6a:c8:10:1e:df:67:12:1c:66:
e1:a9:56:fb:63:fe:7d:71:5c:3c:98:b7:d5:90:f3:67:52:48:
b8:a7:4a:07:4b:cc:b4:df:cf:2b:a2:48:17:bd:b1:8c:d4:34:
0f:41:71:f3:1a:cd:44:c8:04:c7:15:1f:61:71:fd:6f:3d:8c:
27:73:e2:b5:dd:cd:c6:b3:84:c6:02:a9:14:ca:b6:86:27:50:
58:18:6b:76:2c:e2:00:3b:7e:83:50:75:ba:c4:d3:f4:b2:fa:
2d:e1:d4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:51 2025 by rpki-client