Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92448EBE04CC11F0B9B4F995762E951A.roa
File: 92448EBE04CC11F0B9B4F995762E951A.roa (raw, json)
Hash identifier: PaMGrPMCInYM+TRkgzqkpx/tsGb4eh7Rqco6uvtxW8w=
Subject key identifier: A7:B9:B5:11:A0:E8:47:19:15:F2:7A:09:1C:D7:75:55:C4:FA:DB:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01752C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92448EBE04CC11F0B9B4F995762E951A.roa
Signing time: Wed 19 Mar 2025 14:15:12 +0000
ROA not before: Wed 19 Mar 2025 14:15:08 +0000
ROA not after: Wed 30 Apr 2025 14:15:08 +0000
asID: 62240
IP address blocks: 154.194.79.0/24 maxlen: 24
154.194.99.0/24 maxlen: 24
154.194.100.0/24 maxlen: 24
154.194.101.0/24 maxlen: 24
154.194.102.0/24 maxlen: 24
154.194.104.0/24 maxlen: 24
154.194.105.0/24 maxlen: 24
154.194.106.0/24 maxlen: 24
154.194.107.0/24 maxlen: 24
154.194.108.0/24 maxlen: 24
154.194.109.0/24 maxlen: 24
154.194.110.0/24 maxlen: 24
154.194.111.0/24 maxlen: 24
154.194.117.0/24 maxlen: 24
154.196.68.0/24 maxlen: 24
154.196.70.0/24 maxlen: 24
154.196.79.0/24 maxlen: 24
154.196.80.0/24 maxlen: 24
154.196.81.0/24 maxlen: 24
154.196.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95532 (0x1752c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 19 14:15:08 2025 GMT
Not After : Apr 30 14:15:08 2025 GMT
Subject: CN=67dad170-cd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:78:16:b8:c0:ff:0b:c0:28:89:bf:e8:7e:
a2:6e:c5:62:0c:b9:09:09:fb:b9:0b:60:65:15:14:
78:ba:db:c2:08:93:7a:02:a9:24:1f:20:84:f5:6c:
2d:3b:b4:3e:5b:dc:29:78:49:08:fd:a2:9b:75:13:
07:be:37:ec:c1:99:2e:ec:b9:f1:9d:d3:4f:c0:18:
56:f7:f3:9a:f8:7c:f8:a0:e1:2e:43:28:38:77:0d:
19:0c:80:22:1d:ba:25:7c:14:1d:87:5a:4b:9c:af:
9d:dd:04:f6:37:b2:56:c4:89:c1:31:14:ca:2a:4c:
e8:eb:11:10:06:c0:25:48:28:6f:06:aa:ab:81:af:
97:5c:f9:2a:28:46:22:33:41:b9:44:b8:7f:a6:ae:
05:33:66:14:0a:2b:63:04:6f:20:22:0b:93:8c:79:
07:f8:cd:83:02:50:ac:b6:c6:2f:87:ab:fc:5b:72:
3f:40:a9:46:d3:30:fa:60:31:d2:63:e9:04:11:8f:
22:e0:65:06:25:44:cf:b5:53:d1:2a:26:1f:88:b5:
b2:b4:e9:31:56:bd:17:a2:49:b2:01:7f:10:c8:9b:
c7:7f:e0:43:ef:e8:0a:0e:61:e2:d7:17:f6:39:2e:
16:2b:8a:ea:a9:b1:dd:e6:b2:95:38:56:b0:28:2f:
00:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B9:B5:11:A0:E8:47:19:15:F2:7A:09:1C:D7:75:55:C4:FA:DB:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92448EBE04CC11F0B9B4F995762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.79.0/24
154.194.99.0-154.194.102.255
154.194.104.0/21
154.194.117.0/24
154.196.68.0/24
154.196.70.0/24
154.196.79.0-154.196.81.255
154.196.87.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e1:e2:0e:41:66:61:27:ee:b1:84:ea:2d:4d:5c:ce:4c:d2:
34:77:a3:19:2f:37:e6:fd:dc:70:7d:e4:6c:6f:ed:94:79:ca:
70:32:06:12:54:d9:73:03:c8:d6:6e:0f:db:41:4b:cf:d7:6c:
d3:92:25:9a:10:4c:7b:09:aa:c1:47:2f:f0:04:4e:e8:66:c8:
d3:8e:65:d5:bb:0a:ca:61:9b:94:6f:19:b6:d8:37:8a:ad:87:
72:a3:15:32:81:03:b3:21:48:c6:12:81:26:e8:d2:cf:b1:4a:
50:de:22:32:18:86:8a:db:00:27:42:70:bb:20:c1:ee:8a:23:
eb:de:3e:c7:d0:4d:3a:11:f8:7d:8d:eb:40:b0:fc:cd:27:df:
69:e4:aa:0e:3a:3e:33:e6:0d:4b:b7:9d:56:44:70:9b:4b:d6:
6a:15:fb:27:20:27:c5:17:8e:35:60:2a:08:7a:cd:a7:1f:33:
eb:f8:76:62:18:d1:6c:d4:23:b6:0e:df:19:38:58:f2:69:69:
df:cf:a4:35:fc:7a:d5:be:aa:90:68:40:4a:6c:b1:03:f2:6f:
c1:74:ec:17:61:a1:7f:f3:b6:d2:40:20:f0:d4:64:ce:57:93:
b3:63:ce:68:bf:5a:c5:c9:6e:ce:18:46:09:01:b9:c9:ee:6b:
b1:33:69:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:33:18 2025 by rpki-client