Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92BBE560F4E411EFB0944042762E951A.roa
File: 92BBE560F4E411EFB0944042762E951A.roa (raw, json)
Hash identifier: x296MdocGh30+qwYKcux6fAlfp/NLV/DqXYWmlwC/7E=
Subject key identifier: 32:2D:0E:C4:E5:06:27:B9:86:AC:C8:DD:E2:DB:4E:73:F8:52:A4:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92BBE560F4E411EFB0944042762E951A.roa
Signing time: Thu 27 Feb 2025 08:26:42 +0000
ROA not before: Thu 27 Feb 2025 08:26:39 +0000
ROA not after: Sat 19 Feb 2028 08:26:39 +0000
asID: 17561
IP address blocks: 154.193.128.0/24 maxlen: 24
154.193.129.0/24 maxlen: 24
154.193.130.0/24 maxlen: 24
154.193.131.0/24 maxlen: 24
154.193.132.0/24 maxlen: 24
154.193.133.0/24 maxlen: 24
154.193.134.0/24 maxlen: 24
154.193.135.0/24 maxlen: 24
154.193.152.0/24 maxlen: 24
154.193.153.0/24 maxlen: 24
154.193.154.0/24 maxlen: 24
154.215.23.0/24 maxlen: 24
154.215.24.0/24 maxlen: 24
154.215.25.0/24 maxlen: 24
154.215.26.0/24 maxlen: 24
154.215.27.0/24 maxlen: 24
154.215.28.0/24 maxlen: 24
154.215.29.0/24 maxlen: 24
154.215.30.0/24 maxlen: 24
154.215.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91875 (0x166e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 08:26:39 2025 GMT
Not After : Feb 19 08:26:39 2028 GMT
Subject: CN=67c021c2-fb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:9a:21:a3:cf:5f:b6:d0:b6:20:be:f5:eb:
39:d7:d0:a1:3f:e8:23:3b:42:49:06:e4:d8:f0:a8:
ba:2c:cb:2e:9f:82:ab:bd:84:2a:da:6b:3f:f1:ca:
36:96:3c:52:df:e0:d0:96:e5:a5:22:26:f0:5d:cd:
d4:c2:cf:d4:3e:ef:d9:bb:c4:50:b4:12:51:9b:77:
09:41:ad:df:98:8d:64:ac:73:ce:85:f2:f6:51:e4:
98:0e:94:9c:3c:01:e5:b4:ef:85:3e:6a:db:91:9c:
29:46:01:35:d2:5e:3e:53:a7:01:07:94:a5:5a:e2:
35:ad:58:25:fd:60:cb:35:49:12:2a:6f:3f:ac:04:
ce:a3:b8:cf:98:a9:27:88:f0:84:15:05:f6:03:20:
75:a3:33:b4:c2:d8:e4:d2:8d:71:b4:62:be:fb:c7:
d5:8f:df:eb:52:1e:32:7a:52:61:69:89:c9:c1:33:
7f:ab:72:14:1b:8c:24:0b:4a:bb:4d:ef:a5:97:7b:
84:1e:27:ca:37:4c:10:8c:df:f6:39:2d:a9:53:28:
3d:d0:78:1d:9e:46:dc:f2:1f:5e:d2:ea:d4:c3:99:
29:9c:ae:74:61:0d:b7:59:5a:c9:32:f4:d2:36:17:
97:67:d1:f4:57:c0:8b:a0:2d:83:ec:ac:b7:42:62:
90:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2D:0E:C4:E5:06:27:B9:86:AC:C8:DD:E2:DB:4E:73:F8:52:A4:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92BBE560F4E411EFB0944042762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.128.0/21
154.193.152.0-154.193.154.255
154.215.23.0-154.215.31.255
Signature Algorithm: sha256WithRSAEncryption
53:1b:dc:b7:e5:e7:c9:68:38:31:b6:32:b7:c2:c7:61:e2:39:
d0:c7:d5:c8:c4:1b:63:93:e0:42:12:dd:7c:0e:21:22:ea:36:
38:73:6c:fe:6c:a2:4c:e3:97:8c:2e:c3:26:6d:cb:c9:50:d8:
9b:87:1b:32:e8:9a:28:1e:3f:29:e5:98:e0:86:2a:7a:65:15:
80:77:b4:20:88:5d:ca:79:5e:f4:18:44:32:6a:7c:f0:6b:e6:
89:59:93:ac:58:28:a1:cc:10:45:0d:78:4c:3f:49:3f:dd:37:
f6:67:b7:3e:f1:de:c7:b4:9d:6a:fd:f5:9f:ca:6d:4b:3e:b5:
30:9c:d6:5b:9f:cc:b8:dd:94:12:7d:a3:5a:8f:64:aa:e8:d5:
22:17:5a:4e:0b:52:32:a3:35:8d:6b:74:86:3c:de:f9:f4:ac:
10:38:e7:22:c3:19:18:bf:d2:8b:db:ac:f0:a3:4a:49:57:c9:
8b:68:93:7e:44:62:53:ab:f7:b3:ea:9d:24:81:26:3a:fe:11:
47:45:26:90:f8:b9:ca:25:59:34:97:85:a7:86:0e:1d:25:00:
21:a0:ae:00:76:4c:0d:d2:ea:1b:e9:d5:2c:38:24:7c:80:ea:
ce:ed:c8:ed:60:39:57:27:27:8f:5c:78:08:33:01:44:ec:b0:
f4:e0:a2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:03:56 2025 by rpki-client