Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93130F10095311F0B90DBBB5762E951A.roa
File: 93130F10095311F0B90DBBB5762E951A.roa (raw, json)
Hash identifier: TrEfXMpQuaRw/shmdLrKxLFsgxB1+Eqrk0QiSSs3sXA=
Subject key identifier: EB:D1:19:2E:AC:30:E5:53:47:CD:4D:70:08:94:52:96:EE:4A:6F:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93130F10095311F0B90DBBB5762E951A.roa
Signing time: Tue 25 Mar 2025 08:31:40 +0000
ROA not before: Tue 25 Mar 2025 08:31:36 +0000
ROA not after: Tue 03 Jun 2025 08:31:36 +0000
asID: 138915
IP address blocks: 154.93.97.0/24 maxlen: 24
154.93.102.0/24 maxlen: 24
154.93.103.0/24 maxlen: 24
154.93.106.0/24 maxlen: 24
154.93.107.0/24 maxlen: 24
154.93.108.0/24 maxlen: 24
154.93.109.0/24 maxlen: 24
154.93.112.0/23 maxlen: 24
154.93.120.0/24 maxlen: 24
154.93.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95739 (0x175fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 08:31:36 2025 GMT
Not After : Jun 3 08:31:36 2025 GMT
Subject: CN=67e269ec-d280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:97:54:97:6e:f8:56:e0:fe:2e:d6:ad:d2:
38:53:49:03:65:9e:f5:3e:de:2c:04:42:9b:20:f4:
88:b2:4f:7d:69:97:95:cb:b4:87:00:59:8b:aa:ec:
56:aa:05:5c:72:d7:02:42:f6:5e:b5:ce:8b:44:c7:
22:d5:94:31:70:86:1c:9a:6e:21:03:4e:21:6f:25:
64:ab:38:80:75:a1:5d:19:4e:17:f8:b8:d4:43:99:
e3:04:04:74:3e:d9:93:76:9b:74:be:a5:4c:5b:ff:
cd:2b:d8:1c:94:23:7f:fd:d2:0a:f7:8f:bb:63:cc:
7a:c1:36:9c:ab:42:7a:a6:8e:37:5a:a2:d8:9c:11:
ab:9c:ec:22:cd:be:c8:c0:70:18:a4:58:c6:9d:cc:
34:31:99:e6:8d:44:86:ce:e7:0e:cd:ce:88:ba:72:
6c:e0:b0:d6:e5:2d:a9:6b:9d:76:d5:a2:ae:b5:7e:
d3:26:ae:5b:25:dd:02:1a:6f:19:02:b4:23:0e:81:
85:70:83:59:75:eb:7d:c1:3e:c5:c2:8d:76:f7:85:
e1:57:79:4d:75:ac:be:42:6b:59:e1:43:e5:8a:34:
43:8c:dc:fc:c6:8d:b9:b1:49:2b:1c:0d:c8:37:9e:
be:33:ed:ee:b6:f1:a8:4e:b5:00:d0:48:f6:8b:97:
b5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D1:19:2E:AC:30:E5:53:47:CD:4D:70:08:94:52:96:EE:4A:6F:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93130F10095311F0B90DBBB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.97.0/24
154.93.102.0/23
154.93.106.0-154.93.109.255
154.93.112.0/23
154.93.120.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:86:1e:48:07:7a:26:00:89:d2:fc:10:36:d3:ef:68:41:f1:
3a:88:08:3b:dc:63:37:28:18:7b:10:85:21:17:b9:fb:98:62:
4c:68:b8:29:6f:9e:04:31:1c:76:9f:dd:dd:14:48:f7:0d:4e:
c5:c4:3b:3d:f1:36:3f:e5:55:ef:ae:5b:41:e5:a4:22:e6:d8:
b1:57:39:a4:78:0b:e6:36:4f:59:08:3d:ba:a5:5f:39:37:61:
ad:d0:a1:64:de:10:ed:63:7c:65:8a:a9:dd:f9:b0:ba:22:df:
d4:aa:59:be:f7:5a:3f:3d:7e:a4:c4:1a:3d:b9:2b:b4:4a:95:
65:7a:1d:7e:4b:52:24:c4:b5:b3:a5:91:70:bd:f9:97:8d:18:
2d:fd:f2:5e:f4:79:cd:01:b9:ec:a8:8a:11:43:0e:ef:02:f6:
28:89:ff:54:22:1f:71:3c:80:86:7c:60:6d:50:d3:b8:9e:e3:
55:ef:32:b4:4a:3c:db:8f:38:18:ed:f3:21:32:41:e5:da:95:
47:8c:01:74:ae:e1:9f:37:63:8f:1e:9d:9d:14:29:52:d2:bc:
6a:bc:f9:63:ed:c7:08:92:1c:79:9f:32:57:58:cb:e8:15:52:
88:30:ba:fe:b5:d5:14:62:c9:31:f1:33:ed:bf:cb:7a:5d:8b:
82:72:88:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:54 2025 by rpki-client