Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/961F60E2F82C11EF9E6493A1762E951A.roa
File: 961F60E2F82C11EF9E6493A1762E951A.roa (raw, json)
Hash identifier: xvYoEa20zlre7JEQdOHiqZuZJqkZ5nerXng7PfFFPdg=
Subject key identifier: 1D:28:4F:26:70:FB:42:B5:11:FD:48:49:7D:53:D8:F1:1B:E9:75:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0170A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/961F60E2F82C11EF9E6493A1762E951A.roa
Signing time: Mon 03 Mar 2025 12:39:45 +0000
ROA not before: Mon 03 Mar 2025 12:39:41 +0000
ROA not after: Wed 30 Apr 2025 12:39:41 +0000
asID: 63139
IP address blocks: 154.94.64.0/24 maxlen: 24
154.94.65.0/24 maxlen: 24
154.94.66.0/23 maxlen: 24
154.94.75.0/24 maxlen: 24
154.94.76.0/24 maxlen: 24
154.94.77.0/24 maxlen: 24
154.94.78.0/24 maxlen: 24
154.94.79.0/24 maxlen: 24
154.94.80.0/24 maxlen: 24
154.94.81.0/24 maxlen: 24
154.94.82.0/24 maxlen: 24
154.94.83.0/24 maxlen: 24
154.94.84.0/24 maxlen: 24
154.94.85.0/24 maxlen: 24
154.94.96.0/24 maxlen: 24
154.94.97.0/24 maxlen: 24
154.94.98.0/24 maxlen: 24
154.94.99.0/24 maxlen: 24
154.94.100.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94371 (0x170a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 12:39:41 2025 GMT
Not After : Apr 30 12:39:41 2025 GMT
Subject: CN=67c5a311-b595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:26:fb:4e:73:b8:a7:0e:aa:5e:15:9e:a2:
c2:21:d0:85:9b:8f:19:e2:7a:37:54:5e:5f:4a:4d:
14:bf:75:ca:07:53:34:b9:ea:12:a1:ee:77:3b:27:
15:dd:93:df:09:e0:c9:99:a5:bf:3a:e6:73:80:f8:
7c:3b:c4:8e:6a:02:58:32:07:00:04:fc:6d:b7:7c:
a5:1a:95:d5:6c:77:e5:58:e7:1e:5b:cd:93:c4:a8:
44:d5:07:13:4a:de:dd:42:f7:a6:8a:db:9b:a2:13:
d6:30:db:d9:dd:13:11:05:07:16:b6:3a:3a:16:d7:
06:33:aa:fc:61:ac:5d:b2:96:eb:62:ef:2d:13:8a:
48:13:73:89:6c:82:dc:a3:6a:d2:25:c1:c5:d6:d0:
6b:bc:35:ba:62:5d:7d:53:ab:4c:ca:4b:48:58:ab:
d4:21:0e:ae:15:d2:88:a4:b2:62:62:4e:c7:81:b1:
89:3b:b3:8f:6b:a5:35:e9:fe:d6:8f:62:b9:bc:c5:
0b:ca:d3:33:a9:59:3a:3b:a8:38:9c:ed:b2:12:0c:
8c:4b:fa:ee:4a:38:05:2f:8e:e8:a6:50:5e:d4:fa:
52:3d:0e:d7:9c:f6:43:25:0c:3c:ea:bd:a6:82:75:
f1:fa:10:e7:35:0c:11:a2:d8:c5:ac:cc:2b:b1:1b:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:28:4F:26:70:FB:42:B5:11:FD:48:49:7D:53:D8:F1:1B:E9:75:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/961F60E2F82C11EF9E6493A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.64.0/22
154.94.75.0-154.94.85.255
154.94.96.0-154.94.100.255
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:68:16:7e:af:4f:de:47:c7:97:a2:43:22:79:b1:23:61:a9:
17:87:94:dd:7c:55:58:81:5b:99:9b:f9:43:4d:b8:ae:96:b2:
c7:c6:a1:cb:bb:2d:17:0b:6f:c2:91:41:4c:e5:0e:08:16:5a:
ca:00:2d:13:e6:6c:a2:ea:eb:4f:96:ae:a9:73:59:a8:37:4b:
1d:d9:91:54:75:a4:cf:5b:e9:81:23:2a:76:06:44:ee:63:95:
6e:88:da:06:21:fd:7a:ad:a2:0f:80:1f:ec:6c:33:9d:54:49:
a8:4e:01:a7:5e:72:61:78:70:25:09:13:04:02:c4:81:04:b3:
48:12:25:54:1f:ed:57:1c:0a:2f:22:80:a5:43:66:19:14:11:
0e:3d:79:58:e4:f3:d5:8a:4f:8f:c0:f1:11:3d:07:55:4d:2f:
2d:6f:45:e0:07:47:e5:06:1f:a9:64:cf:d9:75:5b:a5:3c:db:
89:03:0f:33:1d:3e:6e:db:d0:79:94:5c:e5:4b:91:49:d9:74:
75:bb:e4:1f:bb:10:59:c3:97:55:49:23:f1:92:ce:a0:b6:38:
17:7d:05:ce:47:55:80:17:95:75:a0:20:25:b1:46:b8:e2:84:
27:3e:63:8c:3a:4b:2a:86:cf:42:1d:ee:bc:81:59:87:e3:18:
b3:6b:1e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:03 2025 by rpki-client