Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6D4961CF8EC11EF839F8BBB762E951A.roa
File: A6D4961CF8EC11EF839F8BBB762E951A.roa (raw, json)
Hash identifier: m8cxqEOTbobvRflQHpsHT/6j9ot1u+6QEpcWTT/7EMw=
Subject key identifier: E4:A5:30:12:9A:2D:1A:DE:77:9F:A1:9D:6E:B1:8F:B4:DB:C5:3A:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0171C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6D4961CF8EC11EF839F8BBB762E951A.roa
Signing time: Tue 04 Mar 2025 11:34:37 +0000
ROA not before: Tue 04 Mar 2025 11:34:33 +0000
ROA not after: Mon 07 Apr 2025 11:34:33 +0000
asID: 203020
IP address blocks: 154.217.32.0/23 maxlen: 24
154.217.34.0/23 maxlen: 24
154.217.36.0/24 maxlen: 24
154.217.37.0/24 maxlen: 24
154.217.38.0/24 maxlen: 24
154.217.79.0/24 maxlen: 24
154.217.179.0/24 maxlen: 24
154.217.224.0/22 maxlen: 24
154.217.228.0/22 maxlen: 24
154.217.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94658 (0x171c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 11:34:33 2025 GMT
Not After : Apr 7 11:34:33 2025 GMT
Subject: CN=67c6e54d-a70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:97:e0:f4:a5:0a:68:ff:49:16:e0:a7:16:
12:9e:b3:cf:7a:61:26:bd:fd:2e:22:78:cb:41:ea:
cd:c4:76:03:1c:76:3f:00:cd:a9:e3:a7:05:55:5c:
13:55:9b:5e:5f:26:ac:4f:f1:58:05:87:60:09:d8:
4f:b0:ca:f3:79:9c:1e:1c:7a:4a:8d:84:42:48:6c:
f3:c4:1e:a4:98:94:34:29:18:f5:fb:18:81:4d:b4:
5e:da:d9:28:0a:19:5d:72:62:97:9b:29:97:92:46:
b7:74:04:0d:da:c6:75:5a:7b:77:ea:a9:63:e4:e9:
31:01:14:61:e3:32:e6:aa:a2:41:84:4a:6e:30:d9:
a8:05:ba:3c:e4:59:dc:f5:48:31:fe:77:ff:94:f6:
f2:9d:80:ce:39:f4:b8:25:47:ba:d3:c7:59:7d:11:
97:da:27:63:2e:3c:3f:9c:84:82:cf:ca:07:30:f2:
b5:e7:d2:9d:db:39:9d:df:a0:29:57:23:38:a4:72:
41:c5:bf:d5:83:f4:d0:ee:c8:66:0f:6e:3d:2a:7f:
57:88:05:50:5b:a5:71:5e:a2:4e:1c:74:88:04:98:
24:b2:49:af:bc:92:8c:36:28:26:d6:cd:f8:5d:f8:
02:78:e1:8b:25:ed:84:35:07:08:e3:4f:64:02:e3:
94:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A5:30:12:9A:2D:1A:DE:77:9F:A1:9D:6E:B1:8F:B4:DB:C5:3A:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6D4961CF8EC11EF839F8BBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.32.0-154.217.38.255
154.217.79.0/24
154.217.179.0/24
154.217.224.0-154.217.233.255
Signature Algorithm: sha256WithRSAEncryption
44:50:5d:f9:b4:b4:81:19:3b:14:3d:ce:fb:22:30:26:8f:a2:
ea:79:3f:9f:2c:00:9d:af:2a:14:0d:32:a8:89:6b:d6:c0:f3:
e4:ce:df:3d:10:32:5f:07:4e:be:82:28:22:70:77:c8:47:cd:
e7:9a:ac:82:db:04:32:d8:6a:5d:dd:1b:44:a0:c9:06:6c:dc:
e3:4d:ab:f5:7d:87:a6:ae:0e:8d:d6:32:ee:f5:2c:ab:10:b0:
88:ac:e2:b1:06:df:81:e1:ab:53:d0:3f:c4:79:4c:1c:15:3d:
42:21:1f:0b:c7:40:12:89:3b:73:17:17:e0:b6:b9:d4:9b:9b:
91:d4:d1:ff:95:a0:c5:fd:2d:5a:4e:81:ec:e4:e3:ed:c3:ef:
6e:f1:83:97:f7:bd:b8:2a:49:30:f5:17:ef:ae:87:58:90:d3:
b4:e0:67:7d:60:dc:5f:15:84:ff:71:20:ee:f2:7b:a5:85:da:
5a:64:cc:68:5c:ab:b4:95:ed:d2:85:8a:d9:07:18:f3:95:34:
b8:b0:79:fb:6f:f2:1b:63:5d:44:4e:61:19:3b:0f:e0:ff:d2:
38:f0:7b:03:74:d7:70:7e:32:9a:13:fd:42:7b:3b:42:73:37:
88:1a:23:be:02:fc:3d:9d:7e:b2:d9:3f:ba:7a:39:f5:0e:25:
66:b4:1d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:22:58 2025 by rpki-client