Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B55E6F18095011F09B1659A5762E951A.roa
File: B55E6F18095011F09B1659A5762E951A.roa (raw, json)
Hash identifier: 3uMeZMImjy9dBpwE/XZAfH9L9Etky2WPydZps5vXnbI=
Subject key identifier: 7D:49:31:FC:8B:1F:AF:70:40:E4:40:18:10:A6:CE:B1:AA:B2:DF:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B55E6F18095011F09B1659A5762E951A.roa
Signing time: Tue 25 Mar 2025 08:11:09 +0000
ROA not before: Tue 25 Mar 2025 08:11:06 +0000
ROA not after: Tue 13 May 2025 08:11:06 +0000
asID: 138915
IP address blocks: 154.95.86.0/23 maxlen: 24
154.95.88.0/24 maxlen: 24
154.95.89.0/24 maxlen: 24
154.95.90.0/24 maxlen: 24
154.95.91.0/24 maxlen: 24
154.95.92.0/24 maxlen: 24
154.95.93.0/24 maxlen: 24
154.95.94.0/24 maxlen: 24
154.95.95.0/24 maxlen: 24
154.95.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95733 (0x175f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 08:11:06 2025 GMT
Not After : May 13 08:11:06 2025 GMT
Subject: CN=67e2651d-9cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:b4:8d:a7:aa:fc:b2:be:7e:04:2d:c3:18:
1a:cb:8a:6e:e0:48:33:09:34:5f:e7:16:4f:f2:01:
f6:2f:d0:9f:7e:6b:40:ef:d5:5f:ae:b7:04:bc:46:
7a:9b:21:ef:a3:91:c2:5d:79:09:53:6f:4b:18:c0:
45:fc:1e:ca:41:08:d8:67:c3:59:35:2e:14:49:62:
5c:b4:2e:74:12:6d:4a:33:76:75:67:92:80:45:0e:
a2:bd:5c:8b:c3:20:a4:2a:be:b9:0e:dc:4f:8e:ff:
ba:f2:1b:77:fe:32:d4:0f:e5:14:80:97:26:1b:ba:
3a:23:90:af:7f:e8:4d:12:0f:9e:be:ab:f5:e1:d7:
8a:76:b8:80:f6:60:9c:94:f6:c1:a0:c9:61:10:39:
c3:0e:76:3a:48:3d:9e:fb:7f:1f:d0:31:07:44:41:
5a:c0:67:e8:e5:fe:73:40:de:a8:56:ff:cd:fc:e7:
9c:bd:6a:25:75:5c:a8:c6:aa:8a:80:48:95:64:3c:
86:ea:ab:ba:d2:cd:c1:82:6e:e8:10:f5:a1:5d:ab:
01:ea:8b:c3:1f:60:b9:ab:03:72:d7:93:fa:1d:a0:
8d:09:10:ed:fe:8f:bc:c3:66:36:f4:2a:42:96:71:
07:f0:9f:0c:3a:40:99:c4:f5:07:cd:c2:21:24:05:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:49:31:FC:8B:1F:AF:70:40:E4:40:18:10:A6:CE:B1:AA:B2:DF:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B55E6F18095011F09B1659A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.86.0-154.95.127.255
Signature Algorithm: sha256WithRSAEncryption
13:9c:c5:69:e2:dc:d1:c9:58:0d:5c:dd:0b:dd:66:e1:bd:23:
ef:1d:2e:b1:31:51:b0:a9:fd:2e:98:2d:a4:04:36:a4:3a:ae:
de:b8:bd:1d:43:5a:03:a1:2e:01:d6:ba:ab:72:d6:56:a9:ec:
f8:aa:98:43:9b:03:82:42:ce:1f:1b:6d:bb:96:38:0a:1f:7a:
4e:38:72:b8:61:fe:ea:a9:3e:59:c8:d2:1b:de:b2:68:7a:9d:
d9:2c:14:ad:17:11:0d:19:e6:f9:31:a0:cf:f6:6c:ce:61:d6:
9c:c7:a7:c1:07:99:7d:4b:07:c9:db:f5:72:60:56:4c:c7:6f:
44:05:1b:c1:df:b6:5f:c0:3a:72:7a:e1:9f:11:37:49:53:17:
f2:54:8d:99:fa:af:93:3a:9c:02:7e:b5:83:bd:8e:cf:6e:c0:
b2:d8:06:a0:1d:0d:20:32:2a:f5:d3:50:8a:a3:24:3b:16:ba:
71:72:1e:b3:c0:e9:f8:73:25:3a:18:3e:81:04:af:47:ab:49:
02:96:03:fe:71:0f:9d:9f:ef:ae:1d:6c:fb:2e:25:f4:c9:39:
30:43:9b:28:d0:18:ea:ee:d4:c6:41:1f:4e:3a:ee:20:ac:73:
3c:22:36:d5:03:9a:63:30:4c:06:0c:04:9c:45:7e:02:44:b5:
b0:e3:2c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:15 2025 by rpki-client