Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B753C460096611F0B00E4DA9762E951A.roa
File: B753C460096611F0B00E4DA9762E951A.roa (raw, json)
Hash identifier: YOyhn1ZVqaYKejalJYmwfS9X9BV/cKsOSYGOaQdrmj4=
Subject key identifier: 94:FC:E1:AD:84:6B:3E:66:10:A7:1C:F2:C9:E3:6C:4F:4C:D6:37:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017626
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B753C460096611F0B00E4DA9762E951A.roa
Signing time: Tue 25 Mar 2025 10:48:42 +0000
ROA not before: Tue 25 Mar 2025 10:48:37 +0000
ROA not after: Fri 23 May 2025 10:48:37 +0000
asID: 138915
IP address blocks: 154.93.42.0/23 maxlen: 24
154.93.44.0/24 maxlen: 24
154.93.45.0/24 maxlen: 24
154.93.46.0/24 maxlen: 24
154.93.47.0/24 maxlen: 24
154.93.48.0/24 maxlen: 24
154.93.49.0/24 maxlen: 24
154.93.52.0/23 maxlen: 24
154.93.54.0/23 maxlen: 24
154.93.56.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95782 (0x17626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 10:48:37 2025 GMT
Not After : May 23 10:48:37 2025 GMT
Subject: CN=67e28a09-03b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:da:50:b5:40:d4:30:40:c0:bb:0c:eb:a3:57:
12:fe:ff:f3:9c:5b:11:2b:55:b4:f4:23:f7:6b:7a:
26:15:d6:b5:1d:4d:9f:d9:32:4c:ce:ee:4f:70:0a:
19:26:90:16:c0:1b:bc:02:7d:8b:64:48:60:ed:c6:
2e:85:ab:c3:12:c6:9d:69:52:64:f1:08:71:b3:9c:
c8:2b:18:52:03:55:1b:da:de:b5:5c:7d:21:cc:b4:
d2:82:1f:63:c1:cf:59:a7:d8:d6:20:46:aa:c3:35:
1e:1d:9e:fd:fa:37:7e:ff:b7:8e:14:af:b9:5e:50:
e5:14:ae:00:c5:8b:38:ec:ad:ba:fb:fb:1c:94:78:
28:bb:e5:f9:d9:af:3d:57:7f:ef:bb:1a:f4:85:1e:
0c:1e:2f:ff:29:dd:ea:e0:a1:16:cb:50:92:be:77:
1d:1c:b7:dd:8a:ff:40:dd:9d:70:c7:2c:15:b4:c5:
b6:f3:92:aa:cf:3e:b2:b7:69:7c:48:bb:b7:ea:3c:
46:d4:3e:69:65:74:0b:3b:cc:d1:ba:ff:db:43:a3:
27:5b:b1:08:5b:4a:9e:b5:58:7d:c5:69:10:fe:4d:
b3:69:4c:40:92:bc:9b:b6:14:f8:16:1d:f1:58:17:
84:ae:67:87:81:47:5b:6c:a3:03:0c:27:a1:f6:18:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FC:E1:AD:84:6B:3E:66:10:A7:1C:F2:C9:E3:6C:4F:4C:D6:37:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B753C460096611F0B00E4DA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.42.0-154.93.49.255
154.93.52.0-154.93.57.255
Signature Algorithm: sha256WithRSAEncryption
b9:eb:dd:be:49:fb:8e:b2:a7:24:bf:c2:9a:70:f2:b8:98:c3:
95:4b:97:43:86:dc:3f:ac:f3:a1:3d:98:61:f4:96:00:66:93:
0b:76:7a:9d:72:b0:a8:cd:9b:41:28:ab:d0:81:c4:10:83:ed:
2c:4c:25:3e:f9:b0:d6:dd:dd:e5:17:4f:96:59:3f:5d:53:97:
ec:e2:fd:e5:92:51:2a:ae:32:1f:6f:7d:75:89:98:e4:65:f6:
88:a5:36:9b:2a:e2:53:45:9c:78:81:89:8a:6d:5a:fe:4c:a7:
62:8b:36:87:04:fe:3a:11:01:f5:7a:9a:51:d2:d1:4b:50:c7:
76:1d:d3:9a:71:7a:43:65:00:9b:8b:98:b1:10:86:e0:03:b8:
4f:85:bf:7b:29:c9:68:db:b3:33:3f:23:5d:ce:63:10:20:03:
b8:b0:ec:94:a5:d9:55:4b:d6:7f:af:3d:00:22:9b:f4:4c:ed:
c7:4e:d8:18:7f:eb:6b:d2:fb:3b:78:52:fa:d2:48:4a:78:a6:
74:a2:8c:d4:e0:68:77:d8:a6:ec:ee:c5:02:10:49:1d:a5:68:
4e:62:50:d7:23:e5:95:61:cb:ec:e9:5f:1d:f3:8c:f7:73:e1:
2c:c6:9a:bc:4a:17:4e:2c:2b:6f:0e:b3:8b:d4:a8:b2:99:d5:
4b:bc:3d:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:46 2025 by rpki-client