Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD34ADC8096511F083E7A1A4762E951A.roa
File: BD34ADC8096511F083E7A1A4762E951A.roa (raw, json)
Hash identifier: F0jHSOVOeOoqAVoWpnXjXFKKwL2KwIhNtbjINNxrZCY=
Subject key identifier: 96:A7:31:CF:3F:F1:B3:EE:E1:83:93:F8:DB:60:CD:E4:10:34:97:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017624
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD34ADC8096511F083E7A1A4762E951A.roa
Signing time: Tue 25 Mar 2025 10:41:42 +0000
ROA not before: Tue 25 Mar 2025 10:41:38 +0000
ROA not after: Fri 23 May 2025 10:41:38 +0000
asID: 138915
IP address blocks: 154.90.44.0/23 maxlen: 24
154.90.46.0/23 maxlen: 24
154.90.50.0/23 maxlen: 24
154.90.58.0/23 maxlen: 24
154.90.60.0/23 maxlen: 24
154.90.62.0/23 maxlen: 24
154.93.34.0/23 maxlen: 24
154.93.36.0/23 maxlen: 24
154.93.38.0/23 maxlen: 24
154.93.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95780 (0x17624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 10:41:38 2025 GMT
Not After : May 23 10:41:38 2025 GMT
Subject: CN=67e28866-3443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:69:44:cd:dd:7b:c8:e3:48:e2:7d:03:b9:
25:94:9c:48:00:40:0a:89:14:f8:65:52:4c:44:84:
a9:6a:cf:48:40:ef:a0:61:ca:03:f5:55:1a:fe:1d:
7a:db:06:8b:a5:41:c9:5f:3b:dd:a0:7b:17:e0:7a:
40:c2:b2:57:28:6f:58:e6:fd:bb:44:a1:75:f9:97:
02:33:91:de:dc:27:a9:e0:6d:17:0c:af:8a:c0:ae:
db:0b:b9:81:8b:a6:0e:51:3e:55:c7:2d:bc:ed:82:
5d:93:d4:4a:59:29:0d:f6:4b:82:41:1a:ad:69:f5:
9b:e2:e1:72:a8:94:02:02:1a:82:a8:68:d0:e9:9b:
43:df:37:fb:9a:58:ec:05:db:7e:29:f5:d9:ef:1c:
0b:9d:30:26:6e:47:9e:43:d6:47:8c:ba:2e:cb:5f:
a3:1e:4a:0a:1a:de:dd:07:64:04:f3:d2:a0:0a:0c:
79:0d:9d:26:bb:70:5c:0b:00:47:be:ca:13:26:2b:
13:8b:1a:bf:71:93:e0:0e:bb:2e:ec:a5:69:40:b5:
86:81:d5:36:3e:0d:26:67:4c:56:81:51:ee:08:96:
1e:b7:9d:78:2e:7c:11:22:4e:27:7a:25:52:20:fe:
90:60:d7:b7:96:bf:84:2b:7c:00:13:51:48:b4:bb:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A7:31:CF:3F:F1:B3:EE:E1:83:93:F8:DB:60:CD:E4:10:34:97:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD34ADC8096511F083E7A1A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.44.0/22
154.90.50.0/23
154.90.58.0-154.90.63.255
154.93.34.0-154.93.41.255
Signature Algorithm: sha256WithRSAEncryption
48:dc:f5:ff:f0:08:d1:b5:00:3b:57:97:1d:5f:a4:bd:09:74:
20:24:59:08:ff:35:06:46:1a:d4:26:5a:60:50:e8:56:49:1b:
8a:47:3f:e4:e3:7c:78:b6:92:e9:53:ec:6b:12:03:cb:5c:70:
cf:49:58:e1:cf:48:32:70:e8:06:0e:3e:e7:7c:9a:40:26:fa:
67:eb:86:c8:83:15:d1:83:f8:40:01:4d:3d:50:6c:8f:83:ab:
fc:4c:17:21:94:ab:23:3d:a5:09:c0:53:b5:f2:55:44:3b:47:
d8:c1:77:e3:f2:81:34:4b:ed:ec:11:aa:13:6e:c1:6b:7f:f0:
08:a7:f1:6c:aa:2b:b5:cb:4f:77:43:e4:d0:82:03:5a:8b:8e:
17:34:68:bb:ae:27:f1:46:54:0b:2f:0f:13:16:0b:d7:8c:e3:
f8:99:3c:f9:fd:61:84:c2:4d:47:5d:a4:42:8c:7c:68:89:d8:
68:32:44:70:24:a4:7e:aa:b6:db:d1:7a:86:c6:5b:8a:25:52:
4a:b8:b7:78:4b:90:13:7c:26:30:a1:bb:a2:58:44:71:cd:4b:
d3:d2:fc:55:a7:7f:66:e8:17:74:30:5d:90:e7:d8:11:60:63:
23:15:43:9b:75:2e:e2:e4:87:83:90:1d:70:5c:4a:e4:82:ed:
f1:a0:97:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:26:58 2025 by rpki-client