Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3666D84F50211EF9F6F8C8F762E951A.roa
File: C3666D84F50211EF9F6F8C8F762E951A.roa (raw, json)
Hash identifier: Cact21BDJhzTSTHmQBoHA9fU53rb+9sIvTDbd11qUmo=
Subject key identifier: 1A:CF:F9:5C:F0:EA:FC:B1:7E:DA:A1:47:71:5F:AB:B6:17:2A:7E:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01681C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3666D84F50211EF9F6F8C8F762E951A.roa
Signing time: Thu 27 Feb 2025 12:02:49 +0000
ROA not before: Thu 27 Feb 2025 12:02:45 +0000
ROA not after: Sat 19 Feb 2028 12:02:45 +0000
asID: 17561
IP address blocks: 154.90.104.0/24 maxlen: 24
154.90.105.0/24 maxlen: 24
154.90.106.0/24 maxlen: 24
154.90.107.0/24 maxlen: 24
154.90.108.0/24 maxlen: 24
154.90.109.0/24 maxlen: 24
154.90.110.0/24 maxlen: 24
154.90.111.0/24 maxlen: 24
154.90.112.0/24 maxlen: 24
154.90.113.0/24 maxlen: 24
154.90.114.0/24 maxlen: 24
154.90.115.0/24 maxlen: 24
154.90.116.0/24 maxlen: 24
154.90.117.0/24 maxlen: 24
154.90.118.0/24 maxlen: 24
154.90.119.0/24 maxlen: 24
154.90.120.0/24 maxlen: 24
154.90.121.0/24 maxlen: 24
154.90.122.0/24 maxlen: 24
154.90.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92188 (0x1681c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 12:02:45 2025 GMT
Not After : Feb 19 12:02:45 2028 GMT
Subject: CN=67c05469-8f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:5a:a4:80:9c:27:72:95:8c:03:4d:9a:59:
91:d7:63:31:dc:88:67:29:fd:1a:59:80:63:b7:cd:
14:f4:8b:4e:95:b4:a7:fa:36:f9:ce:7b:96:34:b9:
89:91:71:56:74:c2:f5:83:63:24:a1:62:c7:56:9f:
0f:bc:7c:4e:ab:ef:8b:5f:09:aa:d7:05:57:43:10:
ae:f3:01:fb:ec:2b:90:5f:6c:6a:db:03:4c:6e:e5:
f0:b3:5b:0f:3f:b8:1b:20:a7:9f:f5:00:d6:e4:1b:
66:1d:ad:4f:27:e6:60:32:ed:f5:ca:22:4b:a3:24:
0e:31:7a:5c:1f:de:8d:36:d3:f5:1b:59:44:4c:6b:
c3:c2:a6:51:ca:5b:63:71:e1:f4:85:9f:9e:8d:58:
ff:fc:47:53:96:d5:11:1f:a7:33:41:b9:5b:46:77:
7c:c4:45:8c:d2:4b:76:b0:0e:10:aa:5c:95:61:f9:
a4:d2:4f:e0:ac:7d:0d:b2:79:6e:fc:43:14:77:96:
ed:87:c8:00:fd:61:06:79:61:52:b1:3f:ef:fb:06:
8e:98:64:c2:7c:76:ba:d8:16:82:02:27:2e:51:b4:
1a:b6:e9:23:08:67:72:9b:ce:a9:cd:40:3a:df:6c:
de:38:f8:d7:a8:83:24:43:b4:a2:83:35:be:a6:2b:
b5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CF:F9:5C:F0:EA:FC:B1:7E:DA:A1:47:71:5F:AB:B6:17:2A:7E:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3666D84F50211EF9F6F8C8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.104.0-154.90.123.255
Signature Algorithm: sha256WithRSAEncryption
a0:37:a5:ec:30:25:1f:d3:7d:e4:40:44:c3:69:94:c3:33:42:
fd:8b:45:df:c1:3e:50:4f:b1:de:55:ae:9a:7e:1d:e4:fa:63:
18:d1:90:76:e7:42:73:7e:32:f5:3b:9c:ca:a8:30:ce:b8:f6:
09:20:1c:38:f4:89:36:42:74:15:a1:fc:74:20:8c:e7:c4:98:
e6:3a:d9:67:5e:c2:25:28:25:11:a4:17:85:54:e9:0e:bb:b4:
3e:48:43:58:70:e1:06:1f:c0:61:eb:ff:ce:a6:8e:76:0a:ff:
bf:40:72:2d:d3:9a:4c:1b:61:ad:cd:01:6e:c5:9f:21:ea:e1:
2d:14:81:e5:e1:4b:be:08:04:dd:24:5f:df:5a:e8:c5:15:d8:
5e:d3:60:34:65:f7:01:45:a8:df:8c:ec:ef:13:ff:09:87:d3:
9d:6b:3a:c4:d5:67:da:7d:fe:fa:fc:12:22:6b:c5:41:59:c9:
72:93:65:69:23:0d:4b:08:2f:1f:60:a5:67:e0:ac:25:33:19:
92:2f:f6:41:3a:b0:aa:1c:d0:e2:0b:b4:60:86:56:d9:51:ed:
55:0b:ce:e9:c4:8b:bd:c9:1e:fd:a5:38:1a:85:51:fa:ed:9f:
c5:3d:a8:4a:36:d0:7a:ad:b0:c2:da:68:bf:c9:6f:b2:e1:a0:
74:ff:1c:3f
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAWgcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MTIwMjQ1WhcNMjgwMjE5MTIwMjQ1WjAYMRYw
FAYDVQQDEw02N2MwNTQ2OS04ZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv65apICcJ3KVjANNmlmR12Mx3IhnKf0aWYBjt80U9ItOlbSn+jb5znuW
NLmJkXFWdML1g2MkoWLHVp8PvHxOq++LXwmq1wVXQxCu8wH77CuQX2xq2wNMbuXw
s1sPP7gbIKef9QDW5BtmHa1PJ+ZgMu31yiJLoyQOMXpcH96NNtP1G1lETGvDwqZR
yltjceH0hZ+ejVj//EdTltURH6czQblbRnd8xEWM0kt2sA4QqlyVYfmk0k/grH0N
snlu/EMUd5bth8gA/WEGeWFSsT/v+waOmGTCfHa62BaCAicuUbQatukjCGdym86p
zUA632zeOPjXqIMkQ7SigzW+piu15wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFBrP
+Vzw6vyxftqhR3Ffq7YXKn6+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMzY2NkQ4NEY1MDIxMUVGOUY2RjhDOEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOaWmgDBAKaWngwDQYJ
KoZIhvcNAQELBQADggEBAKA3pewwJR/TfeRARMNplMMzQv2LRd/BPlBPsd5Vrpp+
HeT6YxjRkHbnQnN+MvU7nMqoMM649gkgHDj0iTZCdBWh/HQgjOfEmOY62WdewiUo
JRGkF4VU6Q67tD5IQ1hw4QYfwGHr/86mjnYK/79Aci3TmkwbYa3NAW7FnyHq4S0U
geXhS74IBN0kX99a6MUV2F7TYDRl9wFFqN+M7O8T/wmH051rOsTVZ9p9/vr8EiJr
xUFZyXKTZWkjDUsILx9gpWfgrCUzGZIv9kE6sKoc0OILtGCGVtlR7VULzunEi73J
Hv2lOBqFUfrtn8U9qEo20HqtsMLaaL/Jb7LhoHT/HD8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:45 2025 by rpki-client