Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8AC11EC097311F0AAF0F279762E951A.roa
File: C8AC11EC097311F0AAF0F279762E951A.roa (raw, json)
Hash identifier: UWSCDP2Sk3F8kvmD9otcVI+BAi08UIsHW7Sr17HIFtI=
Subject key identifier: 8C:E7:F4:DE:96:0D:7F:79:30:5A:5A:9A:2A:4C:65:F2:29:AC:13:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017636
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8AC11EC097311F0AAF0F279762E951A.roa
Signing time: Tue 25 Mar 2025 12:22:14 +0000
ROA not before: Tue 25 Mar 2025 12:22:10 +0000
ROA not after: Tue 03 Jun 2025 12:22:10 +0000
asID: 63139
IP address blocks: 154.94.73.0/24 maxlen: 24
154.94.74.0/24 maxlen: 24
154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.88.0/24 maxlen: 24
154.94.89.0/24 maxlen: 24
154.94.90.0/24 maxlen: 24
154.94.91.0/24 maxlen: 24
154.94.92.0/24 maxlen: 24
154.94.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95798 (0x17636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 12:22:10 2025 GMT
Not After : Jun 3 12:22:10 2025 GMT
Subject: CN=67e29ff6-69c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2a:29:f6:bf:d5:d4:7c:68:7a:b2:d9:b1:c3:
7a:59:09:c2:21:82:e1:29:5f:63:34:e5:48:9e:22:
4e:f6:5d:4c:4d:cf:bc:e9:71:f1:e7:1c:9a:cd:7e:
98:70:b8:3d:78:2e:79:3c:0d:4d:98:8d:5e:a1:d6:
48:9c:c5:ed:de:87:01:df:88:b8:d8:92:4e:76:5c:
64:8d:c2:df:04:6c:f8:c6:24:b7:7a:61:cb:ca:7f:
c3:df:95:a2:b7:72:e4:a8:13:bb:69:de:5a:19:76:
fc:54:2d:ae:1e:a6:60:ae:a0:fc:2a:e4:2d:1e:10:
21:c9:3d:25:f9:66:3c:3c:80:35:cb:f0:ac:42:bb:
59:20:7b:80:e6:b6:c1:d6:1c:74:7a:e8:0e:b0:a9:
63:51:73:e8:0c:cf:af:67:ce:94:4b:2e:45:7e:a1:
d2:23:38:55:1c:8c:5f:a8:ac:1e:8d:9c:01:38:2d:
85:ef:72:cc:3d:f8:9a:00:02:42:21:d8:89:0d:2a:
5e:0c:a1:3e:79:55:14:66:62:8d:d4:9d:d0:92:ea:
41:ef:f7:ae:28:d9:6e:91:bc:2d:da:33:a3:e7:90:
23:24:41:4a:a2:58:b8:1a:87:59:6b:f8:fc:9c:3f:
a7:7c:66:6b:1f:82:71:f2:be:e6:56:1d:c6:49:b1:
76:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E7:F4:DE:96:0D:7F:79:30:5A:5A:9A:2A:4C:65:F2:29:AC:13:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8AC11EC097311F0AAF0F279762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.73.0-154.94.74.255
154.94.86.0-154.94.93.255
Signature Algorithm: sha256WithRSAEncryption
16:6d:d3:eb:33:fe:27:4c:48:e4:b8:0a:da:ab:2f:e8:41:30:
90:f8:6c:7d:96:62:37:9f:dc:3f:44:39:6e:74:6f:16:73:76:
4d:dc:6b:77:cb:6f:32:25:26:ad:de:70:74:2c:10:8d:1a:0d:
68:12:c5:a1:66:cc:63:3a:2a:17:c5:27:73:d8:3f:6a:c3:e9:
c8:3f:65:ac:af:4b:f8:88:0d:d7:48:d4:49:58:a8:71:69:35:
21:8c:56:79:cb:50:fe:91:63:0c:1e:db:bb:48:d1:41:42:84:
e3:b3:1e:f0:fb:af:d3:95:f1:79:6d:b0:a4:0d:9f:67:5a:cb:
c6:58:b2:d3:08:b8:c1:5a:cf:31:ed:56:97:64:6b:f4:83:a4:
20:66:e6:19:04:65:1a:eb:91:1c:b2:b7:14:71:ce:be:a0:29:
40:1b:c4:fe:dc:57:82:a4:75:f7:0a:0a:ee:b1:f0:7f:ba:6e:
0f:11:1e:a0:88:d9:c5:a6:0a:c3:4e:23:99:43:16:d7:35:b2:
75:76:58:f4:33:b7:1c:3d:2c:bd:ee:f0:66:f0:6e:54:17:18:
42:f4:fd:f9:23:a4:41:79:7f:7c:9c:cd:ae:9c:aa:02:96:ae:
d2:86:85:c6:45:d9:20:ec:2b:18:7d:62:ba:e0:05:d2:9f:7e:
e8:27:de:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:28 2025 by rpki-client