Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D02E2AFCF66011EFB7550A76762E951A.roa
File: D02E2AFCF66011EFB7550A76762E951A.roa (raw, json)
Hash identifier: yxVaohyypRM6EXSwVfB46cKXAPsjvQLQKGhu6JJ0+S0=
Subject key identifier: 2F:E0:96:68:1D:5A:9D:39:06:77:94:A1:7C:65:11:0C:8B:C9:FC:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D02E2AFCF66011EFB7550A76762E951A.roa
Signing time: Sat 01 Mar 2025 05:48:34 +0000
ROA not before: Sat 01 Mar 2025 05:48:30 +0000
ROA not after: Tue 22 Feb 2028 05:48:30 +0000
asID: 17561
IP address blocks: 154.194.229.0/24 maxlen: 24
154.194.230.0/24 maxlen: 24
154.194.231.0/24 maxlen: 24
154.194.232.0/24 maxlen: 24
154.194.233.0/24 maxlen: 24
154.194.242.0/24 maxlen: 24
154.194.243.0/24 maxlen: 24
154.194.244.0/24 maxlen: 24
154.194.245.0/24 maxlen: 24
154.194.246.0/24 maxlen: 24
154.194.247.0/24 maxlen: 24
154.194.248.0/24 maxlen: 24
154.194.249.0/24 maxlen: 24
154.194.250.0/24 maxlen: 24
154.194.251.0/24 maxlen: 24
154.194.252.0/24 maxlen: 24
154.194.253.0/24 maxlen: 24
154.194.254.0/24 maxlen: 24
154.194.255.0/24 maxlen: 24
154.219.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93486 (0x16d2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 05:48:30 2025 GMT
Not After : Feb 22 05:48:30 2028 GMT
Subject: CN=67c29fb2-6841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:aa:a7:4b:66:a9:9d:71:a8:e3:24:9e:cc:55:
00:eb:ec:24:84:17:5e:11:ac:4e:8d:14:ed:29:9b:
ae:a8:7c:35:f8:af:32:44:38:8f:19:a4:f9:00:76:
7e:42:5b:96:1e:e8:6c:47:6d:13:b9:6f:d0:95:b4:
7c:10:48:a6:47:14:f1:e3:73:2d:2c:9f:97:ee:31:
f3:85:c9:54:a7:0d:2a:05:d9:54:56:5f:23:1b:5c:
0f:09:dd:96:00:41:61:76:15:62:01:c3:04:a6:b5:
af:ac:6d:8e:3d:a5:66:2c:7a:bb:a7:5c:e3:e5:c5:
a3:10:c3:5d:d1:32:28:e0:bd:b0:d7:26:be:0d:58:
41:e2:f6:dd:42:28:27:59:ca:d0:c6:74:92:d5:1c:
c3:67:dc:7e:32:9a:ed:53:35:8e:32:5b:bb:30:52:
6c:83:50:08:23:9d:20:45:4e:aa:fd:c8:30:c8:9c:
b9:67:8b:26:d3:85:14:62:e9:e3:42:9f:ec:3f:f0:
03:ee:e3:4f:5f:60:80:89:d5:62:68:5e:56:1e:ec:
72:1a:44:60:ca:da:64:71:52:4d:65:88:31:2d:7d:
aa:1d:35:66:ba:0f:7c:c3:52:b6:b3:77:74:24:dd:
90:25:db:5b:e9:a3:31:63:47:32:89:87:af:66:c2:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E0:96:68:1D:5A:9D:39:06:77:94:A1:7C:65:11:0C:8B:C9:FC:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D02E2AFCF66011EFB7550A76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.229.0-154.194.233.255
154.194.242.0-154.194.255.255
154.219.64.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:40:8d:c7:4a:65:57:04:d5:90:65:f3:ed:3c:3c:9d:f0:e0:
fb:6a:de:1a:e6:fe:b3:be:32:df:60:61:ac:24:0e:f4:28:99:
e4:a3:e0:28:93:36:8a:35:90:93:49:95:c8:03:26:bf:1e:12:
4f:d2:d7:0c:59:55:b4:06:dc:22:e5:c0:39:8b:84:72:e9:21:
8e:94:ba:40:8a:d3:55:0a:0a:ca:a4:64:ee:b7:55:e7:e6:97:
d3:ce:ae:1d:df:a8:ff:8d:3c:88:24:dc:b6:a0:82:a0:06:01:
66:4a:4a:80:3d:da:04:e0:33:42:ee:7b:82:03:bc:e7:ec:17:
ce:b9:9b:1e:32:ee:7c:ee:e2:86:6b:c4:be:f3:84:c6:b0:81:
d4:c1:16:22:60:4d:3d:75:d1:4b:98:b2:36:32:3f:10:89:93:
52:c6:95:29:35:13:1f:75:97:ab:43:f2:6b:47:39:a8:b8:44:
54:f6:95:d2:8a:d3:3e:7b:24:be:68:30:04:75:75:fc:d5:2f:
30:c7:47:a9:1b:37:a9:0d:3b:9c:06:4f:9f:27:a5:30:70:86:
76:35:b8:ec:2e:81:ea:7e:94:7b:ec:86:d5:f9:be:a7:df:d1:
4c:ac:a8:2c:fa:79:61:b3:73:4b:c8:49:a6:46:b6:ab:86:b5:
f3:03:5e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:33:58 2025 by rpki-client