Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D08ED0C8F85E11EF81376773762E951A.roa
File: D08ED0C8F85E11EF81376773762E951A.roa (raw, json)
Hash identifier: 2JQsp7rcudCxlayoivf/xYU+N4GQL76YmcpRI21iBhY=
Subject key identifier: 45:70:60:86:E2:04:A4:F2:32:D9:BB:BD:19:C2:52:DB:3F:ED:A4:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01710F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D08ED0C8F85E11EF81376773762E951A.roa
Signing time: Mon 03 Mar 2025 18:39:18 +0000
ROA not before: Mon 03 Mar 2025 18:39:14 +0000
ROA not after: Mon 31 Mar 2025 18:39:14 +0000
asID: 49505
IP address blocks: 154.209.209.0/24 maxlen: 24
154.209.211.0/24 maxlen: 24
154.209.212.0/24 maxlen: 24
154.209.213.0/24 maxlen: 24
154.209.215.0/24 maxlen: 24
154.209.216.0/24 maxlen: 24
154.209.217.0/24 maxlen: 24
154.209.218.0/24 maxlen: 24
154.209.219.0/24 maxlen: 24
154.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94479 (0x1710f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 18:39:14 2025 GMT
Not After : Mar 31 18:39:14 2025 GMT
Subject: CN=67c5f756-c501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:31:c1:6d:6e:ae:c0:22:89:93:15:aa:f5:
2c:65:d7:3b:eb:9e:b1:5b:71:1d:6e:25:d5:1e:ce:
21:c6:13:6d:67:c6:3f:7f:f3:e7:d4:bc:37:5d:78:
5f:0c:84:bf:b7:b1:d5:e0:ce:d9:7f:3b:6e:4e:42:
0b:6b:3d:21:77:b4:1e:cd:a3:59:43:2b:bf:36:84:
f7:e3:8f:d6:16:02:00:62:ad:7c:b3:7e:54:00:aa:
61:3d:c3:da:f6:62:fc:f5:76:c9:dc:d5:66:61:36:
26:07:1b:30:c5:45:47:35:2f:d8:04:3f:cf:f2:98:
70:d1:0f:66:7f:0a:17:e8:31:d8:2a:73:68:b2:3d:
64:ad:64:67:bd:fd:23:46:42:bb:ed:21:19:f7:fd:
a3:f1:d9:2b:7c:0b:17:65:bc:67:b2:f0:8d:26:be:
27:ef:c3:98:c4:a7:d9:0b:83:43:7d:f2:18:7f:ed:
f5:ec:ef:08:06:81:8e:fb:e4:de:b8:eb:da:28:68:
30:6c:0c:ab:10:b7:d4:26:27:69:21:fd:8e:d3:56:
56:53:9d:ee:57:2e:60:6e:3a:30:88:5f:e7:6e:2b:
c6:6c:67:4a:08:b0:92:ab:61:35:cd:a0:96:8a:42:
57:1f:9b:27:5d:10:20:54:de:ca:ce:23:12:e6:de:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:70:60:86:E2:04:A4:F2:32:D9:BB:BD:19:C2:52:DB:3F:ED:A4:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D08ED0C8F85E11EF81376773762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.209.0/24
154.209.211.0-154.209.213.255
154.209.215.0-154.209.220.255
Signature Algorithm: sha256WithRSAEncryption
3f:73:d4:9c:4f:a2:a4:ca:6e:c5:05:e2:7d:b2:68:54:1c:6d:
8e:c5:58:8e:d8:61:39:70:8d:3b:a7:14:96:61:30:d3:1a:f8:
6a:f9:bb:d0:ed:02:db:f4:4e:39:7f:c1:ff:98:34:16:7f:27:
b1:11:0f:8a:6e:48:e8:a4:74:79:b8:7a:37:e3:e4:da:cb:7d:
71:12:21:28:a7:e3:0b:f6:c2:5b:53:8c:5a:5d:3e:ab:bc:66:
bc:5f:e1:20:fc:2d:40:d0:73:3e:e9:b4:de:52:19:3a:9d:eb:
e1:f4:82:f1:92:20:13:0c:51:89:b7:f2:f0:12:a7:d1:14:13:
b8:c7:ea:74:4f:f6:df:4f:9b:93:db:00:e9:9c:12:1f:15:49:
7e:92:25:a6:12:db:08:fe:c7:7b:cd:8e:b2:90:1e:a2:2a:5d:
6c:aa:fa:74:7b:a9:8a:53:14:54:45:5d:f0:58:40:17:66:23:
9a:32:db:86:9b:04:2c:73:e7:f0:7f:38:79:d6:44:92:72:1c:
69:1e:25:55:80:2f:68:f4:46:f8:67:c6:7d:bb:fd:44:ee:3a:
57:cf:c8:4d:dd:5a:0f:03:7d:61:34:5a:c8:5c:9a:fb:37:a7:
e1:2f:24:92:45:26:f0:e2:a3:64:32:78:2c:89:7c:3e:fb:c3:
4a:ce:f6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:39:08 2025 by rpki-client