Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D71A855A095B11F094672869762E951A.roa
File: D71A855A095B11F094672869762E951A.roa (raw, json)
Hash identifier: TNCEAwDQ4qpGX+YVbBE88gitezeIIM6J0lxzPBpTCI0=
Subject key identifier: CF:FE:38:BF:83:0D:5C:61:57:F0:E6:16:E5:9B:9E:F3:E0:17:D4:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017612
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D71A855A095B11F094672869762E951A.roa
Signing time: Tue 25 Mar 2025 09:30:50 +0000
ROA not before: Tue 25 Mar 2025 09:30:47 +0000
ROA not after: Thu 15 May 2025 09:30:47 +0000
asID: 138915
IP address blocks: 154.203.128.0/23 maxlen: 24
154.203.130.0/23 maxlen: 24
154.203.132.0/24 maxlen: 24
154.203.136.0/24 maxlen: 24
154.203.137.0/24 maxlen: 24
154.203.144.0/23 maxlen: 24
154.203.148.0/24 maxlen: 24
154.203.149.0/24 maxlen: 24
154.203.150.0/24 maxlen: 24
154.203.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95762 (0x17612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 09:30:47 2025 GMT
Not After : May 15 09:30:47 2025 GMT
Subject: CN=67e277ca-b7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:db:ed:a9:80:55:8c:ee:af:a8:69:b4:b2:
1a:70:16:68:38:cf:82:58:44:b9:6e:9a:bb:c6:d7:
8e:32:7d:5d:1e:b8:c7:87:ce:10:84:1a:26:6c:db:
44:bf:ee:fb:ae:df:61:d5:95:6c:8a:39:04:b1:d2:
65:b5:22:9a:4f:e0:0d:7c:97:7e:a3:bc:a9:9c:88:
99:f2:b1:51:06:0a:ad:bd:c9:97:a5:08:9c:91:b5:
98:77:cf:98:e4:28:f7:9d:e9:bc:b2:5a:e8:8f:48:
a6:f6:3f:c2:78:59:b4:cd:a2:92:17:f5:86:3d:fb:
e2:7b:7d:ee:39:47:81:05:b4:af:62:16:f7:32:78:
cb:a3:d4:d3:db:ad:93:0d:ea:86:46:93:45:f6:61:
00:b2:9d:70:27:c0:ff:d8:5b:5c:5d:fe:c4:04:f5:
50:8a:f7:8a:a8:0a:5b:ed:91:df:43:54:08:fb:7d:
03:3d:04:41:b9:69:27:08:ff:fc:22:9c:46:3f:a5:
e0:64:67:17:4a:68:36:04:cc:75:69:1f:22:8a:7d:
24:24:a1:1c:67:be:5e:aa:a1:7a:5d:ca:71:e3:44:
08:2d:84:72:e2:b0:d4:24:1f:4c:9e:d8:f5:98:fa:
4a:b4:b9:7a:4c:8a:16:da:b7:04:df:7f:21:82:5b:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FE:38:BF:83:0D:5C:61:57:F0:E6:16:E5:9B:9E:F3:E0:17:D4:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D71A855A095B11F094672869762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.128.0-154.203.132.255
154.203.136.0/23
154.203.144.0/23
154.203.148.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:38:6f:4e:15:35:2f:ca:ce:04:57:c2:e3:df:40:1a:2f:5b:
de:35:2a:fd:21:cb:38:b4:61:40:50:29:b4:9b:05:d5:6d:09:
d5:e8:67:73:0a:07:ed:ac:70:d2:e0:c8:97:c9:9b:34:08:70:
13:69:4a:20:f1:a5:cf:90:6d:e7:b5:ac:6b:53:60:da:cc:3f:
6f:14:d7:6a:30:2c:38:3f:d0:fb:65:5b:8a:3b:d2:23:83:e4:
47:cb:31:aa:b3:1c:df:b0:ea:cd:43:8e:13:f6:1b:6d:c2:d7:
3a:56:87:35:4d:90:6d:4b:8f:0d:b1:ed:45:58:be:a4:4a:bc:
e1:f2:90:d5:5d:3f:f4:03:62:b9:10:86:aa:5a:a5:63:f9:08:
8e:bf:1b:a8:42:bd:ac:1e:6f:80:5b:00:76:b6:44:94:32:ad:
ab:6f:67:c0:c3:ce:66:6c:7e:f7:10:3e:1f:80:42:d3:e2:b1:
bc:66:58:88:0a:c4:e3:f3:46:11:7e:08:93:fc:08:06:84:7d:
91:65:ff:6f:51:06:6f:ab:21:c8:41:78:de:f9:7c:09:2e:52:
00:d6:19:b1:91:50:15:1f:b4:30:e6:56:6b:e0:2c:eb:21:9e:
7a:ff:20:74:66:78:ba:bd:09:91:11:c9:0f:51:ce:be:90:2e:
f3:ac:40:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:47 2025 by rpki-client