Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1795E8E097111F0BFAAD56D762E951A.roa
File: E1795E8E097111F0BFAAD56D762E951A.roa (raw, json)
Hash identifier: pUAhkG5m/hLsZpN0ZIQOL8Ye8C5esiFOEbnSsAPdxqA=
Subject key identifier: 1E:50:DC:D1:94:B9:E6:B8:2C:20:A0:2E:87:5B:4F:DF:EE:2E:EF:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017632
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1795E8E097111F0BFAAD56D762E951A.roa
Signing time: Tue 25 Mar 2025 12:08:37 +0000
ROA not before: Tue 25 Mar 2025 12:08:33 +0000
ROA not after: Tue 03 Jun 2025 12:08:33 +0000
asID: 63139
IP address blocks: 154.94.75.0/24 maxlen: 24
154.94.76.0/24 maxlen: 24
154.94.77.0/24 maxlen: 24
154.94.78.0/24 maxlen: 24
154.94.79.0/24 maxlen: 24
154.94.81.0/24 maxlen: 24
154.94.82.0/24 maxlen: 24
154.94.83.0/24 maxlen: 24
154.94.84.0/24 maxlen: 24
154.94.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95794 (0x17632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 12:08:33 2025 GMT
Not After : Jun 3 12:08:33 2025 GMT
Subject: CN=67e29cc5-aa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:f9:91:76:e3:2f:c8:44:45:82:fc:30:05:
e1:0d:f5:a6:a9:db:d7:24:ab:32:8d:4f:92:81:fb:
3b:34:ff:6e:c5:22:08:0d:02:b4:6a:7d:6c:02:d6:
57:ad:50:76:ed:3e:9f:9b:4d:6a:a4:c2:96:9c:e9:
91:81:63:50:76:7b:25:1e:4c:bd:01:96:53:7c:40:
69:9c:49:89:d8:4d:b2:c8:b1:e7:ae:6f:af:cf:b4:
ab:b4:00:69:58:ae:19:93:81:f0:10:e0:9b:37:25:
cc:e9:fb:fb:74:8d:b1:44:f1:b7:cb:2d:c7:fd:c0:
11:6b:3e:c7:02:57:40:47:a7:52:aa:0e:95:85:0a:
53:23:29:66:87:0d:ac:c4:a8:f8:59:6f:58:51:53:
ef:9e:d4:84:7a:85:be:05:a4:e1:0a:40:39:2e:08:
c7:7d:20:89:f8:da:7e:ee:d8:a4:cc:68:ac:98:53:
e9:2d:ba:49:d8:c1:e2:cf:b8:05:97:88:39:c4:dd:
b2:39:d5:09:ac:ca:c9:bb:b2:62:ae:6e:a0:7b:53:
b7:3f:5b:6d:e0:96:47:85:0c:15:91:31:31:8f:ba:
22:99:d1:3d:a4:8c:2f:1d:6d:55:a1:5a:9d:c2:72:
d5:2f:c3:4e:98:11:6a:93:c1:1c:49:3c:11:af:5f:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:50:DC:D1:94:B9:E6:B8:2C:20:A0:2E:87:5B:4F:DF:EE:2E:EF:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1795E8E097111F0BFAAD56D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.75.0-154.94.79.255
154.94.81.0-154.94.85.255
Signature Algorithm: sha256WithRSAEncryption
ad:d4:7b:cc:11:d1:ae:b8:09:1f:f6:7d:92:2f:a2:24:6d:7b:
b0:88:34:00:d2:1b:fd:78:fc:dd:c2:5a:8f:e2:8c:7c:94:9a:
7e:9e:d4:ad:a1:99:11:4d:b4:ee:65:06:78:b6:7f:d0:09:dc:
24:da:f7:b4:2d:0a:78:9b:6f:8b:9f:b2:60:30:f0:cd:64:1f:
b5:52:0a:cb:6a:7f:71:05:5c:58:93:8f:30:9f:56:51:e8:28:
ef:25:22:2b:a2:a8:97:1f:a1:a7:ab:36:7e:d6:f2:54:5b:42:
54:ad:6c:bf:63:c5:a3:66:7a:8c:e6:9e:13:9c:75:94:d9:23:
94:9b:10:20:59:90:b2:2d:7c:55:b9:d0:ff:10:81:8e:9d:65:
56:0f:ce:20:5f:df:10:8f:a0:fa:2d:98:59:75:09:38:e4:e0:
4a:68:4c:19:63:e3:95:18:ad:3c:6a:3e:ac:64:27:44:ba:2d:
a4:41:b3:ef:8c:0d:9c:65:5b:55:35:3f:01:3c:1e:5f:c6:30:
bf:22:be:8a:44:c5:dc:57:64:aa:04:a0:02:d8:3c:e0:3c:53:
7a:e1:72:8e:d1:e6:21:92:d7:e6:65:54:36:84:51:32:ee:2b:
23:0e:7c:54:13:19:9a:f9:17:33:30:8a:3d:c9:d5:61:ca:19:
d2:56:da:9a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:18:36 2025 by rpki-client