Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB09E252F86411EFB89E8E9C762E951A.roa
File: EB09E252F86411EFB89E8E9C762E951A.roa (raw, json)
Hash identifier: 6s26+R8YZVyhGUKAIEhQtBKBwQfEOF04CYFonGfX1ao=
Subject key identifier: 4D:7C:6D:C6:4A:97:6B:F8:AD:12:DE:3D:FD:77:4A:FB:16:F9:9A:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017121
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB09E252F86411EFB89E8E9C762E951A.roa
Signing time: Mon 03 Mar 2025 19:22:59 +0000
ROA not before: Mon 03 Mar 2025 19:22:56 +0000
ROA not after: Mon 31 Mar 2025 19:22:56 +0000
asID: 48031
IP address blocks: 154.213.6.0/24 maxlen: 24
154.213.7.0/24 maxlen: 24
154.222.250.0/24 maxlen: 24
154.222.251.0/24 maxlen: 24
154.222.253.0/24 maxlen: 24
154.222.254.0/24 maxlen: 24
154.222.255.0/24 maxlen: 24
154.223.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94497 (0x17121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 19:22:56 2025 GMT
Not After : Mar 31 19:22:56 2025 GMT
Subject: CN=67c60193-116d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:4c:92:6e:86:84:ff:7a:24:be:de:a8:bb:
bc:71:73:43:1e:e3:7a:a5:20:f1:1f:7e:c4:91:df:
a6:be:26:2e:07:20:b3:4f:a1:66:73:0a:d4:ba:5b:
19:87:cd:ab:5e:d9:3f:8b:b3:4c:85:f3:f3:2f:bb:
c9:64:5a:01:e9:ad:04:c0:f5:4d:79:75:15:76:de:
09:a6:b4:a5:5e:4b:e9:af:26:d7:67:9c:0b:42:f1:
43:5d:6a:51:4a:19:71:f9:50:41:f1:17:74:c8:85:
9d:f1:f8:95:90:e1:56:bf:23:66:43:c6:ca:d9:fa:
40:dd:1c:ba:db:49:48:4d:3a:02:fa:c5:03:3f:77:
08:f7:d7:95:77:79:bf:d9:05:fc:4d:64:a9:ae:46:
4a:f0:6f:0f:a0:a7:52:c2:60:24:a7:af:78:42:f2:
dd:e8:ef:e5:31:70:fa:50:b5:5c:86:91:34:85:36:
e2:6d:bb:14:76:33:7d:db:e1:9c:a7:a2:13:1c:21:
91:15:52:7d:e8:35:88:bb:44:3b:00:a5:0d:ad:43:
a0:3d:49:7c:01:e5:04:90:3f:1a:6c:3d:da:3c:fd:
21:da:86:98:27:68:17:db:ac:35:83:bd:fa:f4:cd:
f6:94:3e:2f:07:48:30:4f:1f:ad:a9:0b:99:f1:e7:
39:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7C:6D:C6:4A:97:6B:F8:AD:12:DE:3D:FD:77:4A:FB:16:F9:9A:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB09E252F86411EFB89E8E9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.6.0/23
154.222.250.0/23
154.222.253.0-154.222.255.255
154.223.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:7f:b4:9a:84:f4:90:1a:bc:aa:13:8e:7f:ce:fd:7c:21:aa:
1a:06:ad:c7:48:62:54:3d:bb:e1:a7:74:32:c8:8c:93:2e:47:
91:7a:ee:2f:b1:33:f5:34:12:a5:1d:5b:84:49:5b:86:e8:46:
26:c7:f2:62:aa:47:9e:49:d0:93:26:29:12:b8:e4:bd:9e:c6:
7d:ce:1d:e5:bc:27:8b:1e:28:c9:79:df:47:0d:c9:66:87:88:
55:bf:37:d9:a3:dc:7a:61:62:23:1e:56:bf:b1:7b:24:6c:f4:
27:ac:e4:ff:ea:ad:df:e0:56:e2:43:44:4a:fa:4f:e0:76:49:
bc:34:4a:1c:db:e0:6a:68:08:c8:63:08:d6:cd:e1:d5:e7:87:
52:3a:8b:c9:a3:d2:a6:bf:0d:10:3a:78:6c:40:c9:98:27:d1:
f6:a4:9e:c5:e4:e1:04:83:f4:98:d5:1e:fd:e8:69:5c:6a:a2:
9d:c0:73:c6:dd:f1:d3:b0:29:b6:46:01:ff:64:5e:44:d5:b2:
e4:98:73:b8:af:14:95:06:07:2b:bd:a4:bb:fc:b7:83:d3:02:
94:27:6c:8a:e8:06:d2:1a:38:c2:aa:28:b3:aa:94:53:94:f8:
41:4f:ff:dd:c0:16:dd:30:8d:f1:30:bb:5f:48:32:ed:95:5c:
fb:0d:cf:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:50 2025 by rpki-client