Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB39FEE6095911F087DA9F5C762E951A.roa
File: EB39FEE6095911F087DA9F5C762E951A.roa (raw, json)
Hash identifier: PqZ6BSBoKa4haq7Pi7Ha+/sRtD+41FIAGG3PftMho1c=
Subject key identifier: 65:7D:8E:30:C3:13:E1:9F:D2:E7:60:52:CD:E1:6E:F2:A1:9E:80:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01760C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB39FEE6095911F087DA9F5C762E951A.roa
Signing time: Tue 25 Mar 2025 09:17:05 +0000
ROA not before: Tue 25 Mar 2025 09:17:01 +0000
ROA not after: Thu 15 May 2025 09:17:01 +0000
asID: 138915
IP address blocks: 154.203.142.0/24 maxlen: 24
154.203.153.0/24 maxlen: 24
154.203.154.0/23 maxlen: 24
154.203.156.0/24 maxlen: 24
154.203.157.0/24 maxlen: 24
154.203.158.0/24 maxlen: 24
154.203.159.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95756 (0x1760c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 09:17:01 2025 GMT
Not After : May 15 09:17:01 2025 GMT
Subject: CN=67e27491-e06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:11:4f:f7:7b:b7:88:e4:3e:30:a9:8d:bb:
96:61:6a:f6:ee:ad:47:00:a5:f8:ae:3c:27:b8:56:
bc:48:96:9e:76:7c:2e:07:f6:f5:18:03:d1:d3:1c:
17:4b:7e:a9:3e:31:f5:3a:3d:24:5f:57:2b:20:7d:
14:88:ca:3e:57:9b:d5:d8:68:64:4f:d9:03:41:2c:
67:41:67:40:fb:8c:b9:7c:44:5b:c3:3e:54:de:99:
cb:b4:55:0d:16:4a:a4:3e:5c:23:04:7e:5e:50:3d:
f5:4e:a4:4d:16:45:17:fb:69:94:ba:3d:8e:f3:7e:
43:7c:42:23:47:9d:fd:b5:fa:00:4e:5f:0b:7a:40:
c5:03:4b:d2:ff:f6:9f:3c:01:97:db:8c:df:7d:49:
2d:af:a9:cb:d9:e4:60:28:42:d7:11:88:b6:fd:73:
9f:bc:10:73:db:b7:2d:22:9b:b2:13:cb:01:87:a8:
c8:ae:b5:b6:73:0e:f9:df:a4:60:69:bd:de:93:69:
1b:49:42:61:5a:43:ab:b4:f3:8a:bd:26:61:81:f5:
fa:c1:f1:cf:c6:c9:a9:be:e2:4f:68:33:22:56:63:
a7:7b:fa:e8:af:2a:63:32:a1:60:c5:b6:b1:f2:6f:
f2:0a:2a:68:1c:81:70:be:46:6e:66:63:f8:6a:b9:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7D:8E:30:C3:13:E1:9F:D2:E7:60:52:CD:E1:6E:F2:A1:9E:80:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB39FEE6095911F087DA9F5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.142.0/24
154.203.153.0-154.203.159.255
154.203.164.0/24
154.203.166.0/24
154.203.169.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2b:bb:36:a7:f3:23:32:f2:23:d5:97:6e:3f:87:df:47:e9:
3f:6a:42:14:8c:d4:75:8c:d6:d5:95:a1:3d:87:52:52:ff:88:
80:2b:e4:01:dc:3e:98:48:ea:ab:a7:c5:01:5b:ed:19:ae:bc:
cc:b7:69:ec:e6:b1:be:11:e3:02:5c:3e:4a:8a:04:98:42:0f:
fc:42:70:ae:9d:08:90:b5:d9:96:44:f0:3f:80:3a:eb:b6:8b:
21:11:06:08:38:c0:57:09:9a:d4:fc:82:f4:75:81:54:a1:a8:
fc:67:9d:85:60:6f:77:70:6c:b1:00:d0:06:92:e3:c5:b2:e1:
92:9f:e4:54:4c:b8:e8:4f:ed:a8:29:ac:75:4d:cf:88:8b:a6:
8e:26:03:19:77:df:41:f7:2c:dc:cd:e0:8c:ec:9e:05:e5:bf:
e7:c5:68:d3:f1:12:0e:99:ee:fb:0d:c9:7e:20:e2:69:5f:52:
60:74:62:56:2b:81:7f:72:03:60:b3:76:db:0b:04:62:d9:e1:
b2:a6:ab:9a:5c:fc:c4:ba:f9:30:da:f9:7e:14:41:79:ca:81:
1d:e8:53:ed:fb:31:17:31:fe:e0:30:8d:8d:04:a7:24:a1:be:
fc:aa:4d:7c:71:61:c8:9a:37:01:1a:ff:95:a5:19:fe:8c:8e:
f0:2e:86:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:41 2025 by rpki-client