Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBA82418097011F0A2312169762E951A.roa
File: EBA82418097011F0A2312169762E951A.roa (raw, json)
Hash identifier: LvB2cTgJFPxknOHb7kqNYeNXiJbo6xxciTxEdW47Am4=
Subject key identifier: 19:73:92:F5:13:99:6E:57:0A:A8:A1:D5:8C:0C:D3:00:D3:F4:40:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017630
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBA82418097011F0A2312169762E951A.roa
Signing time: Tue 25 Mar 2025 12:01:44 +0000
ROA not before: Tue 25 Mar 2025 12:01:40 +0000
ROA not after: Tue 03 Jun 2025 12:01:40 +0000
asID: 63139
IP address blocks: 154.94.64.0/24 maxlen: 24
154.94.65.0/24 maxlen: 24
154.94.66.0/23 maxlen: 24
154.94.80.0/24 maxlen: 24
154.94.121.0/24 maxlen: 24
154.94.122.0/24 maxlen: 24
154.94.123.0/24 maxlen: 24
154.94.124.0/24 maxlen: 24
154.94.126.0/24 maxlen: 24
154.94.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95792 (0x17630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 12:01:40 2025 GMT
Not After : Jun 3 12:01:40 2025 GMT
Subject: CN=67e29b28-b216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:b6:4c:c7:fe:21:f6:be:cc:8a:13:27:77:
aa:f7:0d:0c:5c:2f:69:03:26:7a:15:54:06:c5:e3:
d8:35:2a:bb:02:2a:ff:19:c9:e5:5a:79:a3:bc:a0:
51:47:23:df:a3:17:9b:45:fb:f2:98:2f:4f:5d:17:
09:af:b7:d9:10:05:5e:3f:99:bf:ef:cc:80:e1:32:
31:46:36:67:42:75:1b:fb:24:c3:35:d5:b0:8b:06:
8e:d1:75:e1:de:7b:26:22:8a:e4:7d:b9:3f:08:7a:
64:8a:e2:38:b7:8b:93:4d:05:e2:67:71:31:6b:e1:
cb:dd:b5:88:a1:6a:99:13:48:b9:ea:0f:d8:5c:f8:
ed:01:b6:da:c0:4e:09:42:80:bd:a9:08:94:af:7f:
e6:ed:95:d1:30:1e:63:7c:e7:1c:15:eb:1e:87:ce:
cf:a1:52:38:1f:83:76:de:59:12:86:36:ec:f4:28:
50:9d:fc:12:d6:e5:59:9b:d6:3a:ec:58:16:09:2f:
b6:d8:92:15:99:eb:5b:b7:6e:ca:99:03:45:a0:d1:
e9:1f:b7:db:42:04:16:c1:f9:ed:72:0f:0b:6a:6a:
d0:a3:0f:cf:8c:e9:20:5e:7f:0b:f4:a4:f1:f5:c6:
2b:ad:bc:11:a7:dd:d3:2b:79:70:dd:0c:8b:88:de:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:73:92:F5:13:99:6E:57:0A:A8:A1:D5:8C:0C:D3:00:D3:F4:40:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBA82418097011F0A2312169762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.64.0/22
154.94.80.0/24
154.94.121.0-154.94.124.255
154.94.126.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:49:a3:39:3c:ca:17:0d:0a:93:08:71:ba:55:80:57:5c:db:
c4:1f:34:3b:3a:87:58:ac:c3:ad:45:ad:b0:1c:68:58:7d:aa:
85:ff:06:27:05:68:a9:26:78:82:4b:03:67:26:ca:af:2f:7c:
e3:ec:3f:c1:05:ab:22:bd:37:9b:76:fb:10:d8:61:85:73:2e:
db:cf:43:f2:aa:9d:cb:50:67:48:05:71:1c:d5:d2:66:e1:77:
6a:ce:2c:dd:e8:8a:54:ab:67:1b:cf:07:69:7a:e2:6d:5e:72:
7f:10:71:c6:92:75:bb:ea:12:7c:6d:7f:f7:ec:25:05:8c:d3:
8d:58:be:7c:e1:fa:4b:d1:cc:6c:25:30:4d:df:74:1b:58:59:
eb:9f:97:53:98:27:15:66:e1:cf:bd:40:89:d0:b2:02:df:ff:
10:b6:57:d5:6e:ae:d4:35:f4:97:80:6e:0c:07:6a:75:6c:fc:
5f:37:d7:21:29:22:e6:34:72:eb:ba:1d:f8:1b:33:0b:65:2c:
e9:77:61:51:ed:88:61:58:77:2b:b6:dd:7e:fa:06:2d:1e:8e:
cc:e2:97:ca:e1:c0:6f:27:d2:7b:c8:c2:eb:0a:ad:36:c1:b2:
2b:6f:d3:9f:e3:88:f3:cd:c6:2e:e9:77:a1:85:bc:da:32:bb:
b9:38:80:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:47 2025 by rpki-client