Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F138F4300AE111F0B17C01B0762E951A.roa
File: F138F4300AE111F0B17C01B0762E951A.roa (raw, json)
Hash identifier: 9eQVWKUEAMpvFfyRibiB3ClADFBaqli6GQqFKGjEq5Q=
Subject key identifier: 00:7B:C4:D5:5C:52:F4:F8:F4:E7:7A:44:AE:BF:AD:07:4B:31:1B:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017684
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F138F4300AE111F0B17C01B0762E951A.roa
Signing time: Thu 27 Mar 2025 08:03:18 +0000
ROA not before: Thu 27 Mar 2025 08:03:14 +0000
ROA not after: Thu 03 Jul 2025 08:03:14 +0000
asID: 174
IP address blocks: 154.194.46.0/23 maxlen: 24
154.194.48.0/23 maxlen: 24
154.194.216.0/22 maxlen: 24
154.194.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95876 (0x17684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 27 08:03:14 2025 GMT
Not After : Jul 3 08:03:14 2025 GMT
Subject: CN=67e50646-64e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c7:41:6f:93:88:0c:00:60:3d:d3:a3:a2:88:
60:f2:d6:2c:eb:5c:27:3f:d4:62:e6:59:a5:07:de:
a3:bb:7a:27:f2:47:4b:d2:57:42:62:93:23:bf:3b:
37:2a:c9:5e:17:0c:73:96:15:a5:da:c6:bf:8f:60:
5c:e4:cb:d7:29:8d:e8:42:6c:ac:9d:f2:a2:22:85:
99:c5:31:ed:77:f1:6f:be:3b:ec:24:cf:d4:33:fb:
2a:fe:2c:e9:40:e9:54:8b:4d:ca:bb:0e:92:b9:1e:
90:e0:5b:91:a5:7d:56:45:be:cf:24:ca:0e:19:88:
0f:0a:e2:4f:b7:61:0d:44:7e:0c:cd:0c:37:49:cb:
d6:4a:58:a6:7c:41:6e:88:23:8f:ee:f0:9c:80:68:
27:32:5f:80:51:56:5c:07:dd:e8:97:0d:5b:1f:34:
68:19:61:9d:aa:29:14:44:07:0d:f3:9d:ff:33:3c:
88:8a:83:da:43:4c:b4:13:69:a8:6e:02:82:1f:02:
ba:86:8d:18:c8:5b:c0:a3:f9:fc:c1:b0:2d:dc:f2:
59:60:75:4b:f6:37:72:d7:c5:e5:b6:1a:18:ae:7c:
78:84:e3:ea:c7:55:f0:72:24:a3:14:dd:b0:e2:2e:
aa:2e:2e:a3:f7:79:3e:70:dd:bd:60:24:cf:90:ec:
4e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7B:C4:D5:5C:52:F4:F8:F4:E7:7A:44:AE:BF:AD:07:4B:31:1B:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F138F4300AE111F0B17C01B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.46.0-154.194.49.255
154.194.216.0/22
154.194.244.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:b9:2f:9b:48:83:74:23:56:49:2d:b8:e3:4f:98:e6:6a:a0:
72:9f:da:80:8f:c2:df:b7:c6:da:b8:a8:6d:e3:8f:4f:23:1d:
04:87:9d:77:ef:34:96:83:1a:99:d2:39:6b:7b:c6:b1:c5:1f:
31:56:7c:e4:b4:19:7a:5b:bb:79:ea:93:3a:64:17:18:31:b2:
a0:94:3e:d2:59:a8:8b:fb:05:38:c6:f9:ce:db:23:9b:35:2d:
8f:11:54:63:4a:de:5a:5c:6c:6d:cf:37:ca:d1:17:82:3d:cc:
38:a3:6f:c7:9e:e7:21:d3:e3:6a:e0:6c:44:28:d8:bd:9c:ff:
a5:cf:ea:21:4e:2a:92:32:6d:29:65:a8:d3:dd:6e:23:7b:a7:
25:e9:06:69:0d:2f:dc:25:74:a8:4c:87:dd:65:e4:5a:98:2d:
b8:0f:c1:6c:ec:05:c9:b1:b8:d7:dd:e0:4e:62:48:41:a5:32:
e1:3e:05:9e:86:4b:ef:89:3c:f0:f8:c9:b2:53:07:20:47:a5:
f7:21:f6:10:4e:96:9c:29:66:75:ee:6e:e1:7e:f0:cd:38:09:
20:ff:55:2d:f5:1e:7b:aa:69:87:7a:0d:63:fe:50:93:97:5b:
a0:a3:c4:00:af:39:cc:ad:50:de:bb:a8:63:a0:42:b7:b7:46:
93:bb:1d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:01 2025 by rpki-client