Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F45C3646F64F11EF915AF885762E951A.roa
File: F45C3646F64F11EF915AF885762E951A.roa (raw, json)
Hash identifier: sirzOtuh5tV6548FQTKhs763Frk4CXZYwLMtGxrCvLw=
Subject key identifier: 9D:F8:EF:2E:9E:A4:4B:13:F0:2B:2D:77:26:7A:DB:66:D8:62:7E:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F45C3646F64F11EF915AF885762E951A.roa
Signing time: Sat 01 Mar 2025 03:47:53 +0000
ROA not before: Sat 01 Mar 2025 03:47:50 +0000
ROA not after: Thu 19 Feb 2026 03:47:50 +0000
asID: 984
IP address blocks: 154.203.96.0/24 maxlen: 24
154.203.242.0/24 maxlen: 24
154.203.244.0/24 maxlen: 24
154.203.245.0/24 maxlen: 24
154.203.248.0/24 maxlen: 24
154.205.32.0/24 maxlen: 24
154.205.33.0/24 maxlen: 24
154.205.36.0/24 maxlen: 24
154.205.37.0/24 maxlen: 24
154.205.38.0/24 maxlen: 24
154.222.175.0/24 maxlen: 24
154.222.177.0/24 maxlen: 24
154.222.178.0/24 maxlen: 24
154.222.179.0/24 maxlen: 24
154.222.180.0/24 maxlen: 24
154.222.183.0/24 maxlen: 24
154.222.186.0/24 maxlen: 24
154.222.187.0/24 maxlen: 24
154.222.188.0/24 maxlen: 24
154.222.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93432 (0x16cf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 03:47:50 2025 GMT
Not After : Feb 19 03:47:50 2026 GMT
Subject: CN=67c28369-2f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:8d:bb:98:65:6f:4e:dd:c1:64:fd:0d:68:
5c:b0:5b:eb:10:a8:17:d7:ac:a0:47:aa:88:56:1d:
a1:88:b7:64:7a:08:cb:db:81:d7:9c:3c:3e:54:ea:
9b:34:ef:14:83:ac:c4:ac:64:7a:c5:b3:0a:45:74:
b5:5f:d0:52:1d:7d:f9:97:c8:c2:2c:e8:6e:4b:b2:
ef:dd:bc:41:16:dd:0c:c8:07:f9:ed:a0:39:6a:c5:
b9:9b:c0:40:d5:b2:5a:01:90:80:cd:a3:c2:f4:f6:
23:5d:c6:2d:e9:f2:3b:74:12:17:3e:f3:67:6f:f9:
ab:ef:4b:9a:6f:61:4f:53:5b:31:97:e3:70:b4:f0:
19:7e:a9:b2:ff:74:09:e0:9a:32:ce:02:a3:41:e3:
00:53:12:61:95:8a:7b:9a:e1:3f:78:0c:bd:b3:16:
b5:77:2b:f2:b7:29:95:88:30:a8:bf:56:c4:78:bc:
97:c9:b6:26:e3:df:40:47:6a:03:f5:a1:a0:c4:84:
c6:02:d5:fc:c4:bc:08:d7:6d:17:ef:74:c8:87:ca:
fd:7f:04:d7:55:2a:c0:b4:66:6b:e6:2c:0c:40:56:
ae:cb:30:7c:8f:e5:78:78:9f:2e:d0:67:d9:b3:56:
7e:c9:75:fc:c9:73:79:ef:da:b2:9b:2d:c4:85:90:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F8:EF:2E:9E:A4:4B:13:F0:2B:2D:77:26:7A:DB:66:D8:62:7E:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F45C3646F64F11EF915AF885762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.96.0/24
154.203.242.0/24
154.203.244.0/23
154.203.248.0/24
154.205.32.0/23
154.205.36.0-154.205.38.255
154.222.175.0/24
154.222.177.0-154.222.180.255
154.222.183.0/24
154.222.186.0-154.222.188.255
154.222.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7e:5f:67:87:f1:88:18:8b:72:de:c3:bc:f1:9a:73:23:a4:
76:d9:f6:04:e9:19:0c:25:7b:7a:9d:cf:7e:32:7c:16:7d:05:
bc:00:42:cb:c6:79:fd:22:9f:e1:62:a6:20:84:5a:1a:92:3a:
09:eb:01:7a:35:28:d2:ec:d0:da:01:0d:58:ea:f1:4a:f0:5c:
e3:4b:41:4c:98:ff:a3:11:21:bf:7a:48:be:3a:88:bf:c2:9e:
3f:00:2a:9f:16:63:94:1d:33:b5:8d:dc:24:44:18:59:9c:0c:
0e:aa:b0:ad:21:43:ee:3a:e5:f9:3c:b6:15:6d:66:c7:b2:bb:
45:98:d8:16:17:01:1a:2e:d5:91:1a:2e:f6:55:56:5b:f8:87:
0d:66:13:29:9c:8b:af:fc:e8:f8:c3:66:a1:17:24:4a:67:b9:
a7:73:61:f3:50:d1:b2:f8:e3:51:cc:4d:f1:d7:01:3c:93:a6:
8e:aa:82:b0:fe:03:ce:2b:ed:6a:bd:27:12:63:a3:b8:5e:88:
eb:c2:d5:fe:e5:d5:74:61:fa:55:db:dc:97:31:38:0e:ef:15:
c2:97:00:49:a7:3b:a2:6f:c0:0a:33:59:24:a1:28:bf:c8:8e:
b0:c8:19:8c:d9:1f:33:4a:2f:d9:ed:df:f0:98:5e:10:cf:7c:
db:14:fc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:38 2025 by rpki-client