Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5C91DF4096F11F09818AB62762E951A.roa
File: F5C91DF4096F11F09818AB62762E951A.roa (raw, json)
Hash identifier: cGvPIeuKkslVBL/x8rCz4AYC28PfO9CYBk5jm1d6CZQ=
Subject key identifier: 02:28:A9:67:31:05:2B:C6:11:3C:C4:A9:46:56:A4:C1:B7:0E:3D:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01762E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5C91DF4096F11F09818AB62762E951A.roa
Signing time: Tue 25 Mar 2025 11:54:52 +0000
ROA not before: Tue 25 Mar 2025 11:54:48 +0000
ROA not after: Tue 03 Jun 2025 11:54:48 +0000
asID: 63139
IP address blocks: 154.94.105.0/24 maxlen: 24
154.94.112.0/24 maxlen: 24
154.94.113.0/24 maxlen: 24
154.94.114.0/24 maxlen: 24
154.94.115.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.117.0/24 maxlen: 24
154.94.118.0/24 maxlen: 24
154.94.119.0/24 maxlen: 24
154.94.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95790 (0x1762e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 11:54:48 2025 GMT
Not After : Jun 3 11:54:48 2025 GMT
Subject: CN=67e2998c-a0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4f:d4:89:30:33:1c:ee:1f:13:cc:a4:81:1e:
a8:52:7d:20:ed:ab:ad:06:e7:1a:da:9a:df:47:ca:
bd:85:02:78:79:9a:0c:da:0a:7d:40:09:10:56:c3:
34:5b:87:0b:a2:23:70:c5:2c:7d:ef:29:96:68:3b:
dc:b6:4a:46:ef:bd:2b:74:9f:66:f0:f4:35:7e:70:
28:8d:20:df:7e:84:14:92:49:b7:0a:fe:5c:2c:c6:
29:14:40:32:84:ba:3e:75:aa:1d:4a:b9:56:32:6f:
97:34:de:d3:d1:7e:32:5b:2e:a1:59:56:f6:88:5a:
aa:3c:f3:48:ce:66:ca:82:e4:c0:84:24:19:73:ad:
97:9d:6a:cd:fb:16:28:6e:70:5c:8b:06:63:8c:70:
3f:30:19:3f:8f:88:fd:87:5f:87:d7:72:db:3c:ab:
3c:b4:1b:57:54:6c:8b:e0:26:fd:8c:c6:81:7c:d8:
f1:3f:d0:3e:88:80:26:8d:a1:86:8a:40:89:03:04:
1f:16:0c:33:60:2f:c9:ed:a8:04:27:ff:de:d8:a7:
05:aa:f3:51:f1:dd:9c:2c:79:ff:f1:67:a0:94:c8:
21:fa:94:b8:fe:30:54:ed:a3:e1:22:da:10:d7:74:
d5:ad:b7:1a:db:44:5e:a1:26:07:06:ba:ef:d7:fd:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:28:A9:67:31:05:2B:C6:11:3C:C4:A9:46:56:A4:C1:B7:0E:3D:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5C91DF4096F11F09818AB62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.105.0/24
154.94.112.0-154.94.120.255
Signature Algorithm: sha256WithRSAEncryption
d4:d6:1c:21:ef:8e:f4:ff:b6:f7:0c:20:08:f8:bf:9f:8d:b4:
9c:98:49:50:f6:1b:eb:4e:75:d3:a0:0d:c6:96:ab:ad:29:fe:
b9:07:26:a0:2c:33:10:4b:7a:ed:c9:67:d4:36:de:f5:e4:81:
67:c2:d3:c8:91:8c:9a:3d:7c:e6:29:ed:33:3d:97:a5:d3:1f:
0d:a9:be:d4:26:f2:34:8c:26:32:3b:be:e3:f0:12:58:22:54:
fa:3a:ec:f1:2e:22:e8:a7:04:56:54:04:7d:96:53:93:8d:04:
5c:f8:fd:93:03:af:91:84:ff:83:d4:17:dc:e3:2e:11:59:f0:
0d:5e:ce:c2:c2:e0:16:ed:cd:3e:bd:7e:11:e9:9e:03:13:3f:
3f:b6:e7:3d:70:a8:e3:e4:f5:a9:6f:67:28:60:31:b9:9d:49:
64:4f:53:e4:34:eb:32:83:85:a4:87:51:8b:1d:40:69:6f:4a:
f3:cb:e7:5e:5d:a4:b9:2b:a6:fc:1a:1b:8f:93:8f:94:9c:f2:
fc:1c:67:47:55:a4:22:8d:cc:a6:2e:4b:64:ec:05:a8:1c:f8:
35:98:5f:c5:0b:71:19:c4:62:d5:18:e7:fe:e7:bf:5c:c8:7c:
6b:12:ac:c6:12:09:4e:42:0c:79:5e:69:f8:5b:35:fa:b8:de:
6a:5c:40:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:48:31 2025 by rpki-client