Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAE6745E096E11F09493665C762E951A.roa
File: FAE6745E096E11F09493665C762E951A.roa (raw, json)
Hash identifier: 0ocWFxA9ikj45iXujewyhBBtgyM7J+mIwKcCOhYgTHo=
Subject key identifier: 07:BD:F7:55:4B:42:15:F0:68:6D:F9:1E:7B:68:9C:65:32:5C:EF:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01762C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAE6745E096E11F09493665C762E951A.roa
Signing time: Tue 25 Mar 2025 11:47:51 +0000
ROA not before: Tue 25 Mar 2025 11:47:47 +0000
ROA not after: Tue 03 Jun 2025 11:47:47 +0000
asID: 63139
IP address blocks: 154.94.101.0/24 maxlen: 24
154.94.102.0/24 maxlen: 24
154.94.103.0/24 maxlen: 24
154.94.104.0/24 maxlen: 24
154.94.106.0/24 maxlen: 24
154.94.107.0/24 maxlen: 24
154.94.108.0/24 maxlen: 24
154.94.109.0/24 maxlen: 24
154.94.110.0/24 maxlen: 24
154.94.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95788 (0x1762c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 11:47:47 2025 GMT
Not After : Jun 3 11:47:47 2025 GMT
Subject: CN=67e297e7-15bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:16:aa:a4:36:e1:11:37:24:ea:f0:4c:19:bf:
cd:e7:27:57:2e:da:1a:5e:43:82:9a:3b:d2:64:2f:
66:d7:92:22:8e:58:29:7f:b4:5f:f4:52:13:e0:d4:
a4:71:de:7b:a2:de:86:47:ea:05:9d:fa:c2:23:eb:
d6:9d:e8:c5:4c:8f:de:20:94:78:ec:fb:d6:49:b2:
5b:67:e0:70:5f:7f:1d:03:06:3d:4f:80:07:3e:aa:
ec:73:e2:50:70:e4:20:33:b3:d1:2e:c4:a5:3f:d3:
57:01:fc:4d:83:62:b2:5f:a4:96:f1:ca:51:ca:05:
f2:ea:64:7b:6c:fb:7f:a4:ed:c7:0c:de:80:b0:a6:
bc:cb:24:da:61:19:ec:b2:16:98:bb:73:5c:a8:09:
0b:db:ce:07:ce:f0:90:9b:d3:20:a2:25:96:7d:c4:
4b:7f:ad:db:d1:cd:e4:2f:34:60:3d:2d:5c:03:9a:
5b:c8:90:64:0f:bb:bd:3b:2b:53:c9:c4:31:e0:bf:
0a:33:4f:f1:11:e7:54:c0:e3:91:70:bb:dd:bf:1a:
cb:e9:25:5a:79:df:96:38:bf:46:a6:e3:6a:44:d2:
71:61:74:c7:e0:f1:c4:eb:ad:75:1d:39:ea:ae:2e:
bb:00:b8:af:98:08:9c:ee:e7:24:bf:78:7c:38:98:
54:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BD:F7:55:4B:42:15:F0:68:6D:F9:1E:7B:68:9C:65:32:5C:EF:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAE6745E096E11F09493665C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.101.0-154.94.104.255
154.94.106.0-154.94.111.255
Signature Algorithm: sha256WithRSAEncryption
d3:81:6e:46:52:16:c2:ed:ab:31:2c:5c:4e:5c:31:6c:31:dc:
79:1e:e0:e0:15:ba:54:51:79:25:ea:b2:c3:89:bd:90:d2:15:
74:de:3e:c0:af:6f:79:db:d7:35:78:32:c6:86:85:bf:c7:fb:
89:54:04:39:36:01:03:70:ec:88:03:77:ad:ad:ee:bb:8b:1a:
d9:ad:88:ef:81:23:ce:50:9d:5f:0e:3a:56:b6:5b:00:44:67:
c8:37:91:35:4f:28:2b:f3:51:eb:8c:44:a4:50:27:fb:3b:32:
5c:c5:50:b0:30:5d:db:a5:54:99:30:b9:fa:a1:a5:c4:93:22:
92:ff:38:93:25:c7:5e:84:6f:ed:50:2b:5c:b4:5d:fe:c1:9e:
b4:0c:94:ff:8a:4c:65:c0:fe:df:19:57:1b:a7:a3:aa:51:cf:
f8:eb:89:6f:e8:81:6e:12:ce:af:cc:73:d5:73:45:88:82:33:
d5:fa:0c:7e:b3:0f:99:e3:6e:a8:a6:a2:57:87:8c:33:92:16:
55:70:54:44:ca:57:64:c7:dd:b4:de:5b:9b:a0:e7:fb:34:e6:
91:13:d6:7e:b7:2d:5c:bc:0a:9c:b8:94:a1:f1:3d:ac:86:f0:
7b:15:e1:4c:80:72:f6:99:61:1e:8a:87:0a:e9:40:b9:f8:76:
49:de:8e:c3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:52 2025 by rpki-client