Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDB860F0F88611EF8EF8EA80762E951A.roa
File: FDB860F0F88611EF8EF8EA80762E951A.roa (raw, json)
Hash identifier: M0fkZkrG15xqaY/QkfeNyLIpsc9+l0aClNiTNbXTAzM=
Subject key identifier: A7:92:2C:5A:73:4E:9D:CD:01:30:30:1B:48:04:2D:A8:A3:2D:C6:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017153
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDB860F0F88611EF8EF8EA80762E951A.roa
Signing time: Mon 03 Mar 2025 23:26:54 +0000
ROA not before: Mon 03 Mar 2025 23:26:50 +0000
ROA not after: Fri 11 Apr 2025 23:26:50 +0000
asID: 63139
IP address blocks: 154.203.171.0/24 maxlen: 24
154.203.173.0/24 maxlen: 24
154.203.174.0/24 maxlen: 24
154.203.175.0/24 maxlen: 24
154.203.176.0/24 maxlen: 24
154.203.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94547 (0x17153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 23:26:50 2025 GMT
Not After : Apr 11 23:26:50 2025 GMT
Subject: CN=67c63abe-beb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:df:7a:d7:d8:4c:04:d2:4c:77:21:39:bc:a2:
e2:d8:64:93:fa:2b:3b:37:40:b1:1c:f9:74:30:dc:
8a:cf:ec:fa:08:ea:63:da:8c:dd:68:e7:9d:d6:d5:
57:6b:d2:a9:31:43:a4:72:ca:2f:44:60:50:fe:a1:
0b:55:71:c3:b2:17:40:c3:ef:ec:88:3b:2f:e3:00:
0c:7f:7a:ce:e4:86:6e:2a:c0:56:ee:ea:27:25:dc:
2f:29:be:4b:68:d6:d1:1b:e9:49:c8:c2:d4:9a:85:
bd:46:86:48:5f:5a:2b:10:02:83:29:fa:2a:86:95:
0b:b8:af:1e:4b:30:ed:36:a2:e3:a6:3f:da:10:e5:
9a:f9:fb:53:bb:d2:ee:de:ba:3c:c6:1d:d0:f0:7c:
99:08:58:8e:d0:c7:29:49:d3:88:56:95:6b:8e:c1:
47:37:e2:49:79:42:ee:7a:4d:74:32:a9:7a:cd:78:
99:0a:50:da:f9:4e:2b:bc:b9:4d:09:2c:6c:52:44:
b4:3c:b6:ee:13:d7:ae:67:49:b7:f5:c6:71:90:9b:
44:ae:6c:33:30:59:c6:4a:38:17:39:29:68:fa:27:
6b:0f:00:bc:6e:dd:cc:89:11:a3:ba:18:8f:88:c2:
fc:ac:14:9e:77:5c:18:33:a7:29:3d:fe:60:54:b5:
ee:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:92:2C:5A:73:4E:9D:CD:01:30:30:1B:48:04:2D:A8:A3:2D:C6:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDB860F0F88611EF8EF8EA80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.171.0/24
154.203.173.0-154.203.177.255
Signature Algorithm: sha256WithRSAEncryption
0d:05:0c:9e:79:a6:d2:2e:b3:68:14:7d:f2:d7:b8:5e:70:bb:
4a:3f:e8:87:83:5b:3e:9b:9c:8f:21:6b:c7:33:4d:22:42:c0:
65:70:11:03:df:17:e4:6b:e2:be:cb:44:d3:6a:bc:b6:63:d1:
5f:66:67:48:e0:d3:30:db:b8:d7:c5:4c:1d:a6:26:3d:35:31:
ca:67:11:95:99:94:6e:d7:e0:9a:17:47:ff:a3:4f:3a:3a:19:
d2:38:9a:a4:04:03:4c:58:3b:73:47:a5:4b:50:5b:33:8d:44:
dc:a1:98:b7:97:bf:a9:66:7a:74:41:bf:d1:83:70:0d:8d:19:
16:3e:46:97:65:f6:88:d7:38:a0:dd:89:e1:3b:60:36:ff:87:
4c:98:c0:9a:c7:ed:96:51:cf:03:fa:ad:0f:d1:e9:89:62:74:
03:ea:cf:8e:e9:b7:c9:a7:cd:4f:cb:1a:00:24:07:a4:02:fb:
33:63:c1:d1:60:a5:2a:1d:9b:39:62:bd:d9:e4:a4:5a:ce:24:
93:85:7d:a3:01:51:7d:0a:34:f7:8a:f1:50:63:16:2e:6c:54:
0c:05:2b:5c:01:e2:19:b7:6b:c6:e6:a0:a2:b3:1c:27:60:53:
5f:bb:8c:7b:a1:5d:10:fd:9e:41:cd:cc:18:da:89:74:ba:09:
66:40:f1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:42 2025 by rpki-client