Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07861F6AE85A11EF91F56356762E951A.roa
File: 07861F6AE85A11EF91F56356762E951A.roa (raw, json)
Hash identifier: 5G1fMK6SlftryJzsKCwuDb5mB++TQMm4Bgi5YJzXsEM=
Subject key identifier: A9:DF:AB:11:C8:EF:5D:61:FF:61:52:3D:EE:60:C5:9B:45:1F:2A:9A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 19CB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07861F6AE85A11EF91F56356762E951A.roa
Signing time: Tue 11 Feb 2025 09:24:44 +0000
ROA not before: Tue 11 Feb 2025 09:24:41 +0000
ROA not after: Sat 13 Feb 2027 09:24:41 +0000
asID: 61317
IP address blocks: 154.16.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6603 (0x19cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 11 09:24:41 2025 GMT
Not After : Feb 13 09:24:41 2027 GMT
Subject: CN=67ab175c-4eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:db:ac:54:89:40:b3:47:af:98:c9:48:9b:b3:
4d:31:8c:87:c7:a4:8b:50:d0:9f:ca:69:5b:35:d8:
88:3e:d6:08:59:7e:78:dc:69:6e:6d:51:3a:06:82:
fe:8c:26:2f:fb:b5:23:90:76:13:1d:a6:3a:1b:2c:
69:a9:3f:cf:76:30:56:15:50:0e:bc:96:f6:75:62:
8b:4b:4f:ba:17:7d:78:54:3f:5f:86:8a:1f:7f:6b:
71:8e:3f:fc:81:5e:d6:8e:a2:06:71:fa:dd:5d:52:
ed:c6:f8:fb:a2:55:93:97:22:c9:af:eb:72:ae:65:
21:24:34:4f:e0:8a:a4:2d:58:24:87:11:a0:d3:e9:
b2:78:71:38:8f:89:55:eb:d4:cc:4b:f8:e0:ef:d2:
35:12:0c:d7:09:6a:f4:bf:4b:88:15:ce:02:8b:c0:
c3:d9:c9:3b:a4:23:32:fc:fc:f6:88:8e:f6:65:ef:
51:c4:9c:44:87:49:de:46:a6:dd:3f:28:88:fa:21:
9b:cc:aa:00:da:7e:ea:6d:9e:5b:77:4e:a1:b9:b0:
68:0d:8c:bf:7c:2d:12:bc:a1:00:72:9d:cb:0e:0a:
62:3e:86:2d:84:1c:b0:ee:ee:30:a6:36:80:e8:ec:
2a:d1:24:f8:a3:71:68:e2:57:47:bc:d7:a2:ab:11:
21:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DF:AB:11:C8:EF:5D:61:FF:61:52:3D:EE:60:C5:9B:45:1F:2A:9A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07861F6AE85A11EF91F56356762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.20.0/24
Signature Algorithm: sha256WithRSAEncryption
63:9b:d9:b5:9c:8b:11:c7:e7:08:6c:1f:94:39:3c:c8:ac:f5:
6f:72:41:1a:f4:be:51:d7:3b:e9:8a:bb:20:04:ea:8b:3f:43:
2f:6d:55:4c:ba:d9:17:ad:1a:3d:b8:92:ae:cd:0e:37:8e:db:
e1:61:51:87:ed:94:78:fa:c0:dc:1d:99:58:2c:50:62:cd:83:
20:82:4f:70:e5:94:db:7f:a7:f1:f5:87:59:1c:5e:fd:c9:3b:
2f:16:9e:d7:c9:f3:7a:f1:f2:05:c6:a6:1a:9e:3f:48:1b:6f:
ce:85:6f:4a:51:94:af:dc:45:ae:2b:9a:4e:44:f8:71:53:16:
0e:56:18:f6:39:89:2c:3b:c0:86:d0:41:7f:73:fc:eb:48:49:
01:1c:d2:88:ae:76:e0:f3:5b:1d:86:c5:a1:f8:7c:fd:b4:00:
b5:dd:87:19:04:c9:d0:fc:69:92:4d:25:52:80:f3:d0:04:14:
60:2c:8d:ed:a6:d7:41:07:61:7c:91:50:fd:94:27:49:78:26:
71:53:90:9d:e8:df:72:32:6e:ef:c5:06:d1:22:c5:ab:c0:b5:
83:22:1e:77:bb:9d:79:42:4a:59:f2:b5:33:2d:e0:3e:cb:2b:
cc:8e:38:1c:51:cc:ab:04:3b:88:06:7d:7e:da:60:96:04:e7:
ac:95:96:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:11 2025 by rpki-client