Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08EC2A68EE1111EFA0337C80762E951A.roa
File: 08EC2A68EE1111EFA0337C80762E951A.roa (raw, json)
Hash identifier: 8iqh+tNRfppEQh3teal7981aJDnXT7XYcgPAxcfmXWU=
Subject key identifier: 40:C3:91:50:AA:DD:71:16:A2:0E:1F:E1:6E:8D:5E:3E:5C:80:FA:42
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 19E9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08EC2A68EE1111EFA0337C80762E951A.roa
Signing time: Tue 18 Feb 2025 15:57:20 +0000
ROA not before: Tue 18 Feb 2025 15:57:16 +0000
ROA not after: Sat 20 Feb 2027 15:57:16 +0000
asID: 61317
IP address blocks: 154.16.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6633 (0x19e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 18 15:57:16 2025 GMT
Not After : Feb 20 15:57:16 2027 GMT
Subject: CN=67b4ade0-cd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d3:4e:9a:73:9b:34:a3:ec:6a:11:88:de:17:
55:87:99:19:de:3c:4f:60:50:8a:e3:a8:3a:b7:3f:
a0:a0:73:34:ed:86:f4:ad:89:aa:e6:38:42:19:d7:
a2:7d:a3:2b:5b:69:88:2c:db:9a:ec:e9:14:3e:f8:
57:4d:45:dc:1e:21:f5:eb:32:4c:e9:f7:b3:25:10:
ff:c5:d5:7e:a3:0a:ec:76:c4:c9:c8:23:88:27:e6:
f9:84:1a:b2:da:31:00:8c:34:f8:0a:b2:f0:db:2d:
5a:ef:75:ce:2e:9f:4f:5b:9e:b2:48:77:ae:52:ff:
9d:51:a8:5b:d0:d4:a2:99:6c:c4:c2:37:38:4a:57:
a2:3d:72:85:8d:df:4d:f7:6c:e9:88:91:37:26:b7:
b4:0d:bc:9f:58:87:88:dd:3f:d9:00:42:7e:91:6d:
09:af:32:6f:23:cd:19:ac:63:50:b7:92:95:bb:4b:
8b:95:23:7e:67:e4:c3:c4:f5:80:45:9f:b1:1d:cf:
9f:bb:b8:ee:99:6d:60:3d:bd:59:a9:e2:54:42:72:
ec:00:df:1b:24:cc:b7:86:15:5f:1d:a4:29:91:ac:
90:97:ee:f5:12:47:1a:c5:fa:61:e0:6a:0d:06:af:
36:94:f5:03:ae:5c:db:59:98:61:98:ce:ce:34:ef:
04:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C3:91:50:AA:DD:71:16:A2:0E:1F:E1:6E:8D:5E:3E:5C:80:FA:42
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08EC2A68EE1111EFA0337C80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.121.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a5:fe:5e:bb:41:ab:d1:90:8e:2b:14:92:8e:8a:bd:44:63:
d0:7a:e0:ef:d6:d1:b7:85:ff:26:e6:5c:75:f1:bf:6d:ab:aa:
70:94:1b:88:2c:04:30:f3:c1:e4:22:e8:62:e6:70:2b:c7:01:
b2:0a:2c:76:12:a4:43:86:ff:70:cf:6a:a6:6e:3e:38:38:24:
52:f6:06:a4:66:84:12:ee:52:0e:62:25:3a:80:82:73:1d:09:
ce:c7:76:ac:8d:2b:ac:05:52:b7:eb:be:78:8d:cd:e2:c0:f6:
84:db:b0:4a:43:74:9d:65:92:6d:b6:bf:e1:3e:1b:d4:0d:2a:
c8:f2:51:1d:8a:3e:c4:77:9e:8e:38:32:59:c6:16:51:bc:6a:
9e:8e:01:78:91:a0:1d:86:eb:f9:b4:c8:16:19:f4:cc:12:0f:
a0:39:4b:63:4c:e0:ff:2d:91:c9:20:b9:af:97:30:39:a2:e7:
7b:c4:e7:02:be:4d:b9:9a:cd:13:b2:32:72:89:42:90:b4:cb:
f1:76:a8:9b:79:03:54:65:c7:58:cc:7f:3d:5b:fa:2a:42:b3:
60:6f:8e:28:46:bb:34:c7:05:64:ad:28:7c:81:61:d0:fe:a9:
42:24:db:39:45:97:4e:18:49:a3:87:0b:eb:6a:ac:35:77:9a:
95:b7:62:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:25:07 2025 by rpki-client