Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0F6F68340D6E11EF92B99148017001B1.roa
File: 0F6F68340D6E11EF92B99148017001B1.roa (raw, json)
Hash identifier: O82pj6uUA9ghxyhP9Eug9p1XbEKm+rOdTIu/Ih1UFTA=
Subject key identifier: 04:3D:7A:1C:69:A0:DA:08:15:9D:39:60:D0:85:9F:79:C1:3E:A2:10
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1633
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0F6F68340D6E11EF92B99148017001B1.roa
Signing time: Wed 08 May 2024 19:06:23 +0000
ROA not before: Wed 08 May 2024 19:06:20 +0000
ROA not after: Sat 09 May 2026 19:06:20 +0000
asID: 834
IP address blocks: 154.16.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5683 (0x1633)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: May 8 19:06:20 2024 GMT
Not After : May 9 19:06:20 2026 GMT
Subject: CN=663bcd2f-3bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3e:2d:32:91:45:43:64:79:39:b8:6a:af:99:
32:6c:1d:2a:89:d5:3a:b1:f0:f5:ec:16:ce:1e:d8:
8a:4a:e4:c5:10:fd:49:5c:05:a6:23:d6:3b:7c:b3:
b8:ed:08:7e:d9:1f:9a:c3:d6:34:b8:a6:b3:23:8a:
88:b5:1e:a0:6e:2a:c8:f6:37:85:f7:87:71:28:54:
44:44:f5:19:25:8e:94:3d:d3:14:21:52:2d:1b:bc:
3b:29:aa:f3:50:cd:19:96:d8:bf:f1:66:dc:1f:ad:
8d:0e:c7:0a:84:62:90:13:30:5d:68:c4:48:63:b9:
43:78:f6:18:5c:b8:8a:8f:85:13:b0:cf:d6:a6:27:
43:91:58:c5:81:96:11:a4:74:62:00:6a:c1:d6:fa:
13:26:d3:f3:97:d0:50:5e:5e:0c:f3:11:de:2c:46:
95:78:96:d1:0a:53:e3:21:bc:44:3a:e7:70:08:d1:
10:b4:9c:2a:85:03:5d:e0:c4:9c:b8:df:6d:8a:7d:
e0:c8:b1:7b:ae:4d:e6:e9:3c:1a:de:73:3c:e8:cc:
91:db:7f:24:d3:60:12:8d:b8:da:ca:20:17:ea:91:
ac:e1:9b:12:66:32:91:a6:b6:8c:27:27:4f:65:49:
16:7e:37:80:18:87:ac:63:8d:02:64:c3:5a:69:19:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3D:7A:1C:69:A0:DA:08:15:9D:39:60:D0:85:9F:79:C1:3E:A2:10
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0F6F68340D6E11EF92B99148017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.132.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b6:36:aa:c1:48:92:fe:af:1d:5d:b9:bd:28:cd:5a:3a:9c:
3d:a9:16:fe:a2:bd:08:a0:f8:49:99:32:49:a1:fc:d9:08:2f:
d8:9d:4f:da:cd:70:ed:9b:ec:25:a7:0f:e1:4a:9b:1d:7e:3e:
09:04:be:6b:75:bc:f9:96:b6:de:34:89:e1:a9:bb:ad:ac:23:
1e:3b:85:01:99:13:d3:24:18:c6:be:23:49:18:d9:a2:1d:f7:
ec:97:01:e1:c5:e4:5b:bb:9a:26:9a:22:a6:69:23:e9:77:0e:
e6:80:a0:06:04:70:f4:04:68:d0:5c:00:06:9a:47:b5:94:da:
a8:7e:27:f9:70:88:e0:79:f2:0e:32:2e:00:11:ef:c7:b1:03:
b1:f5:0a:67:e6:da:f9:62:be:5a:9f:e0:7b:91:d2:eb:ab:3d:
14:14:4c:54:8c:d0:f6:d5:80:fc:e1:57:3b:f0:45:90:22:34:
e3:14:4d:2e:7c:e5:45:99:c9:40:0b:6a:b6:16:6d:e8:dc:84:
59:5e:09:f4:87:4e:c2:66:8c:26:4e:0e:cd:00:96:1f:f5:74:
00:9d:7e:ef:d1:db:6f:d4:8d:9f:30:f9:12:db:e4:da:5a:93:
f5:dc:04:cc:bf:9a:d4:1b:99:b9:f0:79:07:03:f1:3d:85:f4:
cb:72:41:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:50 2025 by rpki-client