Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/12490A8C5B8F11EF85BB5D7A762E951A.roa
File: 12490A8C5B8F11EF85BB5D7A762E951A.roa (raw, json)
Hash identifier: d6vGVV0oXCosyoenUSnieJeDKpVqqobDgguD3vMWy+w=
Subject key identifier: 76:BA:F9:37:73:AE:67:23:DD:0D:FC:4F:21:3F:E0:60:C3:D9:07:D0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 17AB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/12490A8C5B8F11EF85BB5D7A762E951A.roa
Signing time: Fri 16 Aug 2024 05:19:12 +0000
ROA not before: Fri 16 Aug 2024 05:19:07 +0000
ROA not after: Sun 16 Aug 2026 05:19:07 +0000
asID: 834
IP address blocks: 154.16.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6059 (0x17ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Aug 16 05:19:07 2024 GMT
Not After : Aug 16 05:19:07 2026 GMT
Subject: CN=66bee150-3c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:98:2c:a2:22:48:e3:59:db:e5:dd:38:05:
de:96:55:1b:b8:0d:76:2b:d0:1e:2e:67:39:4b:e9:
5a:c5:88:25:b2:9b:d2:5e:6a:e4:38:4f:e9:3d:8c:
ce:f2:40:00:12:4e:85:c9:c6:37:f4:47:d6:58:e9:
2d:73:bd:74:96:af:72:dd:7b:9b:35:fa:d6:1f:87:
ca:cf:30:01:52:12:83:45:16:69:af:f9:5d:83:bd:
61:e7:1f:d2:e1:73:a5:39:14:b0:58:4e:0a:39:76:
c1:ec:84:b5:6b:ef:3e:d7:79:c2:3b:27:8f:d6:65:
f1:01:eb:40:6d:f8:e3:c1:27:05:6a:30:15:be:f6:
db:79:70:d8:1d:5d:67:d5:bf:6f:26:b5:c0:3b:66:
2c:16:54:a8:85:21:e6:dd:cf:dd:aa:db:70:6d:33:
a0:40:90:01:8a:df:0f:27:8c:43:f5:95:27:a0:b5:
8a:d6:ed:13:aa:c8:98:ef:ef:dc:c8:63:68:f1:e8:
3a:80:91:a7:5f:aa:bb:14:86:2b:67:df:66:35:8b:
a7:c3:0b:0c:bd:fe:6e:6e:8d:b1:6d:22:0a:b4:ef:
8e:f7:ca:95:3a:50:6a:bf:52:69:77:58:36:38:f1:
88:98:30:cd:00:f1:0c:a6:d7:01:b7:7f:ca:c5:d6:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BA:F9:37:73:AE:67:23:DD:0D:FC:4F:21:3F:E0:60:C3:D9:07:D0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/12490A8C5B8F11EF85BB5D7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.241.0/24
Signature Algorithm: sha256WithRSAEncryption
35:fe:e8:c7:54:d2:19:07:86:c4:70:9b:b5:9d:95:9e:d1:85:
da:22:2e:37:34:30:7c:75:55:11:87:67:af:b3:ff:dd:78:69:
86:b9:59:0f:27:62:f9:eb:15:24:7d:a3:4e:8d:60:0a:54:0a:
1b:d1:1e:be:64:dc:36:84:25:7f:25:a5:b4:be:75:46:7c:5b:
f3:1c:77:75:8a:de:7b:b9:2b:46:7c:53:15:55:6a:cf:21:9b:
a7:5a:4d:b3:06:98:db:34:be:fa:71:94:ae:ca:d8:ac:c7:1b:
34:c8:ad:a0:de:64:ea:64:0f:b3:2c:b1:60:b3:28:3b:a0:65:
48:6f:fd:6a:ab:bc:0e:08:0a:e4:31:30:60:a8:dc:60:36:08:
32:65:19:72:dc:f2:bd:ba:e5:76:3b:c7:46:22:14:6b:f3:36:
de:0f:5b:26:2d:21:18:79:cd:b8:16:5e:5b:a1:2e:2d:b4:8f:
0f:d2:bc:3e:4d:cc:bf:c8:ed:87:b2:ba:7e:12:8b:19:47:41:
70:6e:81:14:64:cf:80:f4:0d:45:e2:a7:67:f0:c8:c2:d6:7e:
2b:0c:46:bf:c3:1a:86:1c:36:fe:c7:b5:5b:75:7d:20:43:61:
96:f1:bb:cd:f8:a8:0a:78:6c:47:f2:64:d1:6a:20:59:5b:c7:
66:45:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:42 2025 by rpki-client