Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1433FE14EE1611EFB51814A0762E951A.roa
File: 1433FE14EE1611EFB51814A0762E951A.roa (raw, json)
Hash identifier: DWoCgBYNqLZ4koTflIoWz4Fi3gkmBaNALOG4YbmWDPM=
Subject key identifier: F2:DF:98:EF:F5:78:CD:FD:D7:38:61:52:C0:D1:3F:C2:C4:86:83:24
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 19F1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1433FE14EE1611EFB51814A0762E951A.roa
Signing time: Tue 18 Feb 2025 16:33:27 +0000
ROA not before: Tue 18 Feb 2025 16:33:23 +0000
ROA not after: Sat 20 Feb 2027 16:33:23 +0000
asID: 61317
IP address blocks: 154.16.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6641 (0x19f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 18 16:33:23 2025 GMT
Not After : Feb 20 16:33:23 2027 GMT
Subject: CN=67b4b657-6a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:56:22:12:99:9c:60:b3:a4:bb:21:9d:d0:
29:dc:f8:10:57:25:fe:b2:a9:c1:29:a7:db:0d:c3:
c0:10:0a:0c:31:3d:62:a7:3a:47:5b:37:96:b5:70:
e9:86:3c:3b:df:f9:3f:11:e2:ec:65:36:b1:82:41:
11:52:70:29:f3:08:b3:83:f9:a8:80:87:47:4e:67:
1e:ae:d5:9a:e2:98:4e:ca:c7:15:af:3b:f0:da:b1:
83:2d:f3:68:6e:84:c5:40:19:3d:96:c1:8a:cc:e2:
f8:0f:d8:08:90:c8:96:16:e8:00:76:4d:e9:60:75:
82:ed:8a:26:87:7b:f6:2c:b1:53:de:2b:8e:e7:db:
4f:26:a1:11:0a:4e:58:64:5b:20:35:0a:b5:00:77:
30:dc:3e:25:37:4a:2b:85:89:a8:99:38:f7:d5:a2:
6d:ca:a6:9e:34:22:f4:5e:b1:36:14:23:41:11:6e:
ea:c4:cf:fe:9c:cd:c5:e2:b1:67:a0:72:14:cb:e5:
81:65:d0:99:ab:d6:fb:11:16:69:86:ec:67:3a:ab:
b0:0b:dd:46:48:67:95:73:96:2a:ad:fa:6d:ce:36:
31:80:f3:c6:79:65:3d:b9:ef:89:c4:f7:6e:54:13:
a9:46:df:b7:fe:09:e1:8f:e8:db:71:74:58:b9:ad:
35:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DF:98:EF:F5:78:CD:FD:D7:38:61:52:C0:D1:3F:C2:C4:86:83:24
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1433FE14EE1611EFB51814A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.210.0/24
Signature Algorithm: sha256WithRSAEncryption
60:30:30:f5:28:03:54:91:b2:40:f0:73:39:32:2b:00:ca:d9:
52:ac:d8:d5:af:f1:28:f4:80:68:9a:59:b5:4e:8d:d5:9d:f8:
75:9c:84:42:c4:c4:3d:44:0f:30:e5:c4:ca:a5:ab:2f:e8:59:
cf:03:9c:69:ae:5e:bb:34:30:c3:0e:2d:71:71:18:2e:c7:ba:
f5:cd:1a:2c:47:0c:19:54:0f:c5:94:e7:6b:96:6b:5e:4c:6a:
dd:4c:57:bb:ab:d0:6d:20:a2:fe:69:ea:ea:37:65:7c:87:80:
29:27:29:11:bd:2d:08:c9:35:fc:7a:e7:90:7f:2e:0d:e2:ae:
75:b4:af:ab:e8:0b:85:e4:d1:e2:96:20:45:83:03:0d:ca:fd:
ba:bb:f3:ed:7c:f7:49:71:02:61:e0:8f:ca:1f:fc:23:1d:99:
67:ff:ab:68:65:f9:f0:7b:c6:3d:65:f4:42:10:77:3d:6f:af:
7e:db:7e:19:e6:67:a6:fe:10:cd:f5:2f:82:72:33:3b:de:41:
34:42:46:66:be:98:9a:f2:42:8a:b0:6e:3a:6a:d6:18:4e:57:
cd:8c:52:b6:ac:8c:af:18:e6:e6:19:68:4b:c6:d2:4d:f3:5f:
ae:7e:e6:fd:3f:ea:95:79:97:86:df:d9:07:ff:af:e3:8f:7b:
4a:e5:d0:f4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGfEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTAyMTgxNjMzMjNaFw0yNzAyMjAxNjMzMjNaMBgxFjAU
BgNVBAMTDTY3YjRiNjU3LTZhMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCd/VYiEpmcYLOkuyGd0Cnc+BBXJf6yqcEpp9sNw8AQCgwxPWKnOkdbN5a1
cOmGPDvf+T8R4uxlNrGCQRFScCnzCLOD+aiAh0dOZx6u1ZrimE7KxxWvO/DasYMt
82huhMVAGT2WwYrM4vgP2AiQyJYW6AB2TelgdYLtiiaHe/YssVPeK47n208moREK
TlhkWyA1CrUAdzDcPiU3SiuFiaiZOPfVom3Kpp40IvResTYUI0ERburEz/6czcXi
sWegchTL5YFl0Jmr1vsRFmmG7Gc6q7AL3UZIZ5Vzliqt+m3ONjGA88Z5ZT2574nE
925UE6lG37f+CeGP6NtxdFi5rTW9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU8t+Y
7/V4zf3XOGFSwNE/wsSGgyQwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzE0MzNGRTE0RUUxNjExRUZCNTE4MTRBMDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaENIwDQYJKoZIhvcNAQEL
BQADggEBAGAwMPUoA1SRskDwczkyKwDK2VKs2NWv8Sj0gGiaWbVOjdWd+HWchELE
xD1EDzDlxMqlqy/oWc8DnGmuXrs0MMMOLXFxGC7HuvXNGixHDBlUD8WU52uWa15M
at1MV7ur0G0gov5p6uo3ZXyHgCknKRG9LQjJNfx655B/Lg3irnW0r6voC4Xk0eKW
IEWDAw3K/bq78+1890lxAmHgj8of/CMdmWf/q2hl+fB7xj1l9EIQdz1vr37bfhnm
Z6b+EM31L4JyMzveQTRCRma+mJryQoqwbjpq1hhOV82MUrasjK8Y5uYZaEvG0k3z
X65+5v0/6pV5l4bf2Qf/r+OPe0rl0PQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:16 2025 by rpki-client