Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2B014A64E85A11EF8423DE56762E951A.roa
File: 2B014A64E85A11EF8423DE56762E951A.roa (raw, json)
Hash identifier: EhZt4+U9CfGIevnoXRCnDW3/HfDBa+BA98W3GJivAJ8=
Subject key identifier: A0:F6:C4:AA:EB:D5:B8:4F:14:24:48:07:62:C7:F4:21:6D:46:16:F9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 19CD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2B014A64E85A11EF8423DE56762E951A.roa
Signing time: Tue 11 Feb 2025 09:25:44 +0000
ROA not before: Tue 11 Feb 2025 09:25:40 +0000
ROA not after: Sat 13 Feb 2027 09:25:40 +0000
asID: 61317
IP address blocks: 154.16.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6605 (0x19cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 11 09:25:40 2025 GMT
Not After : Feb 13 09:25:40 2027 GMT
Subject: CN=67ab1798-2221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c7:39:37:d5:6d:01:93:92:9b:26:b3:4a:6d:
44:43:d7:1e:1f:fc:eb:81:e3:4e:24:1a:81:ed:51:
cb:04:63:dc:34:c2:8d:bb:61:52:de:85:13:0d:e9:
fe:fd:c1:c0:8c:c9:94:94:99:d4:a6:de:5d:43:4c:
16:a9:a8:51:22:50:a4:71:a1:11:22:09:05:59:53:
93:f5:12:28:fb:fd:9c:b3:77:9a:57:20:9e:8d:81:
61:c2:e4:f4:ff:a9:7a:b1:00:c3:d9:fa:c4:26:43:
19:12:92:ba:5c:3c:92:f0:b1:f8:87:8d:04:85:f1:
ad:85:b7:c4:12:4d:d5:4f:33:c4:69:d8:95:71:7b:
c6:f8:f0:9c:9b:70:c6:80:0f:76:51:48:76:32:fe:
9b:f1:e8:d7:6e:5f:4b:31:9a:50:0e:3c:48:cf:01:
ab:39:2b:19:60:b6:b1:b7:04:19:2e:83:d3:eb:5b:
fa:4e:ea:f7:66:b4:8a:c6:ee:fd:ea:49:f1:cd:b7:
aa:e3:29:6d:3e:e6:8f:3b:71:d1:65:93:37:fb:61:
98:87:76:99:c8:62:95:07:33:54:56:4f:96:b1:53:
30:eb:f2:3a:7a:a2:11:d4:43:d1:b5:e9:64:e8:d9:
d7:aa:28:d6:51:fd:42:15:a8:85:8d:85:53:04:e7:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F6:C4:AA:EB:D5:B8:4F:14:24:48:07:62:C7:F4:21:6D:46:16:F9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2B014A64E85A11EF8423DE56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.57.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ab:56:84:b1:91:1f:2e:e4:c2:12:93:6f:8f:0c:67:72:9f:
d8:36:3b:20:31:05:fa:64:ac:bc:cd:c8:f1:d4:33:37:25:ac:
a3:58:5d:90:a5:77:25:5e:2f:56:66:3c:e5:42:2e:3c:6e:bf:
75:3f:21:88:1b:d7:69:b3:1a:fc:67:62:e3:e7:2d:91:b7:48:
1c:aa:e8:ed:2d:b7:4a:5e:d8:fc:8a:42:49:89:03:94:4d:b0:
3b:a1:1f:d5:a2:6b:ee:43:a2:02:28:e2:ab:74:66:ae:86:ef:
46:7e:23:a8:b1:c0:4f:a3:7e:2d:62:3c:da:85:b3:23:59:73:
e4:9d:b2:01:c2:58:8a:4c:8e:4f:b2:07:5e:3b:06:ee:b4:e3:
3b:08:b6:ac:b1:33:7a:d1:98:fc:b3:d9:bc:8e:e2:f5:6a:a8:
27:36:7d:6f:56:16:77:c5:aa:b6:da:43:96:45:f2:21:21:bc:
31:f8:24:0e:98:93:80:00:11:49:8e:42:a1:5e:75:ff:0e:97:
84:fa:d4:00:6e:ca:5d:7f:66:1d:58:b3:a2:61:ba:77:93:61:
c7:5f:98:fd:74:14:90:6d:44:de:71:0b:cc:a7:46:3b:af:9d:
2e:88:83:58:db:3a:ed:89:97:e7:ac:ae:a2:92:50:da:ca:a2:
3f:96:43:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:00 2025 by rpki-client