Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/42FFE32AEF5111EFBC655BAC762E951A.roa
File: 42FFE32AEF5111EFBC655BAC762E951A.roa (raw, json)
Hash identifier: vH5JsFbvp700ppBy+ckj3VLtbHiSd+gZQOm+GQq2CxQ=
Subject key identifier: 41:B6:4E:B4:DF:6E:F8:67:DB:D6:2D:33:E0:D3:3F:84:AE:60:5E:94
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1A02
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/42FFE32AEF5111EFBC655BAC762E951A.roa
Signing time: Thu 20 Feb 2025 06:09:37 +0000
ROA not before: Thu 20 Feb 2025 06:09:33 +0000
ROA not after: Sat 20 Feb 2027 06:09:33 +0000
asID: 834
IP address blocks: 154.16.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6658 (0x1a02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 20 06:09:33 2025 GMT
Not After : Feb 20 06:09:33 2027 GMT
Subject: CN=67b6c721-4553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:41:bd:7b:5e:c5:22:84:07:8c:d6:5a:e2:
f6:9d:6f:ea:48:db:cd:69:af:17:3c:0f:80:29:fa:
e2:8c:9d:69:de:48:c4:c7:3a:2c:c4:fa:03:8c:cf:
18:5d:ca:7b:0d:cb:d6:9b:6f:97:fa:f3:dd:c6:62:
c5:a5:36:c1:20:10:49:70:26:4c:c2:8d:f8:3d:16:
45:33:a7:9c:b8:57:6f:68:22:7b:c7:ba:e3:1f:d8:
b6:42:8f:c9:46:81:e2:09:86:32:8a:07:4e:d1:c9:
cc:f2:2d:65:79:06:1e:5f:27:9a:ea:9a:78:18:4e:
36:b3:32:fa:ff:20:82:71:30:05:bc:95:b1:d8:c9:
83:ce:21:08:75:b1:9e:af:7b:73:2d:07:7a:f1:3f:
ff:56:82:8a:13:61:3d:57:94:0a:f7:e2:8a:5d:d9:
44:3a:d0:7a:f4:60:d1:27:b0:cf:bf:35:d2:b3:1f:
23:89:32:e4:2f:2a:7a:20:da:8a:40:1e:0d:f0:92:
10:98:ec:8b:c6:b7:da:b0:27:75:fb:0e:ae:58:17:
fe:f5:fc:88:80:37:36:76:78:ca:b0:ea:d0:92:de:
1f:7e:78:1f:fb:6b:07:6a:c8:dc:26:3b:e8:9f:00:
d3:3b:2f:5b:27:fb:66:d9:4a:65:86:50:2b:b3:a6:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B6:4E:B4:DF:6E:F8:67:DB:D6:2D:33:E0:D3:3F:84:AE:60:5E:94
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/42FFE32AEF5111EFBC655BAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.218.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:69:49:b5:da:21:e7:d7:d9:b2:42:03:bc:e4:53:79:a6:b9:
45:33:19:d9:17:74:0b:37:48:b8:eb:ba:a9:e4:85:32:1d:15:
1e:f1:71:a4:6e:4f:83:7c:62:e0:30:25:e3:8b:6f:a3:a4:0d:
69:be:e8:c9:07:a7:6e:5a:d1:1b:07:b2:22:32:c3:c6:5f:38:
1c:b1:c8:e7:08:76:50:34:89:e7:de:dd:13:79:79:0e:35:65:
b3:48:8b:68:59:58:14:d9:8d:78:7c:35:74:83:03:d0:41:78:
93:9d:51:fc:b4:b0:c7:a6:21:87:06:5d:7d:09:ed:a8:49:05:
88:74:b8:43:8d:81:9a:9e:2f:6b:b8:d5:f6:ed:3a:13:56:74:
b1:2d:d5:ef:6b:4b:8d:58:0d:ea:28:d2:45:20:b6:2c:22:0e:
83:24:c2:ff:ee:3e:11:86:cc:a3:52:37:0f:ae:53:30:a4:97:
d7:1e:3d:24:b2:7b:e8:f5:1d:6f:36:b2:37:c0:0a:2b:47:b9:
ba:e8:2d:6d:41:16:2c:f2:e5:a3:fc:e4:43:87:82:bc:7b:91:
2e:12:40:5a:3e:d5:c7:03:a0:41:eb:16:e4:08:88:ac:80:cf:
1d:81:cd:39:7e:82:0e:cf:7d:c7:7c:bd:40:49:6a:9a:75:e7:
89:03:9e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:44 2025 by rpki-client