Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/53FFF60411CE11EEBDE18D804AD9E6FC.roa
File: 53FFF60411CE11EEBDE18D804AD9E6FC.roa (raw, json)
Hash identifier: smfxtM32aMINYPvLz7KfmB+NuUqwzBRyHyhkR99ydO0=
Subject key identifier: FB:48:CF:7A:D8:64:99:F7:5A:F8:62:02:94:A0:6D:28:91:BA:A4:D4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FF6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/53FFF60411CE11EEBDE18D804AD9E6FC.roa
Signing time: Fri 23 Jun 2023 14:00:37 +0000
ROA not before: Fri 23 Jun 2023 14:00:33 +0000
ROA not after: Sat 28 Jun 2025 14:00:33 +0000
asID: 834
IP address blocks: 154.16.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4086 (0xff6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jun 23 14:00:33 2023 GMT
Not After : Jun 28 14:00:33 2025 GMT
Subject: CN=6495a584-9e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:fe:cf:36:42:0e:8f:77:88:cf:d6:d2:38:
8a:c5:48:3b:80:42:9e:03:c5:c4:06:e8:9d:41:91:
96:9b:95:1a:57:71:1d:62:90:27:9c:fe:92:87:f3:
80:8e:0d:66:ee:f5:25:64:c5:03:23:ef:15:7b:ff:
0c:04:47:1b:5e:36:ea:8d:0d:45:06:82:83:33:b5:
23:05:b7:e0:48:ff:f1:df:02:a2:9f:2c:9f:6a:47:
ed:8e:66:2a:50:47:64:00:a9:a6:95:5f:2e:bb:a5:
9f:81:56:a1:3a:bd:e7:b7:e3:81:c6:d7:26:99:0e:
55:bc:ce:84:c1:36:d3:29:e3:92:cd:0e:c3:46:98:
49:89:44:52:33:f1:c9:54:05:69:09:d8:b9:5b:6d:
3d:04:db:df:98:5f:6e:ca:6b:99:7d:ac:1a:f8:5a:
6f:e7:24:fb:ef:c7:ff:7d:0c:e5:5e:a2:d1:4a:53:
27:ba:39:33:c4:2a:43:b2:a7:50:48:b2:cf:57:5e:
9b:1a:b1:7e:cd:73:da:5f:6c:5e:29:64:51:8c:da:
3a:a0:58:66:72:e9:e0:b8:2e:5f:9a:aa:78:98:92:
ab:25:97:0c:8b:89:b5:0a:e5:f1:2c:d4:9d:63:cb:
57:7a:a0:cb:3d:31:99:9c:8d:79:fa:54:30:19:50:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:48:CF:7A:D8:64:99:F7:5A:F8:62:02:94:A0:6D:28:91:BA:A4:D4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/53FFF60411CE11EEBDE18D804AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.214.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:d1:df:a0:9b:8b:9c:39:18:a7:fa:02:16:f6:5d:4b:8d:30:
04:b5:09:55:1f:fa:80:82:6d:ac:71:17:da:f6:37:1d:ea:9c:
d4:ce:89:89:81:4b:10:bc:4e:9c:90:b2:ab:b6:d3:f6:89:63:
9b:19:b1:a3:a3:47:3f:5e:af:6a:2e:4f:75:84:72:62:a9:e6:
7e:d5:1e:0f:fa:b1:ee:3a:7f:f2:b7:c8:c4:1b:5b:dd:50:dc:
58:5a:02:59:75:ee:b4:26:d7:89:18:61:61:27:e4:1f:07:98:
17:37:a9:bd:b7:be:30:9e:84:7b:c9:58:bc:d4:7c:b4:36:c6:
34:fd:20:0d:9c:01:af:b2:73:1e:a5:9a:49:b5:bd:f8:0d:73:
df:78:d5:52:ca:4b:30:35:34:f8:79:16:3f:2c:21:55:58:bb:
1b:e7:8e:47:fa:fc:6c:d1:1a:a1:eb:e3:94:17:49:89:9e:14:
19:48:0f:46:e4:a5:0a:26:dd:c5:02:f1:1c:fe:78:bf:96:7c:
0c:f0:67:9e:cd:26:b4:55:86:1c:45:50:d7:ef:74:f9:9e:27:
70:1e:75:89:a8:54:6e:92:39:47:3f:a5:e1:85:61:11:62:33:
ae:06:54:9f:cd:15:19:df:7b:43:f9:d0:a2:c1:a0:05:51:8c:
7a:04:d2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:08:54 2025 by rpki-client