Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/801FDB5AEE0E11EF8A8D516F762E951A.roa
File: 801FDB5AEE0E11EF8A8D516F762E951A.roa (raw, json)
Hash identifier: L1SZj8K8vRRdcVpfo4372NTl7LAgcMuhPCJpom5cF44=
Subject key identifier: 45:E9:D9:63:26:FE:0F:46:28:92:F9:A7:41:29:35:1D:0A:1E:55:27
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 19E1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/801FDB5AEE0E11EF8A8D516F762E951A.roa
Signing time: Tue 18 Feb 2025 15:39:12 +0000
ROA not before: Tue 18 Feb 2025 15:39:08 +0000
ROA not after: Sat 20 Feb 2027 15:39:08 +0000
asID: 61317
IP address blocks: 154.16.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6625 (0x19e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 18 15:39:08 2025 GMT
Not After : Feb 20 15:39:08 2027 GMT
Subject: CN=67b4a9a0-7daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:98:66:8b:0a:0a:9d:54:39:66:c2:cb:32:
6f:7b:e1:a4:db:1a:d2:3e:1f:ea:5c:82:b7:78:a0:
1b:df:92:aa:8d:25:ec:4b:09:32:cd:bd:a0:87:5c:
25:e8:4e:da:5e:9a:b6:c2:7f:ec:5d:61:f0:83:ae:
9c:32:de:93:c7:81:9d:c0:9d:71:28:46:60:27:a6:
ae:ec:fb:50:90:01:d4:67:78:af:98:45:0d:60:4b:
bc:62:92:15:98:45:be:0e:1d:f4:99:54:22:56:99:
27:35:1a:43:97:47:00:03:f5:4a:13:de:79:3b:80:
fc:00:62:69:09:f4:60:17:c4:fe:7d:1a:26:a7:80:
05:ad:14:57:5e:6c:a8:f1:47:51:b9:5d:d5:fc:16:
c5:8a:fe:ad:4d:16:48:02:50:64:d5:99:d6:ac:86:
89:ca:47:58:86:d2:ee:be:a1:fb:2d:1a:44:db:37:
67:7d:4d:79:24:5a:f0:4f:3b:00:e3:fc:48:96:b6:
15:87:0d:1c:a3:5a:b7:08:2c:8c:4f:06:a5:fb:5d:
14:a7:ca:3b:8b:b8:59:cf:c3:d4:fd:38:b6:1d:d1:
eb:9b:a8:23:07:21:e6:df:8e:04:67:7e:17:9f:b7:
8f:f2:d5:42:2c:4b:2f:1e:6c:58:44:1c:86:ea:ec:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E9:D9:63:26:FE:0F:46:28:92:F9:A7:41:29:35:1D:0A:1E:55:27
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/801FDB5AEE0E11EF8A8D516F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.69.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:82:f1:17:49:58:7a:fd:61:67:a5:37:5d:b1:cd:8a:9f:14:
51:f5:cb:a4:5c:b9:56:e3:e2:88:13:60:73:51:35:da:6b:54:
6f:51:0b:58:86:18:3b:b8:d5:d8:65:0b:58:be:1b:6c:40:06:
c7:25:10:f6:e9:c1:96:d7:ff:27:a1:82:b3:59:9f:8b:a4:d7:
64:5c:23:44:fb:4f:42:cd:d2:71:71:d6:d0:ec:e0:7b:04:c4:
3d:05:b1:cd:ed:10:62:37:26:6b:ee:9b:5a:3b:bc:3d:26:38:
9d:e3:73:1c:a6:1f:17:35:e3:6f:06:77:c6:df:07:2c:0c:0f:
50:ef:a6:56:26:b9:1b:a5:56:ea:c6:da:96:66:b3:a8:0f:a6:
1d:97:c8:cb:e5:15:d9:50:9e:34:dc:d1:f0:90:b8:b7:2e:1f:
f8:f1:59:e9:cf:35:56:01:69:1a:82:6a:7c:9b:38:26:7b:38:
31:08:05:9b:1a:bf:a7:30:03:98:6d:41:52:65:f8:5f:e5:27:
c5:42:c1:76:8e:2e:51:b1:71:1b:d0:bd:54:e3:a9:0b:c4:c6:
a3:70:4a:b2:fa:94:3d:d9:6a:57:95:99:4d:81:ff:c6:b4:f3:
00:7c:5f:18:22:5b:26:72:40:d4:0e:ed:7d:5e:eb:86:46:e3:
82:f2:69:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:33:13 2025 by rpki-client