Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8DBAE70EE0D11EFB923BF6A762E951A.roa
File: B8DBAE70EE0D11EFB923BF6A762E951A.roa (raw, json)
Hash identifier: Q8KRx/yRoMduBXOZ+NDDK9Cua0tsr7S+9vRvL4I8F4U=
Subject key identifier: 41:0C:E7:5F:EE:66:E8:D9:08:3C:1A:DF:E2:3A:82:4F:E9:81:F2:CA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 19DF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8DBAE70EE0D11EFB923BF6A762E951A.roa
Signing time: Tue 18 Feb 2025 15:33:37 +0000
ROA not before: Tue 18 Feb 2025 15:33:33 +0000
ROA not after: Sat 20 Feb 2027 15:33:33 +0000
asID: 61317
IP address blocks: 154.16.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6623 (0x19df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 18 15:33:33 2025 GMT
Not After : Feb 20 15:33:33 2027 GMT
Subject: CN=67b4a851-2411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:67:2a:09:ea:aa:b9:48:65:e6:34:77:d3:
d4:95:d6:8a:84:6e:76:32:e1:29:40:0b:a5:4a:8a:
f1:5e:46:05:cf:9b:f9:8e:df:69:82:14:fd:eb:8e:
2b:db:5c:b6:17:71:55:a6:7a:2c:35:76:86:03:81:
bb:1a:13:62:1c:92:70:97:68:7f:e9:7b:19:9f:0b:
52:a5:2d:09:f8:ae:3f:db:cc:ea:23:02:9e:00:5d:
da:5d:8e:71:15:79:da:a3:23:6f:e8:c5:64:69:79:
e8:1e:cb:ee:a8:2b:0f:94:59:a9:fc:90:a2:21:ca:
70:32:92:95:9a:04:a6:60:2a:a5:b4:c7:ee:7b:a1:
b5:e4:b2:d8:f6:9d:3e:41:10:9c:cd:09:c9:dd:04:
e3:4b:65:67:07:43:f5:21:6e:3b:3c:52:99:81:1a:
8e:04:25:e5:36:b2:37:ac:cf:a3:b2:69:f8:83:33:
49:c9:ef:ff:c0:00:0e:42:be:77:64:9c:54:f9:06:
4a:01:67:4c:b7:c5:3f:26:76:a5:1a:3a:a5:cb:ef:
e0:13:fb:14:b6:48:ee:05:81:40:39:e3:29:b4:ff:
94:91:08:bc:cb:31:b7:dd:8e:e5:c2:e2:29:70:0d:
c8:9e:ad:a1:93:a9:a1:69:d0:94:85:a5:8b:3e:5c:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0C:E7:5F:EE:66:E8:D9:08:3C:1A:DF:E2:3A:82:4F:E9:81:F2:CA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8DBAE70EE0D11EFB923BF6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.63.0/24
Signature Algorithm: sha256WithRSAEncryption
64:4c:39:6c:4f:ff:86:6c:11:c0:53:c3:90:d5:80:7f:c6:b9:
65:48:9e:7e:d7:d9:1b:1c:4f:4a:19:7a:94:de:c4:56:19:96:
3f:bd:0d:9b:26:94:65:ae:74:69:2d:73:cc:5f:c3:aa:5e:53:
c9:3b:75:5d:d6:13:08:87:8f:06:88:ec:4b:cd:3d:75:22:ca:
30:29:85:56:b4:b1:49:81:f7:f9:b6:18:15:68:9b:a3:a6:f0:
2a:5b:60:7e:ef:70:f2:d2:41:7b:c6:39:6a:d1:bb:bd:bf:b6:
20:b6:0f:7b:20:64:bf:48:81:b0:ad:26:5b:58:be:1c:b4:42:
d7:62:0e:c3:c8:50:35:a6:fc:05:26:99:fc:a2:e4:a1:cc:a4:
40:0d:09:c8:11:f2:7e:6f:c3:1a:61:df:bb:41:d9:f9:3c:a6:
fd:40:db:e2:b4:cb:d0:7c:ea:59:f0:20:14:aa:44:c6:ed:a5:
35:bc:46:7f:28:23:e4:c8:71:b7:d4:b3:90:f2:8a:da:fd:5a:
39:6b:53:22:bc:61:e4:3f:d5:00:14:b8:2f:02:3e:8b:5d:2a:
36:4e:f3:eb:59:fe:a8:a0:85:ce:7f:3c:58:90:a8:2c:18:4e:
14:71:8d:7e:9e:c2:75:58:44:47:03:ec:1f:39:3f:96:5b:15:
d6:9a:e4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:19:25 2025 by rpki-client