Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D28F9E32F34C11EFB4B60F46762E951A.roa
File: D28F9E32F34C11EFB4B60F46762E951A.roa (raw, json)
Hash identifier: sjHNuPOMSRYzGruvGBH7KPEt/azLhh6+h42fsuj7mvE=
Subject key identifier: 5B:15:2A:91:6C:F0:AE:3D:C6:6C:2E:C8:3F:40:D2:B6:59:AF:81:01
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1A17
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D28F9E32F34C11EFB4B60F46762E951A.roa
Signing time: Tue 25 Feb 2025 07:47:55 +0000
ROA not before: Tue 25 Feb 2025 07:47:51 +0000
ROA not after: Thu 25 Feb 2027 07:47:51 +0000
asID: 61317
IP address blocks: 154.16.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6679 (0x1a17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 25 07:47:51 2025 GMT
Not After : Feb 25 07:47:51 2027 GMT
Subject: CN=67bd75ab-9c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:6c:79:97:38:4e:35:13:74:28:8e:c4:2b:
f7:f1:56:ed:f7:f1:22:55:85:a3:20:fa:90:09:41:
6b:41:c4:1b:e3:f1:09:25:e7:aa:cf:f2:92:d9:fd:
c7:f0:85:34:4e:9d:e3:a9:20:c3:f1:8e:49:9a:85:
95:7e:aa:fd:f5:5e:20:58:7a:de:e7:0a:c3:bc:69:
f2:02:a0:87:e5:bb:c3:99:cd:3d:19:bd:2b:06:62:
bc:b3:fc:33:5a:ff:dc:c8:9d:3c:37:00:9e:59:60:
86:a5:c4:97:05:d2:d4:e5:0b:3f:c5:71:14:3f:23:
03:10:7b:6a:a0:08:68:42:a2:8e:6a:c8:07:20:fa:
f5:f6:ec:be:7b:4a:91:56:bc:0d:7b:79:f8:45:9a:
cf:2c:74:62:2c:5a:01:c3:dd:10:39:2b:cf:f5:03:
65:6d:50:00:00:5b:42:04:e1:47:09:07:63:8a:68:
5a:12:2d:61:e3:8f:30:11:07:0b:8b:0c:03:75:fa:
21:e9:3f:bb:76:a6:de:ae:7c:d8:ba:5b:85:d6:e6:
d0:8c:cb:8b:97:61:d0:b1:38:3f:b9:40:7a:77:e2:
18:d9:8f:0f:53:d4:54:e0:a1:32:cf:26:62:52:b4:
e8:fd:ce:60:e3:25:ed:06:d3:e2:09:0b:77:30:06:
da:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:15:2A:91:6C:F0:AE:3D:C6:6C:2E:C8:3F:40:D2:B6:59:AF:81:01
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D28F9E32F34C11EFB4B60F46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.69.0/24
Signature Algorithm: sha256WithRSAEncryption
38:eb:32:b5:e1:88:bf:dd:fc:71:0a:3b:21:aa:27:0c:3d:4e:
30:07:e3:e0:e6:45:eb:dd:7f:29:4e:7d:e2:ce:d2:e1:fc:db:
e0:f6:c1:fa:e2:ff:85:04:47:1b:08:c5:b2:f2:d9:cd:49:69:
45:15:ea:22:d5:be:5b:a2:05:82:1d:c9:7c:8e:28:78:99:fa:
c6:ab:19:ed:c4:0e:03:b2:0d:12:22:32:33:a8:7a:0c:58:5f:
5a:2a:47:8a:34:0c:fd:28:0f:9d:44:0f:5b:d6:97:4b:13:71:
72:f6:86:e0:df:40:8d:e3:0b:4e:1c:e8:eb:0c:35:81:50:17:
6c:34:4c:68:2b:a4:86:e1:88:6b:d7:ba:ee:60:81:89:45:23:
3e:a6:79:ad:38:ec:e6:53:07:1e:6f:65:01:0a:85:0b:f8:45:
43:a7:ae:05:12:ba:92:45:66:2e:19:22:75:9f:19:da:8d:dc:
ba:0d:70:6e:29:aa:a2:6c:53:1e:e0:aa:a1:02:9e:40:dc:a1:
d9:19:f9:42:1b:e3:b6:e0:58:9c:0f:d3:b4:54:55:62:4c:6c:
64:81:40:17:31:ac:51:bc:01:08:0d:90:3e:d1:d3:98:9e:d2:
fc:cd:ac:65:78:f5:95:19:93:a7:61:db:da:55:7e:5d:43:36:
56:34:ca:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:39:12 2025 by rpki-client