Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D7B34394F34E11EF86714D54762E951A.roa
File: D7B34394F34E11EF86714D54762E951A.roa (raw, json)
Hash identifier: 9H+Dcw44RbpW89QXO/w7pdrtoki43unkNKqhKfohQN8=
Subject key identifier: 94:91:13:4D:D9:FD:6C:57:51:6E:4D:DB:99:FB:A5:55:D7:C6:DB:B9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1A23
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D7B34394F34E11EF86714D54762E951A.roa
Signing time: Tue 25 Feb 2025 08:02:22 +0000
ROA not before: Tue 25 Feb 2025 08:02:19 +0000
ROA not after: Thu 25 Feb 2027 08:02:19 +0000
asID: 61317
IP address blocks: 154.16.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6691 (0x1a23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 25 08:02:19 2025 GMT
Not After : Feb 25 08:02:19 2027 GMT
Subject: CN=67bd790e-5bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:43:7c:d3:39:23:cf:88:dd:0f:f1:82:47:
c5:30:c2:9b:d6:af:5d:da:b6:09:ab:07:df:e0:13:
0b:d3:cd:e8:cf:63:15:2a:26:2e:ce:ae:5e:d3:65:
c3:59:4e:17:0a:9e:12:66:53:1d:51:66:17:26:45:
78:32:cd:13:02:b3:16:89:ed:88:8c:f0:f8:78:92:
2f:9f:f3:44:d8:1a:30:1f:2a:cf:1c:fc:05:01:2b:
4e:ad:37:28:0c:2c:d3:3c:1a:1a:b1:68:b3:f0:f5:
b2:b8:ee:e3:e6:26:49:6d:35:35:44:04:67:e5:b8:
85:5b:79:84:13:ad:bd:a7:87:17:23:0b:1d:98:77:
91:5f:c2:6b:47:a4:e1:76:79:34:61:82:5a:d1:51:
a9:89:38:19:84:5e:55:cc:e4:aa:91:4d:b4:f8:2c:
89:09:b7:f3:bc:e4:ed:bb:e7:99:63:43:af:ee:e9:
4b:b2:c5:ba:23:71:b2:54:fd:24:f2:91:eb:bb:43:
f9:d3:c2:13:fb:6a:19:d4:99:9b:54:70:19:b0:74:
8c:ee:c2:36:13:f4:c1:7f:31:82:ea:a5:b0:de:d6:
a3:2c:51:90:8d:97:47:bc:92:68:8b:fe:a7:54:9b:
86:7c:2b:ef:d0:cb:a2:e4:66:d6:1a:d0:54:fb:13:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:91:13:4D:D9:FD:6C:57:51:6E:4D:DB:99:FB:A5:55:D7:C6:DB:B9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D7B34394F34E11EF86714D54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.238.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ce:bf:e4:61:8a:29:bd:04:7f:eb:54:77:14:eb:48:07:71:
78:83:7a:c8:d5:65:8c:45:ee:d8:98:75:c6:7f:c0:b5:71:6c:
7a:3b:6d:0c:8d:15:9d:29:75:96:6b:8f:29:66:2b:dc:24:70:
b3:dc:53:fe:9b:4a:e6:eb:ac:9c:45:62:bf:c0:69:b7:14:13:
25:b2:24:f3:87:71:10:fc:23:1c:26:b3:c1:d2:de:3d:9d:75:
9b:a2:a4:1d:63:1d:f1:4a:14:e9:5a:39:a0:f5:61:f6:a5:29:
18:1f:ea:21:34:4f:fb:1f:4c:c4:14:52:dd:b7:ce:58:a5:c9:
5b:78:06:85:7c:02:83:50:0a:97:35:fa:1b:f2:ec:7d:7e:2b:
26:74:c2:4d:e5:fa:e3:fe:55:44:1f:99:0b:c7:19:df:6b:bf:
52:7e:45:4c:24:fb:fd:2e:42:8f:52:74:2f:86:53:26:a6:dc:
1d:00:18:0b:60:4a:73:00:68:bf:12:c0:3a:82:91:2f:8c:33:
60:06:60:16:a7:0e:d6:b8:3d:c2:a6:f7:06:22:a3:67:27:85:
6f:af:90:74:19:1b:cc:d7:63:d3:71:65:0a:9c:5c:4d:f8:97:
e2:b7:fd:0e:fd:99:c6:76:55:28:92:a8:36:d9:47:33:1d:e3:
f8:0a:c2:c3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGiMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTAyMjUwODAyMTlaFw0yNzAyMjUwODAyMTlaMBgxFjAU
BgNVBAMTDTY3YmQ3OTBlLTViZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDW0EN80zkjz4jdD/GCR8UwwpvWr13atgmrB9/gEwvTzejPYxUqJi7Orl7T
ZcNZThcKnhJmUx1RZhcmRXgyzRMCsxaJ7YiM8Ph4ki+f80TYGjAfKs8c/AUBK06t
NygMLNM8GhqxaLPw9bK47uPmJkltNTVEBGfluIVbeYQTrb2nhxcjCx2Yd5FfwmtH
pOF2eTRhglrRUamJOBmEXlXM5KqRTbT4LIkJt/O85O2755ljQ6/u6UuyxbojcbJU
/STykeu7Q/nTwhP7ahnUmZtUcBmwdIzuwjYT9MF/MYLqpbDe1qMsUZCNl0e8kmiL
/qdUm4Z8K+/Qy6LkZtYa0FT7E9QPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUlJET
Tdn9bFdRbk3bmfulVdfG27kwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0Q3QjM0Mzk0RjM0RTExRUY4NjcxNEQ1NDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEO4wDQYJKoZIhvcNAQEL
BQADggEBABDOv+Rhiim9BH/rVHcU60gHcXiDesjVZYxF7tiYdcZ/wLVxbHo7bQyN
FZ0pdZZrjylmK9wkcLPcU/6bSubrrJxFYr/AabcUEyWyJPOHcRD8Ixwms8HS3j2d
dZuipB1jHfFKFOlaOaD1YfalKRgf6iE0T/sfTMQUUt23zlilyVt4BoV8AoNQCpc1
+hvy7H1+KyZ0wk3l+uP+VUQfmQvHGd9rv1J+RUwk+/0uQo9SdC+GUyam3B0AGAtg
SnMAaL8SwDqCkS+MM2AGYBanDta4PcKm9wYio2cnhW+vkHQZG8zXY9NxZQqcXE34
l+K3/Q79mcZ2VSiSqDbZRzMd4/gKwsM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:56 2025 by rpki-client