Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DDF84E42E85A11EFA6DA695B762E951A.roa
File: DDF84E42E85A11EFA6DA695B762E951A.roa (raw, json)
Hash identifier: w+K/RNhM720TIP7E84eLyf8m+1Id9pYOtWy6bmQJ2Gc=
Subject key identifier: 04:B8:F8:3E:12:FB:DA:9F:12:F7:4D:BD:23:4C:A6:6C:FA:7B:9D:4B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 19D4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DDF84E42E85A11EFA6DA695B762E951A.roa
Signing time: Tue 11 Feb 2025 09:30:44 +0000
ROA not before: Tue 11 Feb 2025 09:30:40 +0000
ROA not after: Sat 13 Feb 2027 09:30:40 +0000
asID: 61317
IP address blocks: 154.16.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6612 (0x19d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 11 09:30:40 2025 GMT
Not After : Feb 13 09:30:40 2027 GMT
Subject: CN=67ab18c4-b41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e6:6e:07:c8:4d:f7:48:6c:a0:38:97:19:01:
97:95:2f:d6:7d:b8:12:e4:27:22:70:ab:c7:c4:8c:
61:1e:09:eb:87:b6:73:73:58:1c:9c:f0:39:07:39:
2c:47:c7:51:1e:ed:97:df:4f:c0:3e:a2:43:22:6d:
31:5c:6a:b1:50:fe:78:75:6a:05:d6:2c:ef:56:82:
2d:01:3e:e3:43:4d:97:2c:d6:6a:a2:59:76:56:2f:
78:d6:48:aa:6b:36:21:62:b2:ac:02:0a:8a:ee:b9:
86:e4:48:d8:d0:c1:9c:ea:ae:b6:5a:4e:7e:1f:8c:
77:1d:92:1b:12:03:e9:1e:fa:31:78:71:d2:26:7a:
0b:c2:40:f2:f6:0c:37:ab:ff:e4:6a:46:3e:d2:6d:
b6:9e:cd:2a:12:27:59:01:a5:b6:ba:82:2d:94:85:
9d:ec:fc:77:23:f4:4d:3f:5b:5d:3d:b9:7b:c1:53:
fa:8f:25:05:f7:f3:c2:13:8b:b9:5c:ea:6b:cd:69:
ac:3d:b9:ae:09:9e:7e:b7:db:20:dc:56:90:75:01:
23:aa:a6:64:5a:c7:17:02:15:b5:2f:7f:f4:5b:97:
70:5b:1e:b6:72:77:af:1a:57:c4:72:1c:29:12:6e:
a9:45:ff:43:e9:c7:95:17:f6:fd:fe:9f:88:29:5b:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B8:F8:3E:12:FB:DA:9F:12:F7:4D:BD:23:4C:A6:6C:FA:7B:9D:4B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DDF84E42E85A11EFA6DA695B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.134.0/23
Signature Algorithm: sha256WithRSAEncryption
14:e7:ae:0d:9e:65:8d:97:59:e0:f1:4b:ec:3f:17:12:5f:d8:
4e:60:26:47:1f:33:b4:18:dd:47:ed:6b:93:1f:e0:6f:a0:79:
9a:41:62:56:90:57:15:9f:5a:d2:15:25:1b:bd:3f:4e:28:61:
f9:74:ae:6c:79:fc:43:d4:e1:6a:47:09:e9:a7:e1:6d:0b:39:
cf:67:c7:f1:44:8c:40:57:77:99:1d:45:e3:bc:0f:98:67:3d:
cb:99:5d:3b:84:7f:30:e9:71:6b:21:3f:cc:61:bb:2f:f4:c2:
a3:50:b9:0d:29:ad:bf:28:be:11:d1:11:75:bb:ce:91:e3:90:
7b:df:76:2e:f8:86:81:e6:25:de:b0:37:5e:4b:73:47:da:fa:
55:c6:94:d9:16:d4:5e:bf:30:55:65:4d:fd:23:d5:bb:92:d0:
04:e6:64:2d:44:46:3f:61:72:a1:81:7d:c1:7e:3a:ed:78:ee:
68:d4:52:0a:83:45:fb:34:ed:ed:19:16:de:d9:54:b6:77:eb:
a7:25:b8:4a:dc:f1:42:a7:73:f0:b7:5a:68:1e:dd:36:e1:26:
de:8e:2e:7a:bf:cc:53:fa:3e:39:d9:92:13:33:05:4f:cb:29:
83:38:df:21:eb:04:cf:93:45:d3:6e:01:51:84:ed:bc:ff:21:
d9:e3:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:49 2025 by rpki-client