Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E54515F2C44411EF8811B8B1762E951A.roa
File: E54515F2C44411EF8811B8B1762E951A.roa (raw, json)
Hash identifier: B4T4ZueNRLZ3rw6XldlPFjrCPfSlEx4glSTIKab1w18=
Subject key identifier: E8:D1:C0:E2:09:D7:88:81:CD:66:55:D9:DA:B5:D0:25:8C:67:CB:37
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 195F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E54515F2C44411EF8811B8B1762E951A.roa
Signing time: Fri 27 Dec 2024 11:22:46 +0000
ROA not before: Fri 27 Dec 2024 11:22:42 +0000
ROA not after: Sun 27 Dec 2026 11:22:42 +0000
asID: 400040
IP address blocks: 154.16.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6495 (0x195f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 27 11:22:42 2024 GMT
Not After : Dec 27 11:22:42 2026 GMT
Subject: CN=676e8e05-4e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:d6:0b:82:1a:ec:b5:9f:18:af:fe:8a:78:
37:ee:b1:9d:95:ee:05:68:e6:ff:43:e8:d8:eb:22:
21:8b:83:3a:c9:0f:0d:04:1a:3e:ca:3c:c7:b2:46:
7c:48:dc:c8:2a:71:af:73:c7:f4:35:aa:59:f6:f3:
99:07:1b:1a:e3:23:12:b2:0b:35:7b:1e:d0:bc:46:
1f:cb:9f:11:17:96:8e:f0:d9:17:c0:40:15:8a:01:
8d:a1:f4:c6:51:85:47:24:e8:27:c1:75:ca:17:18:
d0:d3:69:81:13:09:54:67:f1:eb:9e:75:5f:f1:9b:
61:75:fa:a0:29:a7:2d:28:61:a8:e5:85:4f:9d:d6:
29:7b:9f:5a:84:83:b4:2e:3f:11:0a:fe:8b:a2:72:
b9:eb:91:bc:38:5b:ae:24:cf:40:0b:07:3b:59:7d:
fd:41:4d:54:a1:44:f0:00:b5:05:8d:c6:06:31:31:
73:13:13:a5:43:f6:5f:9a:a2:a6:df:51:44:db:c4:
69:4f:e8:ec:3f:8c:bb:95:bf:43:36:b7:36:b5:7a:
d7:04:2c:ba:8f:2e:e2:65:a3:df:74:2d:fe:11:77:
87:9e:4d:a2:df:8d:ec:b3:77:49:d5:85:c8:40:ef:
c3:3b:9b:fc:aa:fa:b0:46:29:dc:5d:be:bc:13:cf:
1b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D1:C0:E2:09:D7:88:81:CD:66:55:D9:DA:B5:D0:25:8C:67:CB:37
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E54515F2C44411EF8811B8B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.37.0/24
Signature Algorithm: sha256WithRSAEncryption
03:57:6e:df:d0:4b:c5:37:bb:e7:a2:f1:19:4d:f9:ae:2d:41:
08:89:f4:f4:f2:35:3b:fc:a6:7d:f8:6c:7d:7f:f7:fb:ec:23:
f2:77:ed:a0:be:27:6f:df:06:8e:ab:13:50:58:41:ba:b0:df:
bc:0e:bf:a7:e6:5b:d4:b8:8f:f6:18:91:65:84:48:c3:53:2f:
0a:f9:ab:fc:0f:6a:11:3b:96:ea:88:16:d6:81:28:c3:7e:ac:
af:7d:a1:08:83:32:9d:89:76:1c:f2:cc:79:44:27:54:81:55:
33:f8:67:61:20:69:f7:1f:70:3c:f3:0e:b4:45:d5:34:2e:58:
60:e5:55:6c:b3:4f:11:36:ce:3a:f1:5c:e9:d1:50:de:3e:19:
c4:40:63:3d:f8:15:38:53:e7:0e:66:b4:85:0f:c6:bf:a6:01:
24:19:ce:6a:bf:4a:dd:59:86:29:2a:45:13:73:9a:08:fc:9b:
b3:41:f2:9b:92:ea:81:d8:7d:d2:2b:57:60:7a:94:18:e8:f2:
56:6c:1e:0b:cb:79:b5:42:08:62:ee:4b:d0:67:9d:94:15:52:
63:a3:46:02:dc:01:bc:bf:9e:b0:12:f2:de:7d:7b:2f:50:9d:
2c:bd:ca:cb:49:9a:95:fb:da:9d:df:22:5e:e3:9b:37:10:b4:
3e:7e:88:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:36:01 2025 by rpki-client