Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A7D3326AFD8511EFB134B548762E951A.roa
File: A7D3326AFD8511EFB134B548762E951A.roa (raw, json)
Hash identifier: Lo7JMp1QCtjwYAac1ZMpVP9tWWqJW5LZgBss2Fx+eIw=
Subject key identifier: 80:AC:B7:C2:94:4F:E5:09:DF:B4:B7:7B:20:92:BB:D8:96:C5:51:8C
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 060D
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A7D3326AFD8511EFB134B548762E951A.roa
Signing time: Mon 10 Mar 2025 07:59:56 +0000
ROA not before: Mon 10 Mar 2025 07:59:52 +0000
ROA not after: Sun 10 Mar 2030 07:59:52 +0000
asID: 834
IP address blocks: 102.215.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1549 (0x60d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF
Validity
Not Before: Mar 10 07:59:52 2025 GMT
Not After : Mar 10 07:59:52 2030 GMT
Subject: CN=67ce9bfc-5191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:16:46:52:cc:e8:36:32:78:e6:f2:e5:11:
4a:a2:fd:0f:01:6a:98:74:75:aa:23:0b:0e:c7:7a:
07:63:6e:57:8b:1b:d0:4e:95:3c:d1:1b:d4:e1:63:
2e:66:ca:d8:1b:48:a7:3c:c5:2d:cf:31:66:1d:45:
3c:79:d0:93:20:8d:d9:ee:b8:14:c0:87:f1:ae:c7:
bf:c0:d0:03:af:98:06:00:fe:24:17:0a:a3:b1:67:
0f:aa:81:ad:bf:f3:98:5a:07:78:e4:1c:d3:8e:cf:
47:0f:74:2a:04:07:02:4b:8b:ca:62:50:15:25:3e:
92:72:ba:77:60:10:87:d4:88:7a:fb:6e:5f:a1:2d:
b4:69:cb:ba:62:d7:94:ed:96:17:10:a4:1a:ab:e8:
18:fc:cc:ee:a6:6e:be:af:2c:c7:51:86:c8:02:cc:
d8:2f:06:3e:c4:f2:32:54:65:b5:10:5c:cb:62:b0:
47:9a:f8:40:30:d5:89:89:d9:c6:49:b4:2e:c3:b1:
9a:5e:70:c5:92:5f:15:41:d9:7c:4c:4e:7b:1a:d8:
85:02:69:a6:d2:fc:da:8c:3c:3e:39:92:e8:71:74:
4f:7c:0b:9d:3c:03:2e:13:1d:79:db:66:09:43:df:
29:87:97:2a:35:1c:93:3f:7e:81:3f:0a:e3:2a:df:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AC:B7:C2:94:4F:E5:09:DF:B4:B7:7B:20:92:BB:D8:96:C5:51:8C
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A7D3326AFD8511EFB134B548762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:35:9f:f1:54:5f:e4:4f:14:8f:86:e7:64:11:4a:ec:76:74:
d0:e2:24:64:2d:17:21:60:f7:46:ab:5b:a0:e1:56:ec:74:10:
80:01:39:d7:f1:48:39:e4:6d:ba:69:03:8f:7d:f1:29:f9:41:
cc:ba:f8:3f:4c:b5:8c:e9:91:d3:f6:c3:bc:d5:07:da:83:e5:
f4:26:da:83:28:76:1f:73:4e:2a:3a:f9:6d:fa:3e:58:44:4b:
a9:7d:3a:f5:ef:53:17:31:ad:77:67:5f:e3:1f:41:50:1a:53:
cf:62:cc:ef:42:49:5b:22:12:54:b7:ba:3f:d5:57:b7:34:10:
57:aa:51:f1:6c:c4:8f:3f:5f:de:41:17:34:5e:9b:43:d8:fa:
81:4e:61:2d:6c:4c:e2:39:85:79:3b:4a:6d:5f:a5:e4:c8:14:
ec:db:ad:26:64:18:1f:7e:6f:65:e3:c3:cf:1b:fd:55:aa:c6:
3e:01:97:35:83:e3:8f:0b:79:49:0d:c6:c7:33:d6:56:9c:1c:
f2:ea:82:1f:69:49:e0:7b:3d:1b:b5:1f:93:55:ed:9a:af:be:
80:84:17:7b:4f:8a:52:e3:65:7c:bf:cd:bd:62:d0:ad:96:c5:
d3:09:2b:41:51:5d:92:7e:52:15:2e:c9:fc:4c:99:3b:cb:0f:
96:e4:b9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:13 2025 by rpki-client