Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/BC5D3D90032D11F09ED36D5F762E951A.roa
File: BC5D3D90032D11F09ED36D5F762E951A.roa (raw, json)
Hash identifier: fZkSIZKqHjYLVMmlSF8FT38HnKjU0BqJ7lEBUixZVJ0=
Subject key identifier: D4:CA:63:C5:3D:B1:67:C8:AD:5D:A1:DF:81:BC:AC:DF:C3:51:E5:1B
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0623
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/BC5D3D90032D11F09ED36D5F762E951A.roa
Signing time: Mon 17 Mar 2025 12:45:42 +0000
ROA not before: Mon 17 Mar 2025 12:45:37 +0000
ROA not after: Mon 18 Mar 2030 12:45:37 +0000
asID: 395839
IP address blocks: 102.217.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1571 (0x623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF
Validity
Not Before: Mar 17 12:45:37 2025 GMT
Not After : Mar 18 12:45:37 2030 GMT
Subject: CN=67d81976-4cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:00:83:4d:94:8e:1a:97:b4:0e:ff:bd:0f:
7c:23:a4:2a:90:b6:79:cd:40:de:68:d8:c9:13:d7:
29:30:6f:63:79:70:d4:52:a7:fb:b2:1c:cb:14:c8:
42:0d:b5:04:49:95:94:8a:2d:82:fe:7d:91:25:ac:
be:1d:ab:a5:2d:36:08:f4:9f:f6:cf:19:dc:78:84:
60:5c:66:c3:58:57:f0:2d:d2:44:9f:af:af:34:37:
cd:01:d3:17:64:0a:f0:6a:c5:4f:ee:5e:90:6f:d1:
b1:4b:bf:cd:d2:eb:30:7a:16:62:50:1b:2d:d5:a3:
a5:34:18:9e:d5:a7:2b:67:06:3d:c6:60:66:42:d6:
34:92:67:69:61:a1:8c:64:c6:cd:5b:57:f3:e6:8b:
0d:5b:74:36:16:4e:f8:c8:1b:64:75:0c:0c:2e:5c:
07:8a:47:c2:69:48:80:55:0c:0e:d5:b3:8d:ae:42:
2e:05:3f:cc:e0:62:f1:fa:f1:77:1e:32:81:61:68:
8d:f9:ee:a0:9a:57:08:ab:66:54:25:d6:5d:18:fa:
48:76:d3:e9:c7:82:ae:64:2f:35:3e:7c:2b:ac:4c:
b4:0c:18:93:9e:09:25:65:f8:63:44:04:3d:e2:4f:
c2:83:7d:0a:78:a0:2d:bc:74:b0:37:28:01:ee:a6:
dc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CA:63:C5:3D:B1:67:C8:AD:5D:A1:DF:81:BC:AC:DF:C3:51:E5:1B
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/BC5D3D90032D11F09ED36D5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.106.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:bf:60:a3:86:c2:ee:a6:d6:ba:a1:0a:97:10:eb:eb:b8:3d:
c8:2b:65:fe:d2:19:7d:ea:b4:d3:d9:50:2a:c7:f2:4c:8f:13:
8b:19:57:50:d9:0d:a3:fd:6a:96:28:6b:d2:84:18:1b:62:fc:
a8:c6:da:e3:19:17:0a:19:28:e3:63:7a:83:14:af:7d:c0:1f:
95:f9:b0:b6:18:4d:49:e0:a6:be:84:96:ca:c7:89:ec:f5:40:
b6:61:1e:72:81:53:75:e3:93:39:16:08:17:ae:c4:11:ec:ef:
35:20:f4:f5:24:53:fe:a4:8f:38:1e:5d:c5:fa:7a:d2:a9:8f:
4f:15:33:1a:79:44:df:a2:62:a1:6f:96:e9:58:96:7b:00:65:
46:54:ae:f2:1a:e7:99:9a:df:09:53:57:b1:ff:d7:21:36:fe:
b3:bc:57:3a:ed:df:a9:43:22:ad:ea:df:9c:97:f3:65:b9:f5:
eb:eb:b8:6e:2b:b0:88:fd:9f:cc:eb:94:72:c7:88:76:c6:c8:
5d:11:ec:bc:14:f1:c3:d6:00:07:c4:1f:10:7b:75:25:a3:82:
f6:3f:34:21:74:9d:a3:4d:97:8e:d1:d6:01:6f:56:43:b2:6c:
cd:b2:77:49:2c:f9:33:cb:0e:79:01:08:bf:42:46:8d:b2:38:
44:c8:24:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:13:58 2025 by rpki-client