Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/C63A92A6030D11F0A4DD7696762E951A.roa
File: C63A92A6030D11F0A4DD7696762E951A.roa (raw, json)
Hash identifier: QPQ7R05DF4VS3iix61uJ3cgpgsoRw0X15QX08AVfIqQ=
Subject key identifier: 02:B9:79:86:07:1F:AD:7D:3A:44:F2:A6:98:A4:E2:B0:74:B9:24:10
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0620
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/C63A92A6030D11F0A4DD7696762E951A.roa
Signing time: Mon 17 Mar 2025 08:56:54 +0000
ROA not before: Mon 17 Mar 2025 08:56:50 +0000
ROA not after: Sun 17 Mar 2030 08:56:50 +0000
asID: 834
IP address blocks: 102.217.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF
Validity
Not Before: Mar 17 08:56:50 2025 GMT
Not After : Mar 17 08:56:50 2030 GMT
Subject: CN=67d7e3d6-0269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:16:ec:1e:93:9c:a5:de:4c:2e:05:88:6f:
d2:71:9b:26:93:7d:1a:57:e7:8a:a1:75:af:ce:29:
46:e6:0e:6b:5e:bb:a7:93:83:b8:0b:96:65:bd:2e:
84:bc:ec:58:b6:f9:e4:47:04:90:e6:67:c0:3b:88:
39:99:06:10:52:96:b6:93:76:fb:df:14:b2:8e:50:
32:ef:58:ca:c9:9e:21:65:89:a3:72:30:f5:73:ab:
9f:97:01:b5:3a:8f:84:df:3f:c7:af:5a:38:a1:f7:
0f:35:59:5c:d0:93:94:dc:ed:84:34:6f:33:8b:f2:
22:77:d6:9f:18:95:65:1f:67:04:af:f5:c0:06:e8:
17:9b:0c:5f:a4:a8:57:8c:00:a8:bf:59:8a:02:08:
cb:f2:85:3c:a6:bd:11:68:c3:09:5a:db:79:c6:00:
c3:ac:86:03:9f:02:9c:e8:54:69:ac:7d:7c:d1:93:
1a:fb:f6:28:39:fd:fb:fb:3b:f0:da:a9:81:4e:6e:
41:1b:23:f6:7e:cb:4b:b1:11:fc:e3:bc:06:20:c4:
0a:8b:32:3d:64:57:ec:37:ae:9a:c0:88:9b:99:c5:
c0:39:1b:dc:23:ea:85:23:33:cc:65:53:2b:ac:00:
8a:fb:41:2b:80:2a:48:d4:65:a0:6e:a8:1c:4b:d6:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B9:79:86:07:1F:AD:7D:3A:44:F2:A6:98:A4:E2:B0:74:B9:24:10
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/C63A92A6030D11F0A4DD7696762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.104.0/24
Signature Algorithm: sha256WithRSAEncryption
82:46:ec:c9:6f:95:5d:fb:35:2c:72:1e:48:b5:e2:e5:71:54:
56:92:f3:21:bc:e3:b9:37:cf:05:07:27:1e:92:e5:2b:cd:ed:
7c:ae:b1:b3:e5:e8:6b:45:9b:a6:b9:b7:9d:cb:66:6d:f9:f8:
34:76:c1:54:f7:8a:3c:7f:29:49:05:b6:9e:c9:4c:73:0a:7e:
4a:de:3a:26:28:61:77:68:4a:79:0e:63:5d:68:14:5d:62:f7:
4e:79:aa:2c:72:ab:73:90:c7:d0:97:cc:7f:c7:2a:82:78:89:
55:fb:a8:18:a2:03:59:ec:8f:b8:6c:c9:f7:1d:eb:20:c6:07:
ec:77:6d:16:41:8b:7f:91:0c:19:a7:c8:8e:f3:17:23:dd:fe:
81:3f:60:f5:a0:a0:0e:53:6d:2c:a9:49:0c:7f:c9:4e:e0:7d:
8f:e9:f9:af:34:d7:03:94:95:66:f6:5e:be:2e:2f:16:f8:a3:
a9:96:cb:8f:4e:ec:9d:48:f6:52:2a:85:ef:84:db:44:7e:01:
22:07:e0:86:f0:43:4f:8b:1b:59:e8:63:79:0a:fc:89:0d:b2:
e6:5b:1d:13:e9:05:f3:dd:e3:61:d1:1e:57:5b:21:74:1e:03:
30:aa:63:85:e0:3e:b7:9a:cc:f3:b9:b8:d5:77:27:00:1c:09:
9c:24:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:14 2025 by rpki-client