Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/A1CEA8ACE53211EE984D924B775412E6.roa
File: A1CEA8ACE53211EE984D924B775412E6.roa (raw, json)
Hash identifier: GEhJUIPciunA+oHXCciSL/G2SuJdMunRwaUJxRVUkMM=
Subject key identifier: 1C:3E:D6:83:B5:36:C7:4E:B7:AA:CE:1C:C9:D7:F5:C3:68:03:58:96
Certificate issuer: /CN=F36251E0AF/serialNumber=EFB7AA8EF96C13AAADC8476FBDDE9F3277FCD56D
Certificate serial: 06
Authority key identifier: EF:B7:AA:8E:F9:6C:13:AA:AD:C8:47:6F:BD:DE:9F:32:77:FC:D5:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/77eqjvlsE6qtyEdvvd6fMnf81W0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/A1CEA8ACE53211EE984D924B775412E6.roa
Signing time: Mon 18 Mar 2024 14:20:12 +0000
ROA not before: Mon 18 Mar 2024 14:20:09 +0000
ROA not after: Fri 31 Mar 2034 14:20:09 +0000
asID: 329411
IP address blocks: 102.209.137.0/24 maxlen: 24
102.209.138.0/24 maxlen: 24
102.209.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36251E0AF
Validity
Not Before: Mar 18 14:20:09 2024 GMT
Not After : Mar 31 14:20:09 2034 GMT
Subject: CN=65f84d9c-ea26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:19:29:c1:c0:7c:6a:0a:59:20:41:db:3d:2c:
cc:8f:83:6c:f0:f7:4c:27:e6:e3:9d:70:52:4f:bb:
2d:01:fd:52:58:d8:08:48:36:3a:a7:36:6d:fa:a5:
85:16:f7:67:3b:43:42:12:00:78:58:78:db:ec:b6:
93:99:76:26:c9:a2:a1:ff:74:a6:d2:d5:d2:86:42:
fc:46:12:6c:b2:45:92:40:c9:5b:7b:44:1e:33:e5:
97:c1:ff:0b:2e:74:a4:36:e6:3c:f8:e1:e7:fd:6c:
45:33:70:67:35:9f:e2:95:b5:27:ff:6a:bd:26:fa:
96:c0:7e:ff:45:88:55:1b:11:8d:39:c6:88:63:31:
71:ce:56:d2:18:13:07:b5:36:26:1c:f6:e8:62:d8:
1c:71:ab:9e:f5:e8:bd:cc:30:4c:f9:94:53:26:6e:
d4:51:70:2b:0f:0c:60:56:55:c5:b4:26:0b:49:2b:
b1:fb:cc:90:93:f3:8e:33:76:58:f6:fb:5b:02:3a:
c8:6a:90:7f:a4:35:37:99:b2:7e:4b:cf:59:8b:dc:
33:92:16:9d:26:09:24:bf:4a:01:2f:ef:48:77:f2:
f4:61:c9:e8:eb:e5:00:78:63:7a:49:f4:4a:55:2b:
2a:a6:4a:02:a2:29:2b:3a:7e:4d:89:08:b3:31:d2:
6b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3E:D6:83:B5:36:C7:4E:B7:AA:CE:1C:C9:D7:F5:C3:68:03:58:96
X509v3 Authority Key Identifier:
keyid:EF:B7:AA:8E:F9:6C:13:AA:AD:C8:47:6F:BD:DE:9F:32:77:FC:D5:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/77eqjvlsE6qtyEdvvd6fMnf81W0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/A1CEA8ACE53211EE984D924B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.137.0-102.209.139.255
Signature Algorithm: sha256WithRSAEncryption
a5:8f:3c:23:39:03:bc:b6:b9:2b:f3:91:5c:07:bc:6a:65:de:
85:06:74:9b:9a:20:7e:15:a3:6a:11:e9:3a:ee:f4:19:cd:0e:
6c:89:14:24:b5:3b:54:d9:27:01:50:32:1a:2d:c5:61:b5:f9:
73:d1:0d:a7:0b:e1:76:de:0b:64:b2:2f:10:bb:fd:ff:61:2d:
4b:21:f5:39:cd:9b:e0:8a:30:54:44:21:f1:d8:87:d1:63:47:
6f:76:6b:e3:72:ee:0b:1d:8b:26:6f:23:65:6a:b0:05:60:a7:
2e:a9:8d:a5:ae:15:3c:d7:46:f6:11:ca:b5:e0:e0:02:5d:de:
ed:34:21:bc:02:ec:34:c3:05:d2:6f:67:ea:af:b7:c4:b9:6b:
33:54:92:56:32:e8:78:c8:34:7a:dc:c6:0c:74:62:c4:42:fb:
5c:a6:35:35:01:c9:3c:6f:7d:55:53:5c:66:93:6f:bb:4a:1e:
67:15:14:00:32:23:5a:ec:e9:62:39:fe:17:8e:49:13:4a:f5:
81:b2:7b:3e:b7:35:94:28:00:39:f0:1c:b4:86:1d:85:c3:61:
ff:42:1d:51:93:fa:0f:9e:98:2a:0c:fa:94:06:d9:c5:87:4c:
fd:54:41:76:67:7b:e1:a7:1e:3c:ef:af:d2:47:f4:17:8e:99:
c2:2f:27:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:53 2025 by rpki-client