Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/3D775376B87D11EFAB4FF956762E951A.roa
File: 3D775376B87D11EFAB4FF956762E951A.roa (raw, json)
Hash identifier: b6euF38rD57vl3/+UQug0tSlMLOGy1TjPgA9WLcJx/k=
Subject key identifier: 64:FB:1B:03:8A:F9:FF:7D:C1:92:08:02:3F:11:A0:4D:BE:8A:8E:AF
Certificate issuer: /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial: 3B
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/3D775376B87D11EFAB4FF956762E951A.roa
Signing time: Thu 12 Dec 2024 11:35:51 +0000
ROA not before: Thu 12 Dec 2024 11:35:48 +0000
ROA not after: Fri 01 Dec 2034 11:35:48 +0000
asID: 328467
IP address blocks: 102.67.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362793FAF
Validity
Not Before: Dec 12 11:35:48 2024 GMT
Not After : Dec 1 11:35:48 2034 GMT
Subject: CN=675aca97-576b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:ca:70:d2:2f:f5:ee:ee:00:d1:dc:87:67:
0a:64:ea:96:ca:33:27:b0:d7:ef:f7:4a:05:4d:97:
99:e8:29:86:cb:30:e4:5e:81:89:6d:e7:bd:0b:5c:
31:b2:ce:d9:4b:64:13:46:90:37:a3:7c:dc:2e:f1:
c6:8c:a9:a9:41:64:d9:8f:2f:a7:a1:18:81:f4:e7:
a6:4a:af:f6:84:4c:c9:16:06:81:6d:37:62:01:7c:
9c:7a:f2:e9:11:69:41:33:08:18:28:81:82:ca:2a:
f7:c0:41:16:c2:e5:76:68:16:4e:01:a9:35:2d:52:
cb:8d:3c:75:41:bf:75:61:57:33:78:5f:0a:93:29:
19:9e:a6:d9:6e:a7:c2:90:31:c3:25:83:f3:03:9e:
63:4c:75:63:ee:76:51:a6:3b:b3:64:31:67:ed:13:
4a:16:55:04:23:17:ac:e9:85:09:88:43:8b:4c:28:
6c:17:c5:eb:cc:50:e2:59:fa:a9:b8:d0:46:eb:82:
00:42:4e:c4:3e:0d:b7:29:0c:d1:f9:b9:e8:22:6a:
50:0e:7f:0f:d3:a4:03:f3:18:48:fb:69:33:4d:f7:
7c:6e:3e:9e:0b:d8:ae:41:57:ca:46:4b:43:9d:5e:
b5:86:84:15:cb:b3:b7:a5:d9:11:8f:d8:98:31:68:
b3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FB:1B:03:8A:F9:FF:7D:C1:92:08:02:3F:11:A0:4D:BE:8A:8E:AF
X509v3 Authority Key Identifier:
keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/3D775376B87D11EFAB4FF956762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.128.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:41:13:7b:f3:69:e5:7a:e1:88:ca:4e:03:17:ea:96:61:6f:
1a:5c:3f:93:86:92:8a:b4:89:b1:63:6b:3f:54:4a:84:1c:49:
31:87:a1:1b:3e:8c:7c:23:40:1d:f8:e6:71:5c:af:fb:4a:e1:
5d:d9:f8:69:7e:a4:4f:e9:9e:b6:7a:a4:9d:30:e6:11:59:80:
46:db:a1:3d:76:a8:99:f0:35:64:71:c9:bb:26:52:8b:1b:82:
47:3e:41:75:01:eb:5f:44:99:f6:1e:bf:0c:27:88:1f:cf:35:
0a:36:70:c6:da:34:f7:b2:f4:36:4f:35:36:0c:49:55:da:93:
b6:5f:8c:d6:8b:63:b5:a2:e9:8f:56:37:4d:a4:3d:47:85:31:
28:48:b5:c0:3c:0f:92:cd:ac:7d:64:dc:0c:62:63:dc:c2:bb:
50:d1:f0:39:52:81:a0:74:34:57:e8:16:c4:b8:b5:e4:01:f4:
20:7f:90:44:97:59:b9:d8:6d:11:36:52:38:0e:74:61:e8:0c:
19:93:86:dd:dd:aa:17:3f:75:a8:71:ab:91:5b:f2:8c:4b:cd:
73:07:bb:7f:17:97:43:ef:15:d5:0d:41:c0:38:55:b4:16:57:
6f:78:da:bf:0b:d7:c3:97:d0:46:ae:f2:3b:c9:e4:3f:f0:a2:
e2:6b:bf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:35 2025 by rpki-client