Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/8BF912DCB8C311EFBA768387762E951A.roa
File: 8BF912DCB8C311EFBA768387762E951A.roa (raw, json)
Hash identifier: 4MzJryMeE1qGlBnjDKdwaAv93aYiFWEXltRxjKpruGs=
Subject key identifier: 7D:0B:B2:78:5F:51:EB:7F:A6:04:20:9F:A9:A4:68:7F:1B:77:08:67
Certificate issuer: /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial: 4B
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/8BF912DCB8C311EFBA768387762E951A.roa
Signing time: Thu 12 Dec 2024 19:59:08 +0000
ROA not before: Thu 12 Dec 2024 19:59:04 +0000
ROA not after: Fri 01 Dec 2034 19:59:04 +0000
asID: 328467
IP address blocks: 102.67.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362793FAF
Validity
Not Before: Dec 12 19:59:04 2024 GMT
Not After : Dec 1 19:59:04 2034 GMT
Subject: CN=675b408c-11b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:fd:4a:23:47:a5:04:61:c5:ae:b5:01:06:
a6:87:6f:d5:53:de:a5:5b:ee:b3:02:4d:40:6b:40:
17:25:29:34:74:f4:40:93:e0:77:21:09:42:66:cb:
dd:c2:a8:a7:fe:52:02:56:b4:fd:e5:c9:2a:d5:fd:
b0:04:08:a1:e1:67:76:d1:b4:09:c7:92:3f:35:6e:
e7:bc:53:9d:8d:13:75:90:01:20:31:75:3f:8e:db:
22:97:0c:ec:57:c2:f0:71:f9:e2:e2:2d:bd:1c:50:
95:94:c8:80:74:30:d0:7b:2b:6c:05:dd:59:c4:fe:
dc:9a:a9:e6:3b:b3:d1:ed:11:bd:f3:91:35:14:34:
7a:e1:be:97:bc:65:b6:70:61:e3:66:99:8b:a1:6c:
eb:0f:6f:04:0f:4c:41:70:ee:f5:02:75:35:42:fb:
c5:7f:1a:31:3d:05:78:08:24:9b:fe:2f:5d:94:85:
ab:e8:c4:94:6d:0b:31:f2:de:e1:13:7a:d4:1e:68:
99:a3:05:e3:2f:d0:8b:b9:eb:5a:4c:3b:21:44:55:
9f:64:8c:60:8d:58:aa:e6:8b:3a:d1:58:d7:ca:b6:
88:af:68:fb:04:a4:95:0b:6c:1e:92:4c:78:3c:3b:
95:c2:e4:03:db:80:63:04:0f:17:24:ce:6f:dc:ba:
62:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0B:B2:78:5F:51:EB:7F:A6:04:20:9F:A9:A4:68:7F:1B:77:08:67
X509v3 Authority Key Identifier:
keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/8BF912DCB8C311EFBA768387762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.128.0/21
Signature Algorithm: sha256WithRSAEncryption
02:49:a1:d7:55:da:d2:cb:e5:b9:fa:b8:c6:87:6f:c7:62:e3:
30:2c:a4:a4:49:9c:79:36:36:bd:a0:75:b2:29:ef:45:d8:d8:
a3:65:e6:dd:3d:bd:36:51:fb:4a:e1:0f:a3:4b:c6:d1:4e:e3:
fc:cc:9f:ab:9d:02:bf:cc:0c:27:a3:5c:c1:db:fb:78:8f:bf:
c4:9f:82:4e:3a:81:5e:53:7d:a8:9a:a7:cf:5f:77:0d:99:12:
52:e1:b2:93:75:ec:a3:fe:ac:7b:3f:ec:8e:43:77:e0:15:f4:
7f:9d:15:6d:e4:07:ce:62:ee:94:9e:39:a2:d3:5c:37:a4:f9:
49:90:ec:e6:ac:b9:6f:17:33:8b:e9:8f:1d:90:f0:cc:df:1c:
cb:fe:89:75:b0:2b:ed:5e:b1:cf:3d:1a:3d:78:a8:cf:66:c8:
2c:49:16:f3:b0:ae:d9:6c:a8:a4:c4:f1:83:31:7e:83:bc:af:
a7:a3:29:04:6d:40:dc:41:1b:a3:b6:99:36:29:97:62:f2:72:
81:c3:d7:e6:db:ad:a2:89:b3:01:b1:89:e0:f9:7c:15:86:df:
de:f4:95:b5:d2:5c:90:fe:7c:40:7c:9c:41:98:1c:49:aa:93:
64:a5:e2:0f:7e:09:3e:e7:bc:16:2a:d8:ca:04:7a:d4:81:4e:
77:18:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:10 2025 by rpki-client