Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/D5189642585A11EE959ED9784AD9E6FC.roa
File: D5189642585A11EE959ED9784AD9E6FC.roa (raw, json)
Hash identifier: KsQ50yFvchQtrtq3TNZ2t0VHuQZ3asdeMse4z12DwNw=
Subject key identifier: 4A:F3:C0:D2:ED:80:57:05:32:BB:AD:85:EF:72:0D:69:05:AF:D6:AC
Certificate issuer: /CN=F3628CF1AF/serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D
Certificate serial: 05
Authority key identifier: 24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/D5189642585A11EE959ED9784AD9E6FC.roa
Signing time: Thu 21 Sep 2023 08:42:44 +0000
ROA not before: Thu 21 Sep 2023 08:42:41 +0000
ROA not after: Mon 21 Sep 2026 08:42:41 +0000
asID: 329328
IP address blocks: 102.211.44.0/22 maxlen: 24
2c0f:1b40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3628CF1AF
Validity
Not Before: Sep 21 08:42:41 2023 GMT
Not After : Sep 21 08:42:41 2026 GMT
Subject: CN=650c0204-80f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:a1:67:fd:9e:b6:5e:f0:75:e5:85:01:98:
31:e8:41:b5:d3:b7:55:6a:e6:3f:bf:7d:da:ab:a8:
d6:87:b8:e0:f4:12:f9:15:43:a0:f9:f1:08:5a:01:
5a:e2:53:9a:07:2b:4e:eb:67:95:e9:6b:01:11:e4:
cb:52:bc:bb:f0:64:62:c2:0c:ac:d9:02:dc:47:fb:
60:05:22:74:c9:54:21:92:33:4c:fe:57:f0:ac:ed:
ad:07:5a:3c:63:fa:ea:b6:54:bb:7d:4f:41:8a:bf:
f6:c2:98:c7:1b:36:43:9e:64:66:9e:1c:b8:a3:08:
e6:9a:f9:1a:10:8b:74:04:4d:6a:58:c1:f4:fb:5d:
7a:19:bc:2c:a1:2c:4a:7c:40:05:5e:70:ef:a0:6f:
13:88:2d:ab:e5:7e:bc:4c:fe:bf:8d:eb:ab:b8:e9:
89:8e:87:5c:e7:d2:27:a4:d0:1f:15:b4:be:9f:dd:
47:a2:73:40:fc:6e:b8:a9:bb:e7:7e:5e:ac:22:10:
79:e4:28:37:d4:71:9f:16:d6:2d:1c:fe:5c:14:8f:
d6:df:7f:5d:63:91:e5:9c:b7:73:c3:86:e8:c6:9a:
0b:80:61:01:e8:92:20:e0:68:35:ab:59:31:60:19:
b1:02:43:e0:36:f3:4c:d9:1c:5d:1c:13:aa:31:fc:
2c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F3:C0:D2:ED:80:57:05:32:BB:AD:85:EF:72:0D:69:05:AF:D6:AC
X509v3 Authority Key Identifier:
keyid:24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/D5189642585A11EE959ED9784AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.44.0/22
IPv6:
2c0f:1b40::/32
Signature Algorithm: sha256WithRSAEncryption
4b:7e:ca:83:a4:2a:82:1c:db:43:3b:10:9b:53:1e:f6:51:46:
68:99:54:07:9e:e2:d2:2d:7e:9e:9a:64:85:05:eb:ea:c3:67:
87:c6:3e:4d:cf:63:38:39:48:ea:4e:97:71:d9:16:65:bd:67:
f8:fd:e5:62:a1:00:e5:fc:be:f8:93:b5:27:7d:49:47:a7:5a:
23:9f:78:c5:0f:b8:16:37:92:33:32:ca:79:b5:8f:75:12:86:
a9:fb:92:bc:cc:50:c9:bd:e2:f2:26:86:88:08:13:eb:5e:74:
52:4a:52:6a:3f:2b:d9:ac:b3:69:7d:98:cd:b1:1d:d5:87:36:
11:4c:29:0c:18:bd:a9:8a:a5:d9:fb:50:d1:98:6d:ab:5b:c3:
bb:ba:9e:5c:e0:e4:8b:f9:28:52:cb:bc:35:39:bd:b8:8f:52:
ea:d5:69:86:b6:e4:f8:3f:80:95:ba:4b:68:87:64:2a:27:14:
72:e2:de:79:19:fe:f9:fc:b7:b6:ac:c3:45:33:8f:0d:14:01:
c4:31:83:fc:6a:d6:c2:e0:7f:71:8b:53:77:2b:14:97:ab:45:
16:c6:f0:2f:1f:8e:67:b8:6e:29:df:40:84:fe:68:de:7d:dc:
df:af:e1:20:60:94:7a:bc:22:01:6e:af:fc:ea:6a:25:ce:96:
56:cb:8f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:30 2025 by rpki-client