Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/272FA614D15511EEB6A8FC86775412E6.roa
File: 272FA614D15511EEB6A8FC86775412E6.roa (raw, json)
Hash identifier: Mb6qLrGmn7kCjwtIutUYhOB+uq3UqRRFThFjXRL23kQ=
Subject key identifier: DB:C0:74:9C:C3:B1:35:A0:96:D1:DE:57:19:85:43:A3:16:5C:A0:99
Certificate issuer: /CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
Certificate serial: 14
Authority key identifier: FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/272FA614D15511EEB6A8FC86775412E6.roa
Signing time: Thu 22 Feb 2024 07:36:55 +0000
ROA not before: Thu 22 Feb 2024 07:36:52 +0000
ROA not after: Tue 28 Feb 2034 07:36:52 +0000
asID: 329391
IP address blocks: 102.210.8.0/22 maxlen: 22
102.210.8.0/24 maxlen: 24
102.210.9.0/24 maxlen: 24
102.210.10.0/24 maxlen: 24
102.210.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3636ECFAF
Validity
Not Before: Feb 22 07:36:52 2024 GMT
Not After : Feb 28 07:36:52 2034 GMT
Subject: CN=65d6f997-659c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:07:47:3b:01:55:33:ba:47:c0:d6:af:e2:
67:5c:d2:14:8b:e5:4a:8f:d1:06:18:bd:85:ff:a8:
6a:cb:87:c1:11:89:69:7b:81:2d:a5:a6:13:45:d7:
73:ed:41:c8:b0:63:b6:70:da:58:25:a4:0a:49:4d:
07:e7:72:58:1c:c5:e5:8b:f4:01:e2:68:04:81:a0:
94:5b:f0:a9:15:35:98:74:d8:be:02:9d:19:df:2d:
95:f8:25:ed:83:fb:d1:84:aa:f6:5e:fa:6b:db:29:
e3:29:14:81:47:9e:41:8b:d6:85:0b:7f:a4:e4:df:
12:77:7b:05:62:23:1a:9d:a4:45:93:99:a8:c7:6a:
52:53:22:8d:a0:d8:b2:35:32:82:50:6c:22:0e:1d:
0d:97:4a:f3:7d:e4:6a:11:fc:5c:f4:8f:02:7c:06:
53:3e:9a:a0:a4:b1:50:c9:ac:88:d7:36:23:ee:fa:
cf:4f:21:5e:29:88:4f:83:1c:5e:b5:5d:00:b4:5a:
7a:c3:26:b8:8e:3d:db:de:c7:f0:df:6c:e4:6d:ce:
46:b4:cd:af:ca:00:86:f8:70:53:a8:9b:cf:9d:66:
dc:72:b0:ba:6a:99:e7:e7:7d:a7:f4:1a:32:5f:5a:
2a:4d:fa:24:ab:10:c1:ae:c9:bd:f8:57:f4:6d:b8:
f8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C0:74:9C:C3:B1:35:A0:96:D1:DE:57:19:85:43:A3:16:5C:A0:99
X509v3 Authority Key Identifier:
keyid:FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/272FA614D15511EEB6A8FC86775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:12:5f:5b:82:4a:40:a5:ec:52:c0:69:2e:a8:44:30:da:89:
32:79:a9:5a:85:99:ed:de:a3:98:b7:7e:65:1d:99:6c:1e:34:
65:6f:4e:ff:aa:1b:3e:b1:0e:61:a9:f5:76:45:9b:bb:c8:cd:
a0:de:db:3e:e7:aa:92:13:cf:1e:d5:94:1c:b3:4a:74:4d:40:
05:ea:5e:2c:b1:70:00:d7:8a:f1:be:5d:49:1c:ed:c8:a6:f3:
05:f9:35:32:39:b2:26:fa:4c:31:b7:9d:b7:f2:b2:83:f5:e6:
8b:4a:21:d8:e0:3a:4a:62:0e:9b:ba:2d:f2:c9:40:b4:3e:1c:
6a:ef:b7:d2:9b:24:da:af:4b:32:5e:ae:5b:17:00:b7:9e:7e:
74:4a:da:f8:e0:e8:58:a1:6c:d9:0f:87:50:d8:14:f9:fa:30:
4a:76:eb:00:a5:5c:aa:f2:a1:21:4a:c1:55:8e:b2:04:fa:16:
a3:61:16:43:cd:6d:20:ee:ad:c5:88:10:66:04:1c:9b:b0:4f:
c7:15:bf:d2:ae:7c:c3:22:fd:66:fd:71:78:39:c5:ff:5c:c7:
90:57:b2:91:ef:96:81:d3:17:99:a0:bf:67:a8:32:8c:49:0f:
ca:ef:9b:31:30:7c:1e:2b:72:f5:6c:41:83:7d:88:b8:9b:46:
e6:87:d1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:22 2025 by rpki-client