Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/1E0988AAF93111EC9FC04E88F1222468.roa
File: 1E0988AAF93111EC9FC04E88F1222468.roa (raw, json)
Hash identifier: 4J9tcGaipzQ9a1uydbIpmJsazATcy1aXE6+2hgX8+4c=
Subject key identifier: 37:E9:DF:ED:96:0C:C8:BB:71:17:5E:DB:EF:69:BB:57:27:77:3F:20
Certificate issuer: /CN=F3639454AF/serialNumber=E0BE2C42A62AE6D7529C17D344C2D2177637A966
Certificate serial: 02
Authority key identifier: E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/1E0988AAF93111EC9FC04E88F1222468.roa
Signing time: Fri 01 Jul 2022 11:29:49 +0000
ROA not before: Fri 01 Jul 2022 11:29:46 +0000
ROA not after: Thu 31 Jul 2025 11:29:46 +0000
asID: 328468
IP address blocks: 102.67.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3639454AF
Validity
Not Before: Jul 1 11:29:46 2022 GMT
Not After : Jul 31 11:29:46 2025 GMT
Subject: CN=62bedaad-d2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:35:fc:f4:c8:74:03:83:9a:86:94:0c:a0:
4a:36:73:ee:8e:55:53:83:62:ff:41:19:a8:91:9d:
26:83:87:cb:63:4c:7d:22:a7:3a:40:09:ec:fc:d0:
19:61:cc:94:e5:bc:eb:81:50:3b:31:60:ed:70:65:
de:14:1d:50:47:8d:6b:4a:ab:ee:81:61:8d:46:14:
f4:f5:80:24:cd:3f:3e:2a:bf:f1:ca:65:9e:e5:3b:
17:cf:75:2d:54:f8:f1:e9:dd:60:1a:1f:8f:32:b6:
78:c6:77:a2:18:75:b2:d2:0d:73:cd:cd:6d:e6:bd:
32:b9:53:01:c4:e7:b7:c3:69:02:89:9a:80:ec:79:
ae:6a:b3:60:c9:93:e7:e0:ac:d3:54:f2:4e:e1:16:
6d:b5:03:a3:5c:a0:66:1b:b9:8b:3d:8c:d0:d0:44:
77:02:4c:6e:e8:91:6f:eb:1e:81:d5:e2:e4:1d:55:
d4:41:ac:9a:bf:76:9c:d7:7b:94:f1:30:7d:e6:bb:
32:e8:88:b9:5d:36:48:44:15:c8:03:30:fd:5e:0c:
8c:f6:0d:01:2f:f0:0c:6f:0a:bd:f6:32:f7:ec:0a:
9f:82:29:15:3a:00:4f:46:38:6f:cc:1f:0d:8b:dc:
e9:77:6e:23:2a:6c:47:1e:3c:4c:98:16:43:ec:cb:
81:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E9:DF:ED:96:0C:C8:BB:71:17:5E:DB:EF:69:BB:57:27:77:3F:20
X509v3 Authority Key Identifier:
keyid:E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/1E0988AAF93111EC9FC04E88F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.64.0/19
Signature Algorithm: sha256WithRSAEncryption
c2:7b:9f:9a:d3:a0:21:15:b7:2a:fe:df:81:eb:98:c1:46:1a:
ae:5f:d3:25:6e:86:82:02:2d:8d:e5:46:3c:b1:45:72:cc:02:
0f:70:92:6e:9d:8d:14:13:89:d6:5d:2f:cd:31:be:be:06:26:
45:37:bf:0f:81:8f:84:61:f3:7d:77:24:37:df:a2:be:93:4b:
b9:80:19:1a:de:c6:df:a8:84:44:89:d8:2a:78:ce:aa:8d:92:
ec:3e:fa:51:b8:69:e4:bb:fb:74:51:2a:7e:36:e4:b4:de:fe:
17:de:c4:4b:d8:06:42:b6:f4:86:5a:12:10:14:85:e6:06:89:
35:4d:13:35:75:76:98:7d:c3:b7:21:92:5a:ae:9d:0f:8c:39:
a2:61:71:3e:80:c0:d6:a5:e1:ac:b9:64:8e:29:92:c6:31:44:
25:9b:fd:23:32:03:b6:8e:f6:28:84:28:a0:9d:86:cb:d4:28:
66:ff:31:39:4a:80:80:24:d0:ed:18:c0:4d:f0:16:e4:6f:c5:
c9:0d:e2:c6:d6:b5:23:44:f3:e6:4a:25:9a:75:ad:78:35:b9:
0b:52:e3:76:f8:d3:8d:de:22:db:ae:ae:76:3a:ba:f9:82:19:
56:f1:35:63:95:63:4a:2e:df:36:f1:fd:56:56:51:64:23:fc:
c7:b6:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:59 2025 by rpki-client