Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/C719F080031811F0BCF8A45B762E951A.roa
File: C719F080031811F0BCF8A45B762E951A.roa (raw, json)
Hash identifier: 79NJnHtzqcMQMYnoSD6NuoCr6AjHcaiwFE26hsB9lSo=
Subject key identifier: 11:CC:BC:9D:1B:BB:BE:75:97:13:0B:41:3D:62:73:1C:5F:94:65:17
Certificate issuer: /CN=F364379DAF/serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
Certificate serial: 02FF
Authority key identifier: 10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/C719F080031811F0BCF8A45B762E951A.roa
Signing time: Mon 17 Mar 2025 10:15:40 +0000
ROA not before: Mon 17 Mar 2025 10:15:36 +0000
ROA not after: Sat 17 Mar 2035 10:15:36 +0000
asID: 37014
IP address blocks: 102.215.0.0/22 maxlen: 22
2c0f:4780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 767 (0x2ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364379DAF
Validity
Not Before: Mar 17 10:15:36 2025 GMT
Not After : Mar 17 10:15:36 2035 GMT
Subject: CN=67d7f64c-ee01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5a:d2:f7:66:8f:35:a6:e9:62:3f:8a:01:52:
4a:db:80:e8:d5:52:00:fc:d3:83:2c:62:02:b4:23:
7b:88:87:6c:91:77:be:ce:20:c7:7e:05:06:96:ab:
11:ee:70:1c:78:80:a6:72:8f:7b:6e:34:7a:61:10:
a1:5d:19:dc:6d:ad:dd:dc:6d:70:bc:4e:b8:b3:17:
1d:7f:a8:e9:0a:f9:de:18:fe:5e:f0:cd:52:4d:0e:
5d:86:cc:32:42:77:3a:bf:04:f0:70:01:cf:e1:79:
e1:ac:da:e1:a2:eb:77:40:e2:4e:6d:b0:30:43:17:
1d:d2:75:f3:75:62:cd:ed:c2:15:06:9f:69:e5:26:
fb:8d:a5:47:b2:22:ee:6c:90:9a:c0:bf:56:b0:aa:
8a:45:09:e0:e9:32:c8:b2:3c:ca:4e:4c:53:85:f3:
d1:d6:cd:64:53:ec:8f:bc:f2:d5:d9:f9:3e:90:7d:
f1:ca:69:f7:c2:ba:66:8d:cd:a9:e2:93:a7:b6:f0:
9c:a3:ef:94:54:27:59:b2:7c:fd:c4:26:45:bd:c4:
b2:5f:9a:df:61:6b:c2:82:08:9c:26:71:bb:ad:54:
69:3d:bc:73:c1:2b:d1:27:ee:6e:cc:fe:ac:17:d0:
ea:81:48:07:49:17:0b:aa:c8:aa:dd:ad:f9:95:98:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CC:BC:9D:1B:BB:BE:75:97:13:0B:41:3D:62:73:1C:5F:94:65:17
X509v3 Authority Key Identifier:
keyid:10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/C719F080031811F0BCF8A45B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.0.0/22
IPv6:
2c0f:4780::/32
Signature Algorithm: sha256WithRSAEncryption
5b:d3:2e:9e:ac:9a:27:61:fb:e1:f2:3d:22:55:43:3c:0f:de:
ed:97:10:fa:58:0a:46:53:0b:5d:64:e7:15:66:6e:49:92:fb:
2c:8d:bf:e3:89:7d:4a:3a:82:29:23:ff:32:b7:e8:48:c8:e9:
4f:c4:bb:05:fb:26:ab:18:79:e9:d9:14:4f:0d:f1:b2:3c:b2:
ac:32:1c:42:12:f3:90:d6:91:dd:96:75:90:9e:2d:43:90:6f:
1d:95:c7:4f:83:06:29:d6:21:0f:82:cd:dd:98:36:e3:c9:74:
d6:9f:35:a1:e1:af:c3:60:04:73:38:66:dd:b2:1e:f3:fd:54:
5e:5a:cd:7d:95:8c:a8:34:5a:63:ef:c9:8d:39:79:23:97:1b:
5a:ad:fe:0c:2d:55:da:d3:da:79:a6:e9:df:23:0b:66:1a:8e:
d5:f8:08:66:ab:6e:f9:2d:0a:b8:d4:c9:51:23:74:d5:a6:71:
06:ca:89:7b:1e:b7:4a:c9:fe:c8:8e:ec:ea:5b:5f:61:a5:42:
0a:01:bd:09:ca:f0:a2:44:e8:01:ab:08:8f:9c:51:39:ae:e3:
83:d2:40:ef:fa:37:93:7e:f4:53:d7:57:4a:7e:45:5f:b9:9f:
50:26:a5:f4:06:ec:b7:a3:1c:dc:9b:b0:03:90:63:f1:6c:7c:
00:f2:a9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:37 2025 by rpki-client