
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/9D138D4CD17B11EF890791A3762E951A.roa
File: 9D138D4CD17B11EF890791A3762E951A.roa (raw, json)
Hash identifier: YtOzzIAfQEjwyVcS0gx7UZKyYqAnn55LoVoqNlpKMPw=
Subject key identifier: 94:39:DE:34:04:5E:EC:18:33:F4:58:6C:DC:28:20:68:A6:65:D7:E7
Certificate issuer: /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial: 0387
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/9D138D4CD17B11EF890791A3762E951A.roa
Signing time: Mon 13 Jan 2025 06:57:12 +0000
ROA not before: Mon 13 Jan 2025 06:57:08 +0000
ROA not after: Thu 15 Jan 2026 06:57:08 +0000
asID: 328271
IP address blocks: 102.176.180.0/22 maxlen: 22
102.176.180.0/24 maxlen: 24
102.176.181.0/24 maxlen: 24
102.176.182.0/24 maxlen: 24
102.176.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903 (0x387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645721AF
Validity
Not Before: Jan 13 06:57:08 2025 GMT
Not After : Jan 15 06:57:08 2026 GMT
Subject: CN=6784b948-1ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:91:d2:d4:72:81:63:ec:79:fb:6c:98:02:
2f:22:da:d7:fd:20:23:12:4d:fa:9b:00:81:5a:62:
fc:2a:96:82:25:d5:cb:a4:67:86:40:11:cb:e7:e0:
44:f7:5c:92:71:2c:6d:d7:e2:00:46:e5:57:cc:44:
50:30:f3:92:db:58:00:7b:52:de:91:88:54:0f:73:
84:40:72:46:42:35:db:d5:72:ad:27:bb:af:08:27:
1b:20:11:d4:d9:29:86:7e:e4:a9:7a:5c:02:8a:f5:
d5:68:7e:e8:d5:29:7f:52:c7:49:d0:06:57:63:38:
bb:ea:31:88:74:7b:01:c8:da:1d:d1:f2:ac:26:19:
cb:38:c1:b2:ae:65:fb:9b:b2:28:bb:a6:ea:a4:ad:
8a:e3:c9:14:68:7d:50:91:22:0a:d8:f7:94:4b:cd:
36:e1:ea:84:f4:89:e8:a8:f4:6e:aa:d5:cb:6a:42:
4b:de:3b:18:15:d6:b1:0b:30:8e:82:80:a5:b3:ce:
df:4f:b8:1e:bb:8a:f5:56:95:a7:30:13:8e:b6:97:
a6:2e:78:aa:df:c6:7d:2b:ae:0a:a2:e0:eb:24:70:
8d:32:b6:c2:f2:d9:62:5a:31:a1:61:58:e5:7f:9d:
33:f9:44:ad:3a:ce:14:c0:1d:a7:26:34:9c:45:53:
07:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:39:DE:34:04:5E:EC:18:33:F4:58:6C:DC:28:20:68:A6:65:D7:E7
X509v3 Authority Key Identifier:
keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/9D138D4CD17B11EF890791A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.176.180.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:7c:57:97:4f:45:f8:53:fd:b3:ee:f9:00:37:8c:e7:f8:18:
8e:c1:d6:0e:68:5d:3d:ac:7b:2d:8f:dc:ea:90:5a:70:2a:ae:
24:61:c5:50:cc:dd:78:74:10:3b:25:08:06:a2:67:03:c3:cd:
1a:24:57:58:54:e8:12:90:d8:66:96:c0:c4:e9:d6:7b:59:a6:
69:60:e7:57:c9:74:ae:ff:98:87:fb:8f:5e:de:a8:65:1b:22:
fd:64:50:cb:2e:af:8b:8e:32:25:56:5f:a1:15:ee:29:95:21:
aa:b5:79:fc:25:b9:e4:78:63:b2:ce:0c:2d:75:4c:02:99:89:
df:1c:f0:2a:ee:08:01:cd:e0:e4:c8:ab:f2:6f:fe:51:da:74:
06:2c:8a:a5:f5:83:8e:a1:a8:5c:55:8d:ee:19:d0:02:d9:84:
4c:2b:15:61:b3:08:87:5d:b1:84:0f:07:0c:d4:25:80:12:43:
09:75:98:89:44:05:b3:8c:2a:65:f7:4b:7e:3d:8f:1e:43:d8:
25:ec:5b:74:8d:50:e2:b4:8f:2e:8e:0c:ea:43:39:fa:49:66:
7c:be:6f:cf:7c:9a:6e:95:18:5d:41:d7:5e:45:7e:fc:d5:9e:
bf:26:10:d8:6a:d3:44:a0:b2:d3:fc:aa:cb:fb:fd:b3:b1:84:
db:d3:e2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:41 2025 by rpki-client