Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/29A1C4C4463B11ECBE2BB116D8A014CE.roa
File: 29A1C4C4463B11ECBE2BB116D8A014CE.roa (raw, json)
Hash identifier: O5Px9+yMxD3h4TaIj58cVZ2T/wrbePoVvt5KjLdgZMg=
Subject key identifier: 70:A1:4F:98:9E:98:AB:A6:0B:24:59:7C:B5:0A:C9:15:53:AB:09:94
Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial: 0100
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/29A1C4C4463B11ECBE2BB116D8A014CE.roa
Signing time: Mon 15 Nov 2021 17:40:46 +0000
ROA not before: Mon 15 Nov 2021 17:40:42 +0000
ROA not after: Sat 15 Nov 2031 17:40:42 +0000
asID: 36994
IP address blocks: 105.247.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364712FAF
Validity
Not Before: Nov 15 17:40:42 2021 GMT
Not After : Nov 15 17:40:42 2031 GMT
Subject: CN=61929b9e-d477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:d8:df:7e:ee:45:f5:c6:e5:b3:95:c2:91:
b7:a3:b0:e1:62:6f:a0:6e:21:3d:fb:f1:4f:15:da:
bf:4c:73:63:bb:6f:1f:85:cc:b4:1d:bc:4a:8a:6c:
7a:a3:b7:93:5a:1a:31:0c:2a:52:c8:19:13:80:eb:
11:b3:3a:83:dd:e2:2b:38:d8:74:4e:e9:1e:b2:1d:
3e:f7:a7:cf:17:43:02:59:66:61:7e:0e:bc:bd:6f:
30:95:56:cd:0c:6a:00:8c:d2:bf:75:45:db:71:6a:
b8:26:11:ea:6e:ac:32:3f:e3:cd:31:1b:1d:8e:b6:
39:0e:51:a2:71:ed:f3:04:4e:7f:d7:69:d9:e7:8f:
d5:95:48:4a:39:8c:cc:d3:87:8b:0c:ef:54:f0:f8:
19:4a:3c:9b:25:33:ff:b6:c5:eb:fc:35:11:04:b0:
2d:98:f9:84:9a:3f:df:8a:03:bc:b1:ea:ad:86:a1:
d1:1f:24:89:45:79:61:5e:6b:d9:70:9f:8c:80:2b:
b6:62:c6:31:3d:fa:6e:2c:0c:7d:27:20:4e:d8:e9:
5d:0f:32:1b:1f:fb:72:6f:a5:d4:39:23:04:8a:02:
4d:fb:e8:21:35:84:90:3b:1a:f5:0e:ef:37:27:52:
12:7a:00:97:46:03:35:df:74:31:6b:bc:a5:64:e3:
a4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A1:4F:98:9E:98:AB:A6:0B:24:59:7C:B5:0A:C9:15:53:AB:09:94
X509v3 Authority Key Identifier:
keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/29A1C4C4463B11ECBE2BB116D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.247.0.0/16
Signature Algorithm: sha256WithRSAEncryption
77:16:c8:b3:10:a8:97:15:b5:d8:89:1a:a5:24:21:3d:38:0c:
ef:9a:bc:e4:69:29:73:7f:dc:46:45:a5:8b:5d:d8:82:f7:cc:
8b:18:07:44:f8:6f:52:42:1c:14:49:d7:d3:aa:8d:08:3e:95:
92:84:c4:b1:d3:2b:96:d7:97:2d:80:85:fd:cb:ac:0a:e1:7a:
75:d4:a2:ea:7c:0b:03:02:90:70:0f:a6:13:a4:a8:cf:17:6c:
b0:b0:c8:1c:d2:b7:e0:a8:1a:bf:3f:20:c2:c3:33:a1:59:78:
59:f2:e5:3c:d3:34:b8:e9:98:36:a1:30:9b:13:de:32:a6:2c:
29:62:c7:56:d8:65:be:49:0a:66:ec:04:8d:b3:dc:17:67:73:
4a:fd:fc:8b:8a:b6:71:cb:7c:7e:84:7c:ec:23:ca:de:95:34:
3d:96:f4:04:c9:12:23:52:a8:d3:cb:82:02:7b:8b:ae:ab:0c:
85:fa:24:ac:89:dc:14:28:d0:99:0d:69:ac:66:68:af:3e:09:
7f:ad:1e:cb:75:48:5e:8a:8d:42:44:c0:d2:72:df:a0:32:8d:
b8:5b:3b:f8:f9:99:11:10:b7:a7:3d:aa:ad:31:a4:5d:e6:d7:
74:d3:d7:16:d9:10:c9:d7:c7:41:1e:cb:17:2d:01:00:7f:42:
56:46:6b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:30 2025 by rpki-client