Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/3115BA58AC9A11EFBB666976762E951A.roa
File: 3115BA58AC9A11EFBB666976762E951A.roa (raw, json)
Hash identifier: bHbD7weS2dip8Z+GiQXd9+abXSVFw+tU7+Gs29hWT0o=
Subject key identifier: 03:EE:88:31:8B:E7:7A:8C:7B:7B:DE:00:46:91:EB:55:F5:B3:8E:23
Certificate issuer: /CN=F364AFECAF/serialNumber=46466D356ACB19519D64CD829BED403D042004EC
Certificate serial: 3B
Authority key identifier: 46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/3115BA58AC9A11EFBB666976762E951A.roa
Signing time: Wed 27 Nov 2024 08:32:52 +0000
ROA not before: Wed 27 Nov 2024 08:32:48 +0000
ROA not after: Wed 27 Nov 2030 08:32:48 +0000
asID: 329497
IP address blocks: 102.207.191.0/24 maxlen: 24
2c0f:4ec0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364AFECAF
Validity
Not Before: Nov 27 08:32:48 2024 GMT
Not After : Nov 27 08:32:48 2030 GMT
Subject: CN=6746d934-1b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:de:86:8c:52:06:73:4c:29:f9:f3:af:61:
2e:51:bc:aa:c6:a1:d2:d5:3c:c0:b1:fe:21:1e:5d:
9f:9d:91:d5:fc:5c:b2:47:14:95:d3:fa:15:4e:95:
c8:91:f6:ed:49:62:60:72:cb:7d:67:0d:ac:d8:9f:
03:25:f1:d1:a3:f8:47:f7:58:6d:a4:f3:ce:88:f6:
bf:68:3c:7a:d9:63:70:be:2e:66:46:92:02:dd:c8:
f8:dd:65:a3:9a:65:19:05:3f:9f:6f:8b:f9:37:63:
28:6e:35:38:b4:7b:12:c5:ea:67:11:d6:50:19:a6:
63:d8:2c:99:3d:8d:05:e5:54:74:74:53:91:49:dd:
cb:05:f2:a8:de:1c:2d:0c:69:7a:e1:a6:65:da:54:
bd:54:c4:a3:f8:39:20:27:60:1d:82:10:41:3c:47:
97:86:39:c6:b0:7f:7c:39:e7:a8:32:3d:74:65:49:
46:c7:82:db:48:e3:4d:97:51:cf:c1:67:25:00:6e:
95:30:ce:67:03:40:fb:f1:ab:31:e2:b6:7e:ce:bd:
86:57:07:c8:3b:ec:bd:f5:fb:2c:a3:b3:2e:54:66:
d1:92:f4:69:2e:c6:e8:18:93:4e:02:fd:f9:a8:d2:
6e:d6:8c:89:e5:74:87:46:53:89:73:81:c1:16:2d:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EE:88:31:8B:E7:7A:8C:7B:7B:DE:00:46:91:EB:55:F5:B3:8E:23
X509v3 Authority Key Identifier:
keyid:46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/3115BA58AC9A11EFBB666976762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.191.0/24
IPv6:
2c0f:4ec0::/32
Signature Algorithm: sha256WithRSAEncryption
70:33:7a:da:3a:14:52:bf:7f:49:2e:95:4e:2b:f9:74:c7:b9:
a2:17:0f:13:4c:85:cc:88:80:5e:fd:48:7c:16:02:af:ab:68:
b9:af:82:ef:3d:6f:9e:c9:b5:d9:35:4e:9a:58:4b:18:6e:35:
6c:9f:30:54:84:7a:57:da:62:0f:5b:a7:09:80:3d:57:f4:68:
7a:19:ac:09:c9:ee:36:57:eb:3f:18:53:dc:7c:7a:f5:b3:c6:
94:4a:c6:da:ad:3c:7c:c2:df:76:11:f2:07:af:bc:d7:a5:f6:
c7:a6:56:07:ef:93:37:ea:3e:95:e1:74:34:68:fd:41:fd:96:
4c:d5:09:1c:41:ff:f9:22:ae:9c:cb:b1:e3:e9:93:c0:83:21:
dd:d3:7c:8c:5a:03:3e:78:f1:d1:5a:4e:06:09:03:20:69:9a:
17:71:b5:e1:9c:4e:fc:f2:68:7e:92:7a:3e:b6:86:88:43:07:
f3:ce:84:4c:c9:73:59:4f:02:6f:01:fc:93:41:b0:42:c1:71:
ab:53:68:2f:44:bd:02:1f:67:cf:3c:f6:3a:d0:75:f7:16:81:
0e:5c:c2:c5:fe:f6:62:7a:98:2f:49:97:bd:17:53:0a:54:35:
1f:ae:a2:98:50:8e:10:b3:9c:ab:00:16:94:fc:09:da:35:66:
58:01:bb:80
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBOzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
QUZFQ0FGMTEwLwYDVQQFEyg0NjQ2NkQzNTZBQ0IxOTUxOUQ2NENEODI5QkVENDAz
RDA0MjAwNEVDMB4XDTI0MTEyNzA4MzI0OFoXDTMwMTEyNzA4MzI0OFowGDEWMBQG
A1UEAxMNNjc0NmQ5MzQtMWIwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMtz3oaMUgZzTCn5869hLlG8qsah0tU8wLH+IR5dn52R1fxcskcUldP6FU6V
yJH27UliYHLLfWcNrNifAyXx0aP4R/dYbaTzzoj2v2g8etljcL4uZkaSAt3I+N1l
o5plGQU/n2+L+TdjKG41OLR7EsXqZxHWUBmmY9gsmT2NBeVUdHRTkUndywXyqN4c
LQxpeuGmZdpUvVTEo/g5ICdgHYIQQTxHl4Y5xrB/fDnnqDI9dGVJRseC20jjTZdR
z8FnJQBulTDOZwNA+/GrMeK2fs69hlcHyDvsvfX7LKOzLlRm0ZL0aS7G6BiTTgL9
+ajSbtaMieV0h0ZTiXOBwRYtj9kCAwEAAaOCArQwggKwMB0GA1UdDgQWBBQD7ogx
i+d6jHt73gBGketV9bOOIzAfBgNVHSMEGDAWgBRGRm01assZUZ1kzYKb7UA9BCAE
7DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NEFGRUMvQzFDQ0ZFMzY4MEY3MTFFRkFDQzkwOEFBNzYyRTk1MUEvUmtadE5X
ckxHVkdkWk0yQ20tMUFQUVFnQk93LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUmtadE5XckxHVkdkWk0yQ20tMUFQUVFnQk93LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEFGRUMvQzFDQ0ZFMzY4MEY3MTFFRkFDQzkwOEFBNzYy
RTk1MUEvMzExNUJBNThBQzlBMTFFRkJCNjY2OTc2NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAGbPvzANBAIAAjAHAwUALA9O
wDANBgkqhkiG9w0BAQsFAAOCAQEAcDN62joUUr9/SS6VTiv5dMe5ohcPE0yFzIiA
Xv1IfBYCr6toua+C7z1vnsm12TVOmlhLGG41bJ8wVIR6V9piD1unCYA9V/Roehms
CcnuNlfrPxhT3Hx69bPGlErG2q08fMLfdhHyB6+816X2x6ZWB++TN+o+leF0NGj9
Qf2WTNUJHEH/+SKunMux4+mTwIMh3dN8jFoDPnjx0VpOBgkDIGmaF3G14ZxO/PJo
fpJ6PraGiEMH886ETMlzWU8CbwH8k0GwQsFxq1NoL0S9Ah9nzzz2OtB19xaBDlzC
xf72YnqYL0mXvRdTClQ1H66imFCOELOcqwAWlPwJ2jVmWAG7gA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:10 2025 by rpki-client