![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/92BEC60E044611ED940E47BAF1222468.roa
File: 92BEC60E044611ED940E47BAF1222468.roa (raw, json)
Hash identifier: ik6vGBXBq+uIqA+LnIcCmeEAtZT2RMH5Ar5n8QdvwX0=
Subject key identifier: D8:30:26:B1:C3:96:87:F3:2D:4D:9C:C3:D7:C9:7E:3E:82:C9:6F:D4
Certificate issuer: /CN=F364C81DAF/serialNumber=BCCE86D612D43F841AB0416EC5A884070F5CE5D6
Certificate serial: 0495
Authority key identifier: BC:CE:86:D6:12:D4:3F:84:1A:B0:41:6E:C5:A8:84:07:0F:5C:E5:D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/92BEC60E044611ED940E47BAF1222468.roa
Signing time: Fri 15 Jul 2022 14:01:07 +0000
ROA not before: Fri 15 Jul 2022 14:01:03 +0000
ROA not after: Mon 15 Jul 2024 14:01:03 +0000
asID: 327822
IP address blocks: 102.223.200.0/22 maxlen: 23
2c0f:ed70::/32 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1173 (0x495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364C81DAF
Validity
Not Before: Jul 15 14:01:03 2022 GMT
Not After : Jul 15 14:01:03 2024 GMT
Subject: CN=62d17323-70ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:cf:18:4a:cb:95:24:24:09:ea:bc:31:e8:a7:
57:f4:a7:9d:c5:82:05:57:75:6b:7d:25:01:49:75:
30:44:d8:b4:49:13:f7:31:fd:0d:8a:f7:cf:ea:74:
d7:ec:60:6b:8d:7c:9b:5b:c6:ee:a5:86:eb:f1:9a:
f9:7c:be:b2:8a:23:28:ae:fc:79:6a:3d:91:b7:70:
04:14:6f:92:07:ec:27:3b:62:38:53:62:6c:23:a4:
3a:97:48:01:70:78:fc:9e:bf:ac:a5:e0:1c:1c:89:
92:a1:26:12:e7:46:04:fe:06:51:db:55:62:47:ed:
11:64:61:90:61:1d:d3:c2:ce:ff:d7:9a:ed:5e:69:
29:98:9b:aa:81:a6:04:99:4d:6c:f0:fb:2b:63:df:
18:67:d3:88:83:10:b0:a5:bc:59:bf:c7:b0:bc:02:
3b:71:58:09:cd:b4:aa:6f:b5:c6:2c:60:66:90:06:
11:51:86:fc:81:38:f1:37:85:78:76:8c:56:b2:bc:
30:5b:5b:19:b3:56:25:a9:4d:1c:88:45:cd:54:fe:
a3:88:6e:2d:d3:f5:ae:69:71:ff:f2:5b:25:f9:35:
f4:7e:84:b9:38:e5:1f:d9:51:1f:45:86:36:db:c8:
26:a1:2d:e8:a5:96:1a:54:25:fe:69:b4:fa:14:3a:
12:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:30:26:B1:C3:96:87:F3:2D:4D:9C:C3:D7:C9:7E:3E:82:C9:6F:D4
X509v3 Authority Key Identifier:
keyid:BC:CE:86:D6:12:D4:3F:84:1A:B0:41:6E:C5:A8:84:07:0F:5C:E5:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/92BEC60E044611ED940E47BAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.200.0/22
IPv6:
2c0f:ed70::/32
Signature Algorithm: sha256WithRSAEncryption
80:f3:9f:b7:9b:2a:41:88:73:31:70:de:95:19:82:ca:d9:a5:
4e:19:bf:6b:9f:75:c9:93:32:f3:ab:33:ba:be:c6:2c:74:3e:
38:7e:62:95:b2:65:97:f1:65:5d:18:31:44:63:87:67:a8:7a:
1d:d7:7b:57:0a:da:d9:3e:49:13:01:cb:47:3d:b3:34:b7:25:
3d:b2:e8:fe:46:2c:61:fb:c2:0d:41:b3:26:f6:49:f3:a1:fe:
e4:fe:15:6c:d3:a0:f2:d9:87:99:89:d9:b8:2a:e5:4b:8f:a6:
6e:96:30:5a:08:ba:e7:15:27:3a:4b:69:b0:41:c1:43:83:fa:
8e:06:71:db:6d:b9:13:06:72:1c:5f:75:40:c0:33:13:ba:12:
42:81:3f:0f:b0:d5:b1:b3:e2:1a:18:11:e8:9c:35:7f:9f:e3:
60:fc:6b:3f:de:bd:c3:7f:42:82:6c:a9:1c:9c:27:7e:77:44:
5c:aa:79:29:d7:03:15:61:4c:f1:78:89:f9:a4:a3:38:31:24:
5c:78:6b:09:08:63:ec:29:7e:a1:e2:58:6f:dd:09:64:59:40:
a2:30:f7:17:61:3e:72:a0:d6:d2:3b:6b:2b:9d:04:7d:77:5f:
6e:31:ce:be:e3:4e:dc:06:86:d5:af:55:7e:ce:77:a0:08:be:
26:83:20:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:31:55 2025 by rpki-client