Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/468CE3208C7411EFBC4FC849762E951A.roa
File: 468CE3208C7411EFBC4FC849762E951A.roa (raw, json)
Hash identifier: mwR2Gz6D+sAMA/A46Ap6412OhT7uG7sdw5VbTg3GJik=
Subject key identifier: 61:DD:D1:73:57:F9:83:D0:04:4E:AC:5B:E4:9C:E1:E9:02:BF:E5:D1
Certificate issuer: /CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Certificate serial: 033D
Authority key identifier: 03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/468CE3208C7411EFBC4FC849762E951A.roa
Signing time: Thu 17 Oct 2024 10:40:50 +0000
ROA not before: Thu 17 Oct 2024 10:40:46 +0000
ROA not after: Fri 17 Oct 2025 10:40:46 +0000
asID: 328660
IP address blocks: 102.223.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 829 (0x33d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654397AF
Validity
Not Before: Oct 17 10:40:46 2024 GMT
Not After : Oct 17 10:40:46 2025 GMT
Subject: CN=6710e9b2-0b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:fe:bd:8c:e3:6d:17:a5:f8:1a:f9:dd:2e:
8f:10:4c:5f:ef:37:fb:95:56:7a:8d:1a:b4:10:68:
d6:82:2b:2c:72:7f:33:95:20:a2:00:80:1e:3a:31:
bc:94:7a:8c:e2:d7:55:35:1e:bb:65:49:c9:6c:09:
d6:33:04:c4:4c:6e:d3:dd:25:e3:81:b1:54:42:74:
96:a0:dd:eb:9c:68:69:75:22:10:b8:86:7c:0c:65:
39:ef:7f:19:08:ca:43:a7:5e:22:cf:6a:1a:2e:4b:
c7:ef:71:be:0a:df:58:7a:f2:5a:57:fa:14:23:d2:
7d:11:e5:7e:e7:b6:5f:e2:c5:c2:15:cc:2d:5e:dd:
70:8f:2b:b9:4d:4f:1c:6e:a3:fe:dd:7b:6c:01:96:
2f:ce:cf:24:44:1b:ba:27:4d:87:f1:f5:6d:00:3d:
f1:3f:4d:c8:fd:28:83:a8:ff:0b:93:e8:3c:20:98:
2a:5c:ce:23:aa:e4:8b:d5:70:b9:e0:31:4d:81:9e:
1d:cf:2e:4e:fa:5e:cb:5b:7a:6f:cd:55:44:aa:e8:
29:10:03:e0:c6:c3:e8:5f:00:c5:e4:47:26:a9:cd:
e6:53:60:aa:80:e8:a7:fa:7a:39:92:25:bc:4a:fd:
41:33:57:3d:7d:8c:16:06:84:e7:53:05:70:83:91:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DD:D1:73:57:F9:83:D0:04:4E:AC:5B:E4:9C:E1:E9:02:BF:E5:D1
X509v3 Authority Key Identifier:
keyid:03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/468CE3208C7411EFBC4FC849762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.228.0/22
Signature Algorithm: sha256WithRSAEncryption
36:d9:51:45:af:ca:72:a9:a7:9f:dd:5c:13:a9:b2:33:2c:f7:
69:c1:82:67:90:c8:12:c2:aa:5b:1c:b0:fb:00:00:54:1b:e6:
3b:7c:0d:c2:71:15:a1:e9:33:4e:92:40:45:ed:f1:b4:f0:16:
53:7f:68:8b:10:37:09:f6:e4:39:90:95:d5:c3:5e:18:6e:43:
6c:5a:c9:72:96:30:01:02:5a:04:63:e1:27:a7:9c:81:ec:6c:
29:bc:cf:1b:98:c6:df:70:98:8b:7b:d2:e3:83:81:ff:1e:ec:
05:f3:05:f7:91:0d:fb:f3:c7:9e:d3:92:22:fb:cc:16:65:e3:
e8:5d:e6:c2:35:29:42:51:70:7f:ec:3f:7d:d4:33:67:d3:0c:
15:ff:66:68:11:97:71:e8:92:5b:10:70:0b:db:3d:fe:a2:e7:
de:f5:da:fc:94:d9:1f:46:cf:fc:15:ea:ed:1d:0a:55:b4:d6:
d4:2a:86:7f:99:21:4e:98:6d:38:35:35:74:e7:9e:82:1e:30:
4c:3c:cd:a0:e1:bc:1b:02:a5:84:60:69:13:4d:57:ee:de:8a:
37:86:c6:4c:08:d9:28:de:4a:57:1c:0e:14:29:a4:89:c1:4b:
81:68:1a:32:1b:db:73:9c:75:5d:60:22:bd:8f:d1:76:ca:67:
6c:dc:c9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:51:03 2025 by rpki-client