Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/FE7DE3281F9611ED90DA5C8EF1222468.roa
File: FE7DE3281F9611ED90DA5C8EF1222468.roa (raw, json)
Hash identifier: fvKPdtB3+2A7xQ/FdhFrIopJwvo+cTT94TLXC9Qzaio=
Subject key identifier: 2C:C8:CF:C0:E8:E3:E2:D7:22:75:FF:9B:55:0F:5A:D8:40:A9:BA:90
Certificate issuer: /CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Certificate serial: 02
Authority key identifier: 03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/FE7DE3281F9611ED90DA5C8EF1222468.roa
Signing time: Fri 19 Aug 2022 08:14:49 +0000
ROA not before: Fri 19 Aug 2022 08:14:46 +0000
ROA not after: Mon 19 Aug 2024 08:14:46 +0000
asID: 328660
IP address blocks: 102.223.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654397AF
Validity
Not Before: Aug 19 08:14:46 2022 GMT
Not After : Aug 19 08:14:46 2024 GMT
Subject: CN=62ff4679-b80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:4f:54:f0:93:f6:1e:dc:bf:81:bb:2f:da:
9d:73:d2:8a:f2:f4:b5:61:ba:28:e1:b2:59:99:b9:
9b:bd:43:f7:99:f7:d4:a6:48:39:44:1e:be:1e:a5:
68:90:6b:fa:ec:c4:dd:8e:94:82:03:cb:53:27:8c:
3b:40:df:28:08:ec:7a:89:fc:b0:e0:89:7f:9b:36:
57:1f:40:7a:43:84:18:6a:49:f5:40:d8:d1:26:37:
3b:2f:d8:da:01:f5:1f:9c:69:bd:82:cd:7a:db:9b:
2f:e6:e5:4d:43:56:94:d5:f0:aa:76:07:62:d9:a2:
cc:46:09:b4:8c:c7:ad:17:a2:a3:98:5d:3b:a8:69:
6c:ba:0b:ad:cc:20:d6:00:17:5f:61:13:4b:f5:43:
8a:15:89:f5:30:bb:6e:86:28:74:11:8d:eb:6b:5f:
37:90:89:7a:46:d2:3b:01:29:40:5d:25:04:22:50:
f2:09:95:e5:89:de:5f:0c:1f:cc:5e:4b:ed:cb:c0:
c4:9a:89:71:ed:84:06:a3:1d:d1:c5:f5:7f:43:dd:
06:ff:52:20:64:79:62:d4:69:c0:6b:ec:67:37:95:
d2:f7:ac:2a:90:84:8c:5c:fa:f7:32:aa:83:4e:56:
ae:9a:8f:30:b0:62:ea:0f:c2:bb:e5:3b:76:f4:1f:
9f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C8:CF:C0:E8:E3:E2:D7:22:75:FF:9B:55:0F:5A:D8:40:A9:BA:90
X509v3 Authority Key Identifier:
keyid:03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/FE7DE3281F9611ED90DA5C8EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.228.0/22
Signature Algorithm: sha256WithRSAEncryption
20:0a:8c:0f:bc:96:f9:3d:f6:30:54:f6:88:a3:54:36:25:8f:
2f:da:f1:28:cc:04:16:c1:6d:e0:15:7b:6d:2c:25:70:46:86:
9d:fb:50:e9:f5:89:09:f8:56:20:46:8f:61:a7:44:20:60:b5:
5b:17:eb:c9:05:5e:09:4a:69:a2:5a:6c:3b:90:a1:08:12:37:
ca:ff:40:b7:49:a6:6f:55:34:01:21:54:1f:c0:12:d3:56:83:
a9:4e:ea:19:0a:60:ff:82:49:26:19:da:0f:ab:67:77:ff:73:
41:e5:3f:fa:18:f1:96:41:28:29:71:a4:14:10:c1:9b:07:5b:
bb:30:ba:e9:0d:f3:a1:85:1c:64:1e:7c:0a:43:2b:5c:a4:56:
c7:e1:51:42:48:04:bd:58:7a:38:bb:8f:a7:e8:79:31:05:18:
a5:60:dd:c9:70:2f:de:84:c9:1e:28:6a:4f:e6:29:95:e7:2f:
6b:d9:72:fc:7c:34:6d:4c:e6:c2:2a:06:ec:c9:b0:8e:fd:76:
87:38:14:96:da:f5:4d:92:5f:49:fc:a8:55:02:49:43:56:20:
13:a7:57:35:2f:87:df:8c:09:0d:27:4d:2a:14:c9:d0:15:5f:
10:1e:6e:ae:bb:88:00:8c:b9:7b:56:5b:ae:48:3f:2b:aa:b8:
f7:51:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:50:23 2025 by rpki-client