Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/F6ED3E46891D11EEBDDE4F644AD9E6FC.roa
File: F6ED3E46891D11EEBDDE4F644AD9E6FC.roa (raw, json)
Hash identifier: 3l6FV0Ch7e+B9xhUc5Ey/rO9z8lwjJCmFmgukwUjscA=
Subject key identifier: BB:E6:9B:0E:D8:7D:C7:34:45:1F:ED:B4:A9:47:41:8F:C0:EF:70:57
Certificate issuer: /CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Certificate serial: 02
Authority key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/F6ED3E46891D11EEBDDE4F644AD9E6FC.roa
Signing time: Wed 22 Nov 2023 10:00:28 +0000
ROA not before: Wed 22 Nov 2023 10:00:25 +0000
ROA not after: Thu 30 Nov 2028 10:00:25 +0000
asID: 16509
IP address blocks: 102.210.190.0/23 maxlen: 23
2001:43ff:d000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656BB8AF
Validity
Not Before: Nov 22 10:00:25 2023 GMT
Not After : Nov 30 10:00:25 2028 GMT
Subject: CN=655dd13c-14b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:3b:fc:11:61:76:4f:5d:40:82:13:50:d3:
e2:1a:50:bd:73:7c:fe:ef:1f:11:0c:a5:a6:55:0f:
2a:60:07:8d:78:ff:3a:4a:8f:53:39:d9:d6:99:9c:
47:c4:47:bf:6a:72:77:4f:80:ec:3a:fe:75:31:29:
ec:2e:38:7d:9f:08:a3:7a:42:ea:6b:1d:67:b3:6c:
48:bb:4c:5c:28:db:65:70:c3:32:c8:28:af:e7:f9:
a6:46:33:68:b0:3c:47:09:77:20:07:5a:82:4d:89:
73:8c:4a:e6:20:f5:ef:7a:3d:0d:91:de:f3:d1:ef:
57:57:2a:ca:9e:29:48:9a:5c:4a:c6:34:fc:b2:10:
a9:18:79:04:d6:0e:c1:b5:83:7c:55:5c:83:ff:59:
67:ba:f0:1d:9d:11:8c:f1:da:b4:2d:ec:6e:65:5e:
b1:14:f4:13:b5:aa:52:c5:93:7c:45:06:9e:3b:9b:
d9:a2:8c:19:a0:71:6c:50:f0:c5:43:d1:e5:0a:88:
94:5e:66:76:d1:8e:ce:99:67:34:60:d4:73:6f:b9:
30:e6:2b:a9:54:67:1c:68:9b:80:bb:0e:00:5e:d7:
b5:16:90:26:f7:db:32:41:a0:9d:43:ab:a4:a8:60:
31:2a:16:1f:53:61:d8:c5:9a:06:c1:27:c5:f6:15:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E6:9B:0E:D8:7D:C7:34:45:1F:ED:B4:A9:47:41:8F:C0:EF:70:57
X509v3 Authority Key Identifier:
keyid:F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/F6ED3E46891D11EEBDDE4F644AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.190.0/23
IPv6:
2001:43ff:d000::/48
Signature Algorithm: sha256WithRSAEncryption
70:77:3a:45:b0:62:df:1c:07:93:3b:ec:f2:b0:ad:12:17:36:
2d:7c:4e:a3:cb:9e:21:fd:9c:cb:cc:fc:38:c1:e8:1d:52:d7:
7e:8f:40:2f:4d:15:74:e6:57:b6:34:b7:e7:a1:b4:1a:cb:10:
ef:60:04:2e:25:a8:e5:49:93:b4:a8:bc:de:ed:cc:cf:15:59:
86:3b:41:10:46:48:39:0e:94:27:a8:3e:fc:26:44:25:72:5b:
2d:63:e7:37:c7:55:26:48:81:33:d8:a7:89:53:c0:2a:f2:c4:
5e:4c:02:db:b2:37:a7:b7:d5:5e:7e:cc:ef:fd:14:d0:30:ad:
e9:42:ef:7f:08:5b:6d:76:de:cf:17:15:e1:9a:ef:99:25:9d:
6f:54:9a:14:8c:c4:a6:1e:22:2f:56:7e:37:40:a1:52:1f:db:
10:1f:72:9d:b8:3e:56:6e:36:51:a4:96:48:8b:96:93:62:35:
09:a6:9b:57:cf:68:eb:4a:f0:91:56:89:9b:7f:e0:32:6b:9f:
df:cb:3a:d6:ef:25:77:0d:a7:73:f5:09:bf:0f:13:38:48:3c:
ca:31:81:5b:d2:91:b0:92:1d:78:a8:ff:0e:07:c7:a7:0d:97:
b8:b6:cc:88:45:ff:6b:52:3a:92:5a:06:64:82:6a:e9:b2:57:
16:74:6e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:25 2025 by rpki-client