Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/10EAF1B40B4311F08B33AB71762E951A.roa
File: 10EAF1B40B4311F08B33AB71762E951A.roa (raw, json)
Hash identifier: 8dKtBcctBuIDLiDUfnBFwlKL6LP+a2nsnLbiPCcB/UI=
Subject key identifier: EA:32:45:30:29:FE:6C:E6:BD:E2:29:92:D5:BF:E3:4F:1F:9C:89:4F
Certificate issuer: /CN=F3659389AF/serialNumber=0761257DC989C67CBFE16374834CE8592168C964
Certificate serial: 02
Authority key identifier: 07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/10EAF1B40B4311F08B33AB71762E951A.roa
Signing time: Thu 27 Mar 2025 19:38:32 +0000
ROA not before: Thu 27 Mar 2025 19:38:27 +0000
ROA not after: Wed 27 Mar 2030 19:38:27 +0000
asID: 329310
IP address blocks: 102.211.108.0/22 maxlen: 22
102.211.108.0/24 maxlen: 24
102.211.109.0/24 maxlen: 24
102.211.110.0/24 maxlen: 24
102.211.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659389AF
Validity
Not Before: Mar 27 19:38:27 2025 GMT
Not After : Mar 27 19:38:27 2030 GMT
Subject: CN=67e5a938-151e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:8f:70:2f:4e:c4:f6:e9:f9:cb:7c:ec:dd:
c7:7b:9a:a1:ed:e6:54:12:e5:82:25:8e:2d:b2:d6:
7f:21:37:4c:40:3a:ff:73:ee:c0:10:1c:a0:5f:6a:
93:53:2c:de:e0:06:0b:8c:5d:c5:df:aa:74:31:f6:
43:f1:8a:2d:da:b9:fc:b2:ac:d9:af:bd:20:d6:0a:
bb:9d:cf:22:82:49:cd:ca:0f:2b:d7:c8:6a:db:6a:
31:a5:3a:89:c0:5a:f8:d1:72:21:b1:b9:ba:0a:5d:
79:0f:ed:67:c1:fa:4b:3e:1d:75:62:c5:dd:b6:85:
b6:0c:0a:99:ff:c5:65:57:f8:2a:05:03:10:12:84:
64:4f:e8:ac:96:98:6b:28:fd:f9:e4:95:76:2a:63:
40:8d:39:40:4b:3b:9a:be:6a:a9:47:f1:64:ef:2c:
fa:03:28:53:97:b7:56:9e:8d:73:c6:1d:9b:0b:d4:
18:57:9e:3e:fa:4c:59:ad:e5:44:10:7b:44:11:bc:
db:84:95:16:82:55:17:ab:34:94:d0:5b:c9:a3:91:
4e:b4:4a:3c:1a:9b:56:ad:b5:27:84:ad:49:c3:70:
2e:c1:dc:89:7b:3f:e7:6d:c2:fd:70:52:af:58:9e:
d5:07:b1:6c:c1:c6:92:36:b4:d2:da:df:52:97:99:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:32:45:30:29:FE:6C:E6:BD:E2:29:92:D5:BF:E3:4F:1F:9C:89:4F
X509v3 Authority Key Identifier:
keyid:07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/10EAF1B40B4311F08B33AB71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.108.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:a2:79:16:0e:82:c1:e7:4f:9a:36:bb:24:89:39:f4:23:77:
fe:4c:fe:be:03:25:86:fd:fd:64:6f:b7:9e:89:eb:4e:1b:19:
97:e7:25:09:ef:74:7e:8a:f7:00:26:d5:5d:70:16:90:59:b4:
6d:ab:8a:67:85:47:c4:21:6f:11:ea:ea:36:84:9d:b3:e8:64:
fa:80:a6:be:9e:3a:39:28:04:82:84:44:d9:c7:de:c8:bc:21:
1d:3d:62:3d:1b:b7:96:9d:50:8a:11:c3:c9:f1:77:f1:e5:95:
56:fa:23:5a:82:8f:2d:6a:8a:17:49:80:bb:de:06:ae:33:64:
1e:24:77:63:f5:74:53:f3:8c:e8:79:7e:4d:79:ca:d6:30:64:
e1:f7:43:b7:42:bb:d7:3e:9e:03:b6:79:ed:97:4f:c2:f1:7c:
00:22:26:2f:4c:ae:e0:32:7d:58:cf:31:a7:bc:07:61:ff:ad:
58:d3:3e:99:6f:e3:bb:4f:e2:ed:27:2f:42:46:d6:0c:b2:cc:
16:82:9c:f3:ef:b0:a9:c9:59:7d:2e:f4:80:28:10:a8:9c:0d:
67:c2:ae:5e:48:cb:8c:73:a8:65:e6:cb:65:2b:b8:a5:80:3a:
55:c6:3d:8f:85:bd:69:f4:80:a3:96:b0:32:51:92:18:0d:b0:
47:57:6d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:51 2025 by rpki-client