Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/971878EAF36711EF847CBB78762E951A.roa
File: 971878EAF36711EF847CBB78762E951A.roa (raw, json)
Hash identifier: OlYJGuCeJIl/z7kKNJkQvwL6ePOSDzj4IsAZHpdetgE=
Subject key identifier: 70:C7:78:D0:A9:A9:F1:31:D2:CB:29:95:78:C4:05:37:DF:BC:CE:9B
Certificate issuer: /CN=F365958DAF/serialNumber=178DDEF8BB3CFE4FBE013B923BC8AE22D645B302
Certificate serial: 19
Authority key identifier: 17:8D:DE:F8:BB:3C:FE:4F:BE:01:3B:92:3B:C8:AE:22:D6:45:B3:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/F43e-Ls8_k--ATuSO8iuItZFswI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/971878EAF36711EF847CBB78762E951A.roa
Signing time: Tue 25 Feb 2025 10:59:31 +0000
ROA not before: Tue 25 Feb 2025 10:59:28 +0000
ROA not after: Fri 25 Feb 2028 10:59:28 +0000
asID: 37284
IP address blocks: 102.209.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365958DAF
Validity
Not Before: Feb 25 10:59:28 2025 GMT
Not After : Feb 25 10:59:28 2028 GMT
Subject: CN=67bda293-484c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:8e:15:99:7b:8c:ac:f3:e2:34:ca:33:76:
22:13:79:96:42:db:50:f6:19:2f:ff:2b:ad:52:9a:
86:93:26:9c:a9:db:37:33:fd:cd:cb:56:44:f3:8a:
c5:33:71:c3:a9:1a:14:d2:70:14:dc:e6:72:b1:d8:
ac:59:dc:12:42:4f:80:9d:18:90:9c:3a:33:16:16:
2f:52:ba:25:e0:b9:c8:86:4f:fe:a3:57:89:34:5b:
e5:b5:3f:3f:33:5f:fd:1e:76:cb:61:83:38:b4:c5:
ec:34:fb:d1:fa:1d:71:ff:d0:75:c1:b4:bc:e1:f8:
30:aa:b9:1e:e9:a8:92:e0:63:4c:5c:c3:1a:35:2a:
98:25:c3:90:89:1d:49:63:eb:49:f9:e8:3b:c1:6e:
4c:85:c3:0f:37:b0:06:15:dd:a6:c1:42:ff:38:40:
cb:03:34:01:d1:b4:de:93:b6:3e:3e:9d:9a:5c:eb:
69:14:7c:8d:d8:2a:3b:87:57:e7:d6:83:09:1f:2a:
9b:c9:6d:79:23:7a:10:d8:c9:e7:dd:5e:42:d1:13:
01:1f:3a:2b:5e:a7:38:55:62:d1:74:88:bb:9f:ff:
94:ad:ee:96:31:7e:d1:40:9b:fb:53:67:e8:c9:44:
f1:fe:7f:ac:91:a3:c0:56:4d:7e:7a:8b:9f:7f:55:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C7:78:D0:A9:A9:F1:31:D2:CB:29:95:78:C4:05:37:DF:BC:CE:9B
X509v3 Authority Key Identifier:
keyid:17:8D:DE:F8:BB:3C:FE:4F:BE:01:3B:92:3B:C8:AE:22:D6:45:B3:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F43e-Ls8_k--ATuSO8iuItZFswI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/971878EAF36711EF847CBB78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.32.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:8d:4a:59:49:e2:4a:d3:73:cd:10:91:e7:aa:6f:81:76:fc:
01:9c:e4:4d:71:a8:9b:5e:9b:3f:32:0a:95:e1:5c:97:79:ea:
69:fd:de:1d:4a:6e:c2:4b:83:78:7e:cd:11:5c:5d:e9:a2:96:
58:79:14:44:28:c0:4a:3f:8c:60:86:16:fe:6d:d5:00:e4:c1:
66:ce:71:cb:d3:2f:d0:1d:61:13:2c:08:7f:47:df:8a:31:43:
de:38:f6:0e:b2:ce:5c:48:08:b4:44:a3:2c:5b:47:37:9a:e9:
e7:c9:8c:b5:80:08:41:4d:25:a9:2e:4d:56:f1:5d:78:a0:97:
56:d1:7d:1a:6c:99:3a:c6:6d:b6:e5:d7:e6:eb:ff:0b:39:87:
4d:a6:6b:ba:f4:3d:de:79:50:ac:cf:00:ac:2a:3a:54:17:f4:
75:f0:54:a7:9f:19:82:0c:42:e2:f6:02:8f:c7:b3:b7:e6:20:
f3:06:2e:27:3d:d1:25:51:a2:d5:33:0a:c8:0d:15:62:28:b5:
07:8a:9e:f5:c5:f8:34:59:ad:d4:3b:49:45:38:1c:3b:ae:6d:
b3:7a:3e:f0:1a:99:69:7c:73:ae:5e:6d:32:5f:af:d4:b1:5c:
8b:bf:c5:a5:89:60:65:5c:cf:d6:01:9b:8c:d9:78:aa:8d:15:
0d:dc:7f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:49:17 2025 by rpki-client