Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/1D79094AD6B211EFB2D3FF42762E951A.roa
File: 1D79094AD6B211EFB2D3FF42762E951A.roa (raw, json)
Hash identifier: DubCazr+DZeeKepCVu6sjSupYBoZCqIo6H/IBZvf+PU=
Subject key identifier: DC:1F:C3:0A:E9:E3:EB:21:54:75:1F:00:D2:70:4B:DF:45:FC:47:76
Certificate issuer: /CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
Certificate serial: 056C
Authority key identifier: DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/1D79094AD6B211EFB2D3FF42762E951A.roa
Signing time: Sun 19 Jan 2025 22:09:56 +0000
ROA not before: Mon 20 Jan 2025 22:09:52 +0000
ROA not after: Tue 20 Jan 2026 22:09:52 +0000
asID: 328732
IP address blocks: 102.209.232.0/22 maxlen: 24
102.216.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1388 (0x56c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365C79EAF
Validity
Not Before: Jan 20 22:09:52 2025 GMT
Not After : Jan 20 22:09:52 2026 GMT
Subject: CN=678d7834-0d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:1c:a8:3f:c4:5e:eb:b8:de:95:43:28:50:
3f:c9:19:23:41:f3:a3:9a:1e:a1:c3:11:e7:60:ba:
6b:8c:2b:52:3f:90:88:6f:eb:74:e9:da:86:7b:01:
e1:5c:c7:2b:c2:b6:ef:9b:04:f3:9e:a5:42:d9:d6:
c9:e8:64:29:d0:67:d9:e5:d4:4c:b7:8b:ec:2a:3d:
94:92:d6:d1:e5:1e:e3:ed:39:11:bd:42:db:7a:c6:
d4:79:3e:c6:35:68:1c:7e:d5:30:c9:f2:ec:99:49:
ae:ca:81:7d:6d:13:5c:1f:f5:5f:e9:9b:15:fa:ca:
fb:bb:12:ca:e2:36:80:a9:00:77:33:ed:51:e2:42:
81:76:da:8f:37:4d:53:c8:0c:d9:b7:90:41:09:fc:
2d:57:86:9c:cf:db:ba:92:33:d9:39:8e:20:74:ea:
df:9d:ab:58:29:45:20:78:b6:68:74:fc:be:3c:80:
e2:94:4d:e7:48:4c:02:d0:9a:ee:72:15:ee:d9:aa:
0a:4c:f1:aa:52:6e:8d:61:0f:e2:c1:38:01:9e:a5:
da:b2:cc:ce:df:a6:9d:be:f7:c2:7c:a2:12:5b:9d:
44:26:e2:6b:2f:17:12:92:49:62:a5:13:62:66:c7:
d1:18:cd:0f:ad:92:06:c5:43:4c:44:67:1b:37:54:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1F:C3:0A:E9:E3:EB:21:54:75:1F:00:D2:70:4B:DF:45:FC:47:76
X509v3 Authority Key Identifier:
keyid:DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/1D79094AD6B211EFB2D3FF42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.232.0/22
102.216.220.0/22
Signature Algorithm: sha256WithRSAEncryption
37:b5:ff:85:de:bd:f2:ad:da:4e:32:92:95:bd:37:33:b3:5d:
b6:be:3e:4e:8a:4d:80:ff:4b:af:43:43:b5:02:6b:3e:12:b1:
77:db:3b:1c:19:d1:fa:cf:d2:53:1d:8d:d2:7a:90:fa:fb:45:
bd:ef:72:73:a8:ce:10:c4:8e:be:d2:1e:87:aa:77:98:b5:66:
b2:83:0b:80:19:90:ee:6d:cb:e2:79:8c:fb:01:68:90:dd:a4:
c9:37:33:84:67:d4:1d:ad:fc:68:65:b6:13:a2:16:86:87:6c:
4b:d5:e1:20:37:49:01:47:16:5a:75:97:18:9d:7b:66:a1:70:
21:df:78:c3:21:35:28:39:fd:36:09:ef:e6:92:ea:bb:62:af:
eb:04:fd:97:60:31:53:13:19:99:68:c9:46:35:ef:9e:76:aa:
bb:ce:72:9f:ae:74:9a:0b:86:b6:57:24:f4:1f:41:e8:c9:28:
24:f1:78:00:29:d4:47:06:52:2b:f2:2f:25:1e:32:b9:f8:52:
f6:ad:e4:77:db:e2:8c:c0:09:f3:b9:86:68:6b:62:9f:09:63:
80:43:67:4e:38:a3:fc:10:86:f6:65:ba:b1:ba:dd:58:50:5e:
11:18:38:43:e6:ff:1d:da:ae:b4:4c:b8:7e:56:a0:bb:4e:87:
67:80:dc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:05:11 2025 by rpki-client