Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/A1DBD6B62A5811EEBB8A82554AD9E6FC.roa
File: A1DBD6B62A5811EEBB8A82554AD9E6FC.roa (raw, json)
Hash identifier: tH0k5xAIav7adqlHVSqIpsVGUvA6Bfxe6jXdtVbPH+k=
Subject key identifier: CA:1E:03:1F:FB:7F:09:70:A7:16:B1:F8:12:E4:08:62:A8:7F:D9:93
Certificate issuer: /CN=F3664A2AAF/serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
Certificate serial: 02
Authority key identifier: 9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/A1DBD6B62A5811EEBB8A82554AD9E6FC.roa
Signing time: Mon 24 Jul 2023 19:31:06 +0000
ROA not before: Mon 24 Jul 2023 19:31:01 +0000
ROA not after: Wed 23 Jul 2025 19:31:01 +0000
asID: 329038
IP address blocks: 102.216.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3664A2AAF
Validity
Not Before: Jul 24 19:31:01 2023 GMT
Not After : Jul 23 19:31:01 2025 GMT
Subject: CN=64bed179-49b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:d9:6e:79:85:31:2c:14:b8:a6:61:7b:67:
d0:03:5d:5f:5f:b8:e0:d8:4c:bf:8d:53:8a:2f:ff:
7d:89:2c:ca:27:b1:05:79:ce:5c:e7:63:02:c6:e1:
69:9c:3e:dc:98:c9:a0:53:cc:81:5a:4c:f6:45:6c:
05:92:c2:22:94:ff:16:d2:9f:b3:36:e2:15:6f:08:
b4:bd:72:26:12:68:ab:c8:c0:af:7f:b7:db:8a:47:
71:ee:3b:f7:4e:30:d9:c0:7b:f2:d1:36:4d:a6:d0:
ec:fb:f5:01:fc:8e:44:c8:b7:d4:51:68:f0:05:a3:
5c:d8:4d:a4:42:ee:c0:b8:da:ae:ed:76:b2:3d:63:
7e:fc:d1:e0:48:81:8f:75:c5:38:6b:13:f4:10:82:
1d:a1:3d:2e:84:9b:a3:5f:49:8e:5d:bb:14:ff:d9:
31:df:d9:25:83:68:35:aa:6e:b8:55:d0:81:1a:5d:
a8:52:da:21:c3:d0:ce:30:6d:9f:73:04:eb:7d:51:
46:4b:aa:49:8a:54:35:3c:2f:b9:76:e1:2b:8a:d8:
0e:a3:38:f6:a2:08:5f:3c:00:80:bb:49:9a:35:94:
9f:e5:b5:75:ce:58:a1:3a:cc:72:d4:47:9c:eb:a0:
e2:54:8b:29:2e:76:28:f4:22:ca:22:06:ec:2e:35:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1E:03:1F:FB:7F:09:70:A7:16:B1:F8:12:E4:08:62:A8:7F:D9:93
X509v3 Authority Key Identifier:
keyid:9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/A1DBD6B62A5811EEBB8A82554AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.112.0/22
Signature Algorithm: sha256WithRSAEncryption
25:45:7a:94:00:73:f5:35:8b:b2:ad:fc:bb:e8:a3:67:50:d2:
64:5d:b3:ee:b0:ca:76:3b:98:7e:09:cb:cf:bd:6c:71:c9:e1:
e5:6b:86:00:0f:b5:26:c9:0c:19:a7:7f:58:cf:a6:91:f7:0b:
36:bc:ba:f5:fb:39:e1:57:4d:bc:97:89:b5:df:16:a6:c0:71:
99:5c:ea:10:bf:5c:e2:90:19:26:53:11:72:c0:9d:c2:6a:2c:
37:94:0b:5c:a8:be:d2:76:30:62:64:2e:e3:86:0d:08:96:b1:
33:60:a7:89:13:19:ef:4c:d4:c1:1f:17:34:53:90:83:5b:9f:
63:7f:08:04:4c:90:0d:32:53:95:66:d2:66:68:f1:9f:49:c8:
92:ee:89:19:59:f3:80:f7:e9:da:10:8e:a8:dc:23:c9:e1:c1:
69:88:a8:55:b2:8d:66:a4:98:52:4c:7c:4b:22:24:89:b9:88:
3f:58:48:fd:b6:f7:e3:f1:4b:cd:e3:3f:1e:a9:c1:a1:71:93:
8f:d9:51:cf:5c:9b:15:e2:73:06:1a:89:1b:c7:63:b4:48:5c:
14:16:9c:78:75:fb:75:ba:4f:79:29:dc:ad:e8:9b:f5:7a:65:
a0:11:72:6e:44:1e:13:9f:b1:d2:ca:4c:39:a5:09:97:e8:1f:
7e:ad:76:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:42:24 2025 by rpki-client