Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/FAD19878AF2811EEAD20B67C775412E6.roa
File: FAD19878AF2811EEAD20B67C775412E6.roa (raw, json)
Hash identifier: KeZJVF5ZjLjEnIAV97HonutazbaviIucTY7DmHs4RBc=
Subject key identifier: 72:29:2F:C3:93:9C:87:C3:3B:98:6E:C9:8F:1C:35:C7:64:94:92:86
Certificate issuer: /CN=F3664A2AAF/serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
Certificate serial: B6
Authority key identifier: 9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/FAD19878AF2811EEAD20B67C775412E6.roa
Signing time: Tue 09 Jan 2024 19:55:04 +0000
ROA not before: Tue 09 Jan 2024 19:55:00 +0000
ROA not after: Tue 31 Dec 2024 19:55:00 +0000
asID: 329038
IP address blocks: 102.216.112.0/22 maxlen: 24
2c0f:6840::/28 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3664A2AAF
Validity
Not Before: Jan 9 19:55:00 2024 GMT
Not After : Dec 31 19:55:00 2024 GMT
Subject: CN=659da498-2251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1c:8f:ff:83:0a:de:9a:f6:c1:82:9e:fc:57:
41:0b:5a:48:72:a9:e7:28:8b:54:a9:65:8c:3c:22:
b0:b1:59:af:c9:6c:43:8e:86:16:58:70:65:81:58:
6f:61:8e:34:d4:04:7a:9b:6d:f7:8b:7b:01:21:9d:
3a:5d:21:fb:4b:00:a9:33:a7:99:ea:6a:be:96:ed:
0b:46:32:96:33:b4:5e:91:11:a2:72:a5:e4:f9:ee:
17:79:ae:fc:47:67:f2:85:2e:7f:a1:ce:09:2f:31:
fb:1f:99:08:e8:3a:7b:d2:1c:0a:2d:02:8b:f5:aa:
3f:92:49:de:f5:f9:86:4a:2b:f1:a2:2a:45:fc:23:
81:a7:aa:b9:ba:d9:43:b3:e3:89:59:9c:5b:fa:4e:
0f:64:0a:46:2e:fa:10:1f:3b:2e:69:00:4c:e2:08:
41:3b:22:a9:a7:ad:50:c3:2b:fe:d6:a2:e9:b6:eb:
21:39:12:e1:61:fe:75:70:48:48:b9:51:fa:33:e1:
57:4c:f2:c5:60:c6:18:7a:28:d3:86:63:4a:4e:4f:
5d:9c:a4:cc:40:39:2a:b8:21:d4:48:1d:cc:58:eb:
ca:d2:ae:46:72:06:b9:d6:f8:db:f8:9b:fa:05:07:
4b:16:13:14:7e:05:a4:34:9f:60:4b:51:5a:60:46:
75:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:29:2F:C3:93:9C:87:C3:3B:98:6E:C9:8F:1C:35:C7:64:94:92:86
X509v3 Authority Key Identifier:
keyid:9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/FAD19878AF2811EEAD20B67C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.112.0/22
IPv6:
2c0f:6840::/28
Signature Algorithm: sha256WithRSAEncryption
28:5b:65:7c:fc:87:6e:59:3f:10:4b:0a:99:45:77:ae:0f:e1:
6b:c4:3f:2d:bb:2e:b8:1f:6e:45:30:e9:5a:04:e3:68:a7:fb:
af:0a:ec:71:7f:6d:ca:0c:00:74:e9:91:4b:ab:93:c6:1e:3d:
5a:5c:2f:9c:c7:49:a3:e9:9c:a2:6d:4e:43:89:9e:2a:08:32:
c7:87:8d:35:17:30:bd:69:67:4e:ce:b0:33:c7:76:d7:43:b5:
81:63:2d:4d:af:00:c3:2e:72:49:55:14:98:e3:f9:0f:5a:13:
41:9f:7e:2f:a9:b7:4c:7b:e9:19:ce:db:83:89:2d:07:c1:52:
e1:f5:09:9c:2b:55:27:7d:4f:d8:24:79:86:26:13:83:de:ce:
47:fd:bc:bb:df:79:ed:b0:fc:79:24:aa:06:72:f0:58:2f:60:
c9:f9:7d:19:e4:19:37:ec:da:d0:73:13:a7:07:ba:a3:45:53:
02:b2:4e:49:b3:17:41:ef:08:af:31:63:55:a9:da:b2:f0:88:
65:e0:ed:63:ac:1a:a7:01:2f:a5:1b:c5:c7:38:d4:89:a9:84:
21:08:59:b8:44:8d:ec:76:d4:3c:19:e4:5c:b0:bf:98:b2:8e:
ad:5b:86:29:b7:a4:8f:4f:86:2a:0d:65:c9:21:2b:4b:88:53:
0f:2a:a0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:07 2025 by rpki-client