Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/38CEDB4250FD11EFA477469C762E951A.roa
File: 38CEDB4250FD11EFA477469C762E951A.roa (raw, json)
Hash identifier: 4J4GRGx0iyWjyhSfn/h9CD0L1HHqhso52BXXlQq+tHA=
Subject key identifier: FE:00:C2:3C:7C:78:7D:90:25:C9:D3:AE:63:2B:2B:FD:32:F5:BD:06
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0580
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/38CEDB4250FD11EFA477469C762E951A.roa
Signing time: Fri 02 Aug 2024 18:29:58 +0000
ROA not before: Fri 02 Aug 2024 18:29:54 +0000
ROA not after: Mon 31 Mar 2025 18:29:54 +0000
asID: 174
IP address blocks: 102.177.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1408 (0x580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF
Validity
Not Before: Aug 2 18:29:54 2024 GMT
Not After : Mar 31 18:29:54 2025 GMT
Subject: CN=66ad25a6-b745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:76:ad:e5:35:6f:0c:13:49:fa:4c:42:52:
11:9b:e2:3c:1d:53:b9:f5:db:61:73:0b:72:ee:a8:
f5:c2:d6:dd:8b:f0:10:53:6b:4e:67:43:5c:10:69:
44:cb:b9:ea:fe:28:c1:49:6d:bb:1d:87:b3:b9:57:
6b:6b:6c:8c:7d:e4:e2:cd:fd:94:fb:8b:6b:e6:d6:
71:35:e4:2c:4a:d0:49:91:a3:ad:26:ca:f7:38:b5:
45:f8:24:11:d5:c0:2e:4f:cf:18:ed:2d:e0:5d:fa:
31:fa:e9:5e:81:66:ca:2e:dc:12:5a:40:24:bc:1b:
cf:37:be:80:3f:f6:df:74:24:c1:21:bc:44:f0:81:
96:f4:c2:a2:fb:a3:71:ec:fe:24:d4:56:66:40:c4:
d6:6d:b6:67:fa:bf:cd:88:57:64:1a:3c:97:92:f7:
79:ff:fc:ba:7d:65:9e:c4:4b:8c:dc:df:c0:4e:e4:
22:23:22:f7:eb:c9:38:6b:cf:06:38:e9:0e:33:f8:
b6:8f:29:d8:84:c4:c3:b2:00:65:0d:a7:db:65:27:
47:e7:40:86:4c:ae:af:6c:3e:2c:56:10:e7:79:f6:
af:bd:6e:51:f7:56:e0:42:48:cc:55:3d:ea:50:3e:
d3:f5:97:32:a9:f5:66:51:3f:5b:e1:48:95:39:18:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:00:C2:3C:7C:78:7D:90:25:C9:D3:AE:63:2B:2B:FD:32:F5:BD:06
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/38CEDB4250FD11EFA477469C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.136.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:b9:ed:e9:c6:ff:d1:e7:69:57:be:b4:53:29:9e:8d:e5:a7:
94:dd:26:fa:bb:30:3e:48:4e:05:47:a5:50:9b:91:90:a8:62:
30:1c:c9:e3:c1:c9:e5:c3:d1:c9:94:d6:9d:0f:aa:9f:f5:96:
c9:7b:73:77:05:86:54:2c:ec:23:49:41:5f:fd:a6:68:b2:16:
e0:db:38:cf:1f:da:3b:d4:f4:4d:88:f3:56:69:f2:88:dd:71:
42:17:e6:8a:51:be:f5:36:da:e4:4f:b0:ca:82:ff:f9:a9:98:
4c:0e:d6:22:a8:e2:e9:9b:bf:b2:1f:43:a6:e3:ed:1e:1b:ca:
3c:cf:df:54:28:eb:90:47:43:86:cb:56:16:ba:10:09:18:0b:
ec:99:c7:49:82:ea:4b:c6:e4:7b:4d:47:ac:58:64:a1:0b:62:
7e:d7:45:2f:49:65:7d:41:e9:79:bc:56:0d:66:60:25:27:be:
83:65:78:3a:57:d9:6a:39:82:71:46:c2:d2:cc:43:04:8e:69:
a7:10:e7:46:ac:36:b9:90:aa:16:bd:fb:e7:9a:ed:51:44:94:
c7:57:dc:3e:a0:37:11:ce:0c:a6:f9:e5:14:f7:72:a3:4c:b6:
3f:a9:99:f2:da:50:2d:11:3c:40:f7:23:6f:3b:e8:26:58:3b:
3d:6a:b4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:26:03 2025 by rpki-client