Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9DCE40600BB911F09D3B704E762E951A.roa
File: 9DCE40600BB911F09D3B704E762E951A.roa (raw, json)
Hash identifier: f1EFWyVKnUgwxowJ7oL/hIetHXfEzVOQAjYSpAQdZtY=
Subject key identifier: 32:27:B6:8E:6C:DA:8D:57:10:09:C4:E8:16:B5:0E:EE:EA:92:D0:5A
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 06A9
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9DCE40600BB911F09D3B704E762E951A.roa
Signing time: Fri 28 Mar 2025 09:47:09 +0000
ROA not before: Fri 28 Mar 2025 09:47:05 +0000
ROA not after: Sun 30 Mar 2025 09:47:05 +0000
asID: 22724
IP address blocks: 102.177.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1705 (0x6a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF
Validity
Not Before: Mar 28 09:47:05 2025 GMT
Not After : Mar 30 09:47:05 2025 GMT
Subject: CN=67e6701d-237e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:64:67:5a:b1:34:fb:c2:30:d8:9c:c5:15:9c:
58:18:53:10:28:ad:d7:da:05:f2:7d:f5:53:b9:f0:
0f:a6:c2:23:94:c7:00:5f:13:c0:54:89:f6:0a:43:
ff:48:96:66:10:fe:9f:b9:41:f9:99:c6:ae:21:49:
66:f6:a6:87:4a:f4:4f:b0:db:e8:11:50:f5:b9:b8:
59:0a:3a:08:98:4d:9a:b0:c4:76:ed:00:d0:07:97:
b5:48:d5:2b:54:fa:a5:5f:6a:70:17:fc:c4:68:f6:
4e:d0:fc:fb:b1:70:86:f8:74:01:57:59:0e:e5:1c:
f3:04:79:65:6c:30:ac:e4:1b:86:f1:2e:5b:a4:bd:
cd:22:8a:90:2c:97:5b:2e:4f:57:e2:e4:1b:35:50:
d2:5a:c4:b4:bc:91:34:a5:46:b7:0d:4b:c4:9c:b1:
da:86:26:58:bf:34:b7:b0:de:77:94:f9:c1:fe:1d:
d2:d0:c6:e8:fd:7d:f4:b9:f6:98:f0:22:38:5f:99:
b3:46:a3:a2:53:0d:ff:ad:be:60:e2:9d:8a:67:90:
ae:e2:b1:75:80:58:e7:b3:e3:d1:e3:47:68:05:57:
a5:5f:c2:53:18:de:0c:ef:f2:93:ff:3a:f9:a9:c0:
3b:d5:38:75:93:01:f0:81:99:51:40:31:3b:10:d5:
3e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:27:B6:8E:6C:DA:8D:57:10:09:C4:E8:16:B5:0E:EE:EA:92:D0:5A
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9DCE40600BB911F09D3B704E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.160.0/20
Signature Algorithm: sha256WithRSAEncryption
ba:73:7b:60:7f:de:35:0d:7b:cd:3f:5e:9a:54:b6:65:17:62:
98:67:ad:81:a5:a6:e4:8f:8b:a4:f0:2f:96:a5:1c:02:7a:4f:
ed:60:7c:47:f3:f7:d6:a4:6c:99:c8:9e:77:36:64:85:fe:ae:
96:25:71:18:74:22:f4:07:db:f1:cc:23:d0:d1:fa:42:10:bb:
b3:be:9b:6d:0a:6c:79:8d:96:b3:d2:50:b8:02:df:37:e4:a3:
7f:0b:a5:55:b0:1d:be:f7:a1:d7:7e:89:7b:79:f5:71:c9:34:
d5:af:39:80:b6:8a:64:43:c9:be:e9:53:87:c6:1a:a5:27:3a:
24:04:0b:d1:4e:cc:2e:7f:b6:17:33:43:8e:41:cf:72:93:5a:
ff:e2:6c:bc:66:40:f7:7c:66:d6:96:72:3e:27:f3:81:36:c9:
7b:df:91:5f:b2:a1:7f:46:36:07:23:6c:b2:11:f1:b9:ae:3f:
bb:64:03:67:c2:4d:a8:59:b2:cb:7e:4b:f8:21:a5:fb:b5:c8:
7a:9b:4e:cf:c2:61:f9:45:a9:0b:c1:85:2c:72:dd:bc:14:33:
dc:17:eb:0e:54:f2:c8:1a:37:a0:a4:02:83:bb:40:47:1b:8f:
c3:95:c8:af:7c:31:05:35:b1:a6:be:5f:09:06:f4:df:f1:89:
d0:b2:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:21:12 2025 by rpki-client