Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/D08D8404E20911EFB7BBBB72762E951A.roa
File: D08D8404E20911EFB7BBBB72762E951A.roa (raw, json)
Hash identifier: mxpQNEEt8eO1xH/mH0CzmPJl+5Qf8WdLQzu0l8F+kl0=
Subject key identifier: 10:74:6B:8F:A0:55:DF:93:47:FC:6A:52:F8:DC:DA:CC:C8:B8:AF:75
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0665
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/D08D8404E20911EFB7BBBB72762E951A.roa
Signing time: Mon 03 Feb 2025 08:35:25 +0000
ROA not before: Mon 03 Feb 2025 08:35:21 +0000
ROA not after: Fri 15 Aug 2025 08:35:21 +0000
asID: 328608
IP address blocks: 102.177.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1637 (0x665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF
Validity
Not Before: Feb 3 08:35:21 2025 GMT
Not After : Aug 15 08:35:21 2025 GMT
Subject: CN=67a07fcd-6590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:b8:6b:66:5b:b0:03:88:aa:4f:63:34:b3:
be:dc:a1:33:40:0a:57:a9:ed:2d:0c:9a:8e:09:4e:
5f:c7:80:b8:d4:d7:72:32:ff:58:a3:f6:91:99:40:
8c:50:2d:40:d5:71:64:13:c6:b6:00:a0:a8:76:34:
ae:89:bd:8d:c8:7a:31:be:b9:27:cd:a7:e0:61:ae:
ef:2a:7b:7b:ae:7e:e8:b3:3c:c9:c6:b2:db:08:d3:
e9:19:15:a0:9a:ab:da:bd:e0:f7:85:54:45:95:f1:
7b:43:50:72:51:fc:f5:e0:51:b2:6f:3e:b5:5e:9c:
6d:31:1f:d0:c1:3f:62:31:0e:10:b8:c1:be:e3:08:
34:6f:51:6d:17:d3:c2:2c:fb:93:06:67:c5:cc:eb:
a6:75:44:9c:f1:88:6f:1b:b9:c5:f6:19:4f:14:1d:
89:0b:40:6c:22:47:f7:b5:0d:5d:d0:63:c4:db:1d:
d4:d0:f8:49:b2:e6:98:b8:1c:9e:ec:b7:ae:90:9e:
96:04:39:8f:e0:29:12:88:95:64:a9:dc:6b:3f:2c:
34:a2:27:0e:15:ce:69:b8:8b:d7:ba:ee:e5:32:90:
18:6a:3c:f3:70:a6:c9:c6:13:74:3b:01:6b:fc:a9:
97:c7:b5:b7:3a:0e:5b:6e:ea:ea:92:0d:a0:7d:ce:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:74:6B:8F:A0:55:DF:93:47:FC:6A:52:F8:DC:DA:CC:C8:B8:AF:75
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/D08D8404E20911EFB7BBBB72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.136.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5f:a6:92:dc:24:bb:fd:7e:87:f3:b8:72:09:eb:93:b7:41:
6d:00:44:a4:39:b1:09:87:99:63:9a:da:5d:e3:d4:d5:32:db:
1c:c6:88:b8:96:e5:50:48:80:68:17:00:9c:98:25:a8:f0:16:
2d:60:ab:8f:e7:bb:8b:2c:fe:0e:f6:30:47:40:34:94:b9:3d:
a5:5a:78:d9:b8:ed:14:96:a4:4b:c5:8b:66:aa:f7:3a:a1:37:
b8:64:57:80:38:3a:23:ba:64:a7:fc:33:6b:62:12:79:1c:f7:
41:de:52:f2:74:e8:b3:ba:6d:09:2a:d1:6e:d1:d5:8d:96:73:
d2:c1:26:d7:80:1d:b7:3e:f0:30:f3:ba:cf:f5:d7:0f:c3:de:
ac:30:8d:0e:a2:68:1f:9b:3e:b7:84:5b:b6:20:a1:0f:f7:89:
8c:a6:a2:97:2c:b7:d7:de:c5:f3:5d:fe:f5:17:b5:5d:b2:58:
4b:18:0d:bb:eb:9a:cf:5c:6e:5c:29:b4:1e:08:af:94:9d:99:
eb:48:5f:68:8c:ac:ac:86:8c:9e:af:58:c7:1f:be:62:0b:cc:
70:6c:8c:26:f3:83:1b:06:0c:d1:9f:f1:d6:7b:37:e8:c9:16:
4a:a3:a3:ea:b8:f3:06:9f:73:08:1e:12:ab:44:9a:a1:ec:d9:
6a:22:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:31:07 2025 by rpki-client