Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/670A5AC2692111EFB5EECB7E762E951A.roa
File: 670A5AC2692111EFB5EECB7E762E951A.roa (raw, json)
Hash identifier: aShCjJSVN6wYthZvcbKNN2Y7yW4R4K/XnJFgAGCuPFU=
Subject key identifier: B9:E1:1C:CA:E4:45:E4:C0:76:73:85:BD:7A:A9:2A:0B:15:20:C7:1C
Certificate issuer: /CN=F367E135AF/serialNumber=34E837F9C42B4E64D0274E86B7DA0C928931630F
Certificate serial: 01AD
Authority key identifier: 34:E8:37:F9:C4:2B:4E:64:D0:27:4E:86:B7:DA:0C:92:89:31:63:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/670A5AC2692111EFB5EECB7E762E951A.roa
Signing time: Mon 02 Sep 2024 11:49:26 +0000
ROA not before: Mon 02 Sep 2024 11:49:22 +0000
ROA not after: Wed 31 Dec 2025 11:49:22 +0000
asID: 43260
IP address blocks: 102.212.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367E135AF
Validity
Not Before: Sep 2 11:49:22 2024 GMT
Not After : Dec 31 11:49:22 2025 GMT
Subject: CN=66d5a646-20d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:4a:a7:e0:3b:e5:c5:2b:08:f9:33:31:8c:
03:16:bb:5d:71:63:22:6f:f8:b6:06:00:62:4b:cd:
26:d5:e2:7a:9d:d0:40:36:e0:00:f0:a9:b8:ef:18:
fe:64:73:e7:61:b0:36:dd:7f:b0:a3:6a:a9:dc:0c:
3e:b1:15:bd:73:41:fb:3e:82:c3:55:93:e2:d4:61:
10:18:dc:a1:59:77:26:e2:40:c8:03:c0:b9:9a:b4:
4f:32:34:fb:52:ef:e8:98:51:18:a6:48:75:ec:bc:
44:05:70:9a:2d:9b:f8:86:f1:82:8e:2e:b1:af:f8:
3f:16:e3:c9:60:49:b7:ea:a3:46:6c:bf:99:08:7c:
11:f3:b3:a2:4d:e3:7d:3b:81:b8:c3:a8:05:77:77:
2f:1e:c5:c0:71:6f:72:af:d5:22:da:b5:cf:db:4c:
5c:01:a2:40:68:26:87:be:0d:20:7e:60:7c:bc:da:
99:0b:7d:f3:e8:21:d6:d2:4a:17:52:ea:43:27:19:
22:76:31:04:47:18:7b:02:0b:c1:56:8e:bc:fd:12:
be:b3:15:6a:f7:59:26:83:9e:c3:15:fe:79:5f:df:
da:0b:75:f4:a0:79:fa:2f:29:48:a8:f8:f7:c3:16:
91:07:3f:0c:5a:76:0f:a5:cd:8b:47:d6:ec:f5:3e:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E1:1C:CA:E4:45:E4:C0:76:73:85:BD:7A:A9:2A:0B:15:20:C7:1C
X509v3 Authority Key Identifier:
keyid:34:E8:37:F9:C4:2B:4E:64:D0:27:4E:86:B7:DA:0C:92:89:31:63:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/670A5AC2692111EFB5EECB7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.218.0/24
Signature Algorithm: sha256WithRSAEncryption
84:f3:1b:75:21:a4:f4:0f:05:06:b0:a8:56:01:af:46:1e:15:
91:fc:ab:01:d7:69:68:55:9d:26:ad:da:13:fc:e8:86:f3:cc:
9b:73:d6:53:bc:46:c8:f1:26:c1:f4:a3:36:53:3b:d7:2e:06:
f3:a0:1f:06:ac:8a:ba:e5:e6:3b:3c:31:b5:7a:77:fb:02:d8:
5c:94:21:52:ee:20:4f:ec:aa:37:89:30:0e:ef:d1:2d:9e:8a:
51:e4:64:d3:30:8d:f0:68:12:b3:b6:40:11:05:23:60:f5:ee:
d2:7b:34:cf:62:42:f1:f4:8c:f8:e1:6c:52:75:0e:5b:a8:1f:
99:e2:dc:76:01:f5:d2:87:46:fb:e9:84:8a:c1:40:09:bb:3a:
66:14:1a:d4:8d:c3:a1:9a:65:4a:0c:f8:14:e1:40:7e:bd:0b:
1b:c3:ef:2c:ff:74:15:d2:0a:38:9e:53:77:e7:0c:bf:e3:96:
60:28:5a:9a:b1:0e:64:92:01:9f:ef:d4:e2:ce:11:25:4a:40:
26:ae:61:63:42:17:6a:c5:93:80:f6:d8:26:79:87:80:f4:c8:
b1:99:00:2d:80:da:fe:0b:84:62:81:0b:f5:b0:57:c4:af:49:
0b:82:5e:8e:0d:93:8c:0e:22:d9:35:75:3e:fb:d2:24:84:30:
b0:0d:54:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:14:25 2025 by rpki-client