Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/3BB191129A8511EE9C81AD31D25BE465.roa
File: 3BB191129A8511EE9C81AD31D25BE465.roa (raw, json)
Hash identifier: N8wx5h40H9HOuysDikYTKTbkD7VBYU6MLZGNfC7UIqE=
Subject key identifier: ED:5C:94:AD:5B:77:15:27:97:58:01:F7:06:47:5E:C1:F4:72:CC:65
Certificate issuer: /CN=F3686B65AF/serialNumber=B8AD9011EF3B28987B5CE230F1E275547330396A
Certificate serial: 02
Authority key identifier: B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/3BB191129A8511EE9C81AD31D25BE465.roa
Signing time: Thu 14 Dec 2023 13:32:32 +0000
ROA not before: Thu 14 Dec 2023 13:32:28 +0000
ROA not after: Sat 31 Dec 2033 13:32:28 +0000
asID: 329057
IP address blocks: 102.216.8.0/22 maxlen: 22
102.216.8.0/24 maxlen: 24
102.216.9.0/24 maxlen: 24
102.216.10.0/24 maxlen: 24
102.216.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3686B65AF
Validity
Not Before: Dec 14 13:32:28 2023 GMT
Not After : Dec 31 13:32:28 2033 GMT
Subject: CN=657b03f0-1824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:67:fc:61:23:8f:4d:93:62:2d:8e:fa:4b:
5a:17:b1:5e:38:08:ee:78:b8:4c:6b:80:0d:66:39:
1f:51:64:d9:c0:38:d6:61:ef:96:10:4b:bc:cf:fa:
b1:51:bd:ba:ff:49:7c:25:59:ca:ab:94:e3:55:9d:
3a:59:88:00:cd:90:de:e2:b5:26:2c:65:64:ee:84:
89:15:52:33:54:d7:fe:84:01:36:fb:1f:52:83:9e:
82:32:7e:bf:97:6b:b7:7a:e8:dd:8b:3e:a5:d2:c8:
4b:90:42:48:ed:83:43:c4:e6:23:43:70:29:69:bc:
5f:27:20:81:30:b2:2a:83:52:f5:7d:d1:47:c0:86:
34:5b:f2:5d:95:32:78:b5:ff:d2:d4:10:c5:e3:52:
40:55:21:6f:18:f1:5b:8d:3a:c7:19:42:d4:7e:6c:
5c:52:02:59:04:e3:de:70:92:b6:22:c7:dc:24:f4:
3b:5c:b2:56:b9:f4:a4:08:79:bf:25:8b:17:15:a4:
e0:c9:88:b3:4d:72:1e:21:77:f8:08:af:e2:7b:a7:
33:b5:9a:80:b7:e8:8d:70:15:f8:a5:58:2e:9a:41:
a7:1e:92:80:90:32:a7:02:28:3a:f3:dc:90:41:cd:
5f:70:89:60:d8:9e:cd:d8:52:8a:21:e8:42:51:e2:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5C:94:AD:5B:77:15:27:97:58:01:F7:06:47:5E:C1:F4:72:CC:65
X509v3 Authority Key Identifier:
keyid:B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/3BB191129A8511EE9C81AD31D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:f2:25:89:39:de:1b:6b:37:09:e4:dd:c9:e6:0d:b8:bf:2a:
3f:71:45:89:86:4a:c6:3b:c3:10:36:ba:6a:a4:c0:59:38:3d:
4e:d5:58:92:3a:46:5c:89:38:64:01:36:22:25:be:e0:c2:d9:
39:9a:24:45:62:13:2b:5a:00:f4:e4:4a:81:05:b6:f2:5d:82:
78:ff:34:6d:a7:99:66:79:36:40:01:79:f2:53:6e:21:2a:b8:
f6:16:17:47:c7:c7:e3:b3:82:96:6f:48:e6:3f:5d:5c:ca:c1:
f9:6d:69:25:2a:19:14:76:de:38:58:77:76:af:67:88:61:c0:
74:37:54:a4:d3:44:c2:ca:13:a9:26:52:af:9d:0e:ce:08:33:
07:b8:54:9b:d3:bb:08:4d:78:2f:2d:ad:f0:ed:d6:ea:29:1b:
e2:ec:f3:4b:f7:6f:5e:0e:f8:bc:1c:01:19:e7:df:ea:ad:a5:
c3:da:4a:5f:98:5b:10:56:60:f2:9c:ce:4f:d3:b3:3b:e8:af:
c3:4e:69:7b:b9:78:61:2e:50:b2:09:33:73:88:50:1b:60:b4:
aa:09:47:3c:89:be:c0:d0:55:7e:5e:38:16:83:65:79:87:cc:
fb:96:46:20:bc:7a:0c:2a:f2:da:70:74:87:c7:ec:8f:0e:3f:
82:79:be:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:06:57 2025 by rpki-client