Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/AA1FA2DE79A911EF8999BA52762E951A.roa
File: AA1FA2DE79A911EF8999BA52762E951A.roa (raw, json)
Hash identifier: FlPb6VzrBb6IeeWxBOz6y7x0ygbXfRXXLsf1FXyZYqE=
Subject key identifier: A9:2D:81:56:B6:C5:64:A9:E5:8A:F9:B4:7B:98:6B:7B:87:76:A6:5F
Certificate issuer: /CN=F3686B65AF/serialNumber=B8AD9011EF3B28987B5CE230F1E275547330396A
Certificate serial: 013B
Authority key identifier: B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/AA1FA2DE79A911EF8999BA52762E951A.roa
Signing time: Mon 23 Sep 2024 12:45:08 +0000
ROA not before: Mon 23 Sep 2024 12:45:04 +0000
ROA not after: Wed 25 Sep 2024 12:45:04 +0000
asID: 43260
IP address blocks: 102.216.8.0/24 maxlen: 24
102.216.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3686B65AF
Validity
Not Before: Sep 23 12:45:04 2024 GMT
Not After : Sep 25 12:45:04 2024 GMT
Subject: CN=66f162d4-ba76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:41:2a:0c:d3:8d:ce:b1:42:3c:d3:b6:84:
17:f9:e1:cc:92:f0:51:f4:f2:ce:bb:9d:3b:66:b8:
bc:8e:47:b3:b3:a7:f9:04:ce:b9:27:04:6f:94:fa:
37:57:64:dd:0a:f1:4b:e4:f5:cc:8b:4c:69:60:9a:
91:cb:8b:54:02:21:9a:2c:24:46:ba:69:57:1d:ed:
83:00:71:46:fb:b7:ae:2d:8e:8e:04:a2:2d:50:c3:
3d:24:c8:b7:0e:58:d9:b8:76:54:9f:b3:1f:57:da:
f6:75:a3:f0:f7:3c:4e:81:0b:46:2d:0a:22:ae:0c:
be:48:5a:be:45:72:49:ef:2c:95:5c:1a:c0:e1:c6:
f5:95:96:e0:88:be:4f:a7:50:37:c8:0f:88:ee:c1:
68:cb:2f:df:bb:ce:dc:9a:64:27:3c:01:4e:fe:fa:
ff:b8:a9:5f:66:c4:c5:25:6f:e8:36:58:8f:e9:5d:
5d:08:38:58:a9:ab:e3:c9:61:f0:be:7f:2b:9b:cd:
ca:00:d4:cc:3a:73:45:b4:1a:9f:57:c5:4c:e9:f3:
ff:50:e1:09:e0:37:c9:51:1c:87:5b:4f:c8:b9:bd:
bb:7d:41:3f:e5:22:a5:35:f2:6e:c6:41:8f:4b:22:
3f:b9:a6:58:64:3e:73:18:06:95:70:f3:ab:53:ff:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2D:81:56:B6:C5:64:A9:E5:8A:F9:B4:7B:98:6B:7B:87:76:A6:5F
X509v3 Authority Key Identifier:
keyid:B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/AA1FA2DE79A911EF8999BA52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.8.0/23
Signature Algorithm: sha256WithRSAEncryption
03:9f:82:84:01:e4:a4:94:f6:8a:2a:00:79:cf:17:b0:e4:00:
13:cc:1e:46:d7:ff:ee:98:a0:41:3e:02:e9:03:76:79:89:9b:
4d:32:3f:36:b9:35:76:ed:ed:fe:ed:2b:1b:1f:84:8a:96:f5:
4c:55:2f:53:65:04:d2:e2:25:f7:73:36:da:f1:33:a1:4e:85:
51:87:06:84:62:22:c2:0c:b1:8a:c9:48:17:d4:e2:d3:a8:ff:
70:e2:b5:7c:6c:17:20:b7:ff:0e:c0:f3:97:09:4f:80:c8:24:
0b:6f:46:5f:79:f1:fc:41:d3:87:11:3e:4d:56:19:2d:0b:f7:
b1:a1:e5:71:0c:36:e3:42:6c:42:da:c8:d2:4c:e8:97:a9:cc:
ab:2a:76:25:6a:16:94:10:15:d3:6e:21:d0:98:27:7a:4e:07:
fd:8f:96:69:5e:b2:a7:ea:c5:24:32:6b:c5:7c:36:f2:cc:06:
f8:f4:e2:82:26:af:ed:19:6c:91:2e:0b:82:c3:99:0d:8d:11:
2a:8d:7c:97:ed:43:29:af:23:5c:42:e6:88:a8:31:65:b0:d9:
2c:88:bc:0c:13:ca:12:cb:a4:c6:c2:ec:fe:c9:72:68:c1:5a:
b7:2b:d7:fc:5f:1d:14:30:9b:87:13:80:0b:ff:9a:b8:94:14:
d5:36:e1:d5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICATswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODZCNjVBRjExMC8GA1UEBRMoQjhBRDkwMTFFRjNCMjg5ODdCNUNFMjMwRjFFMjc1
NTQ3MzMwMzk2QTAeFw0yNDA5MjMxMjQ1MDRaFw0yNDA5MjUxMjQ1MDRaMBgxFjAU
BgNVBAMTDTY2ZjE2MmQ0LWJhNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyDEEqDNONzrFCPNO2hBf54cyS8FH08s67nTtmuLyOR7Ozp/kEzrknBG+U
+jdXZN0K8Uvk9cyLTGlgmpHLi1QCIZosJEa6aVcd7YMAcUb7t64tjo4Eoi1Qwz0k
yLcOWNm4dlSfsx9X2vZ1o/D3PE6BC0YtCiKuDL5IWr5FcknvLJVcGsDhxvWVluCI
vk+nUDfID4juwWjLL9+7ztyaZCc8AU7++v+4qV9mxMUlb+g2WI/pXV0IOFipq+PJ
YfC+fyubzcoA1Mw6c0W0Gp9XxUzp8/9Q4QngN8lRHIdbT8i5vbt9QT/lIqU18m7G
QY9LIj+5plhkPnMYBpVw86tT//GHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUqS2B
VrbFZKnlivm0e5hre4d2pl8wHwYDVR0jBBgwFoAUuK2QEe87KJh7XOIw8eJ1VHMw
OWowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg2QjY1L0M1RjBCRUIyOUE4NDExRUVBNzAyRTczMEQyNUJFNDY1L3VLMlFF
ZTg3S0poN1hPSXc4ZUoxVkhNd09Xby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3VLMlFFZTg3S0poN1hPSXc4ZUoxVkhNd09Xby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjg2QjY1L0M1RjBCRUIyOUE4NDExRUVBNzAyRTczMEQy
NUJFNDY1L0FBMUZBMkRFNzlBOTExRUY4OTk5QkE1Mjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFm2AgwDQYJKoZIhvcNAQEL
BQADggEBAAOfgoQB5KSU9ooqAHnPF7DkABPMHkbX/+6YoEE+AukDdnmJm00yPza5
NXbt7f7tKxsfhIqW9UxVL1NlBNLiJfdzNtrxM6FOhVGHBoRiIsIMsYrJSBfU4tOo
/3DitXxsFyC3/w7A85cJT4DIJAtvRl958fxB04cRPk1WGS0L97Gh5XEMNuNCbELa
yNJM6JepzKsqdiVqFpQQFdNuIdCYJ3pOB/2PlmlesqfqxSQya8V8NvLMBvj04oIm
r+0ZbJEuC4LDmQ2NESqNfJftQymvI1xC5oioMWWw2SyIvAwTyhLLpMbC7P7JcmjB
Wrcr1/xfHRQwm4cTgAv/mriUFNU24dU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:47 2025 by rpki-client