Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/C4B25498D5CF11EF8B385380762E951A.roa
File: C4B25498D5CF11EF8B385380762E951A.roa (raw, json)
Hash identifier: c0lIUY0MI/RJ9MopAqogt6LcUcP2aw6oEoJwJbuApDA=
Subject key identifier: A2:CB:E1:2C:47:38:A2:67:71:3C:DC:CE:FC:99:26:5A:5D:3A:33:22
Certificate issuer: /CN=F36877BBAF/serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Certificate serial: 013C
Authority key identifier: 0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/C4B25498D5CF11EF8B385380762E951A.roa
Signing time: Sat 18 Jan 2025 19:09:41 +0000
ROA not before: Sat 18 Jan 2025 19:09:37 +0000
ROA not after: Tue 18 Jan 2028 19:09:37 +0000
asID: 328721
IP address blocks: 102.222.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36877BBAF
Validity
Not Before: Jan 18 19:09:37 2025 GMT
Not After : Jan 18 19:09:37 2028 GMT
Subject: CN=678bfc75-f1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:44:fb:2d:41:65:8d:18:a6:cb:47:70:bc:93:
fe:93:bf:0e:24:70:5c:e7:fb:c5:2d:26:d5:57:35:
aa:51:18:08:b0:89:0a:5e:59:5e:6b:05:62:a6:5e:
13:cf:ad:24:1c:20:c9:70:a6:a4:19:67:f2:34:4e:
b1:db:b8:3d:ab:f6:33:7a:18:c5:8b:f6:f4:83:c8:
ea:ef:8f:05:9a:c2:1e:f5:73:56:6a:4c:dc:81:75:
7e:42:c0:47:81:f7:b9:56:57:00:e7:62:f1:96:f8:
f0:92:65:d3:da:6c:d3:7e:42:bb:2e:1b:c8:bc:2f:
4e:88:2c:9d:b9:2b:85:5c:3f:0e:20:2c:5e:f0:a6:
bb:84:3d:1d:cc:25:5f:b6:8d:ca:2d:0b:e1:d6:b4:
73:d6:41:8a:40:47:82:c3:02:d2:a7:6e:ad:6b:69:
7a:75:63:7c:2b:33:75:40:d3:fb:4a:3e:c0:b9:2c:
5d:7d:3d:28:c1:11:1f:96:4a:b0:d5:f3:ad:66:da:
d2:69:f7:4d:5b:9c:75:2e:54:a7:ff:05:bf:8b:ba:
9c:19:ff:e1:7d:f4:ec:2d:c9:58:a9:ac:e8:13:24:
11:cc:b9:e8:8b:38:90:c7:96:93:b8:08:40:da:e5:
80:05:56:72:06:47:35:c5:01:79:fc:45:e0:20:f7:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CB:E1:2C:47:38:A2:67:71:3C:DC:CE:FC:99:26:5A:5D:3A:33:22
X509v3 Authority Key Identifier:
keyid:0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/C4B25498D5CF11EF8B385380762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.56.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:ed:8f:83:98:9e:30:24:6a:63:a8:15:2e:49:39:1f:52:62:
01:c8:4c:74:06:e4:8e:49:17:f6:05:a5:e8:63:be:e7:2e:8a:
b7:47:c3:2e:6a:18:4b:71:be:2e:4e:ce:ca:d4:97:a4:cf:1b:
de:d9:b8:39:f7:4e:ac:90:89:f2:6e:4a:65:54:3a:ac:ae:a2:
6b:a3:ec:ac:b9:a2:e7:20:51:84:fe:48:5c:56:99:4d:c0:6d:
ea:fe:bf:c1:db:7c:4d:ad:d7:25:53:c9:13:29:98:3a:ed:cc:
67:44:3c:94:f8:b9:a1:f8:d7:33:ec:12:6d:31:3e:63:25:f8:
f6:1e:39:a2:24:4d:38:df:e6:7b:63:af:56:58:71:ad:52:80:
ed:4f:f0:c5:78:0a:57:dc:16:65:2d:72:81:b0:b5:70:2b:6d:
9c:70:63:b9:89:f8:a5:d4:0f:30:cf:58:77:01:ac:90:e3:93:
dd:ed:36:58:8b:bf:45:df:9b:09:93:d3:f4:d3:bf:6e:c8:8a:
99:12:dc:3f:3b:2c:76:f1:88:48:69:2a:e2:18:79:49:1a:b7:
4a:63:c6:78:f1:2c:29:3c:2f:b6:e0:6e:53:5f:ca:72:f1:ca:
c9:54:ed:a1:3a:5b:bd:2c:96:6f:33:45:32:f8:8b:af:ce:2e:
bb:f3:e9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:06 2025 by rpki-client