Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/054F4B7C63BC11EFA8EF188F762E951A.roa
File: 054F4B7C63BC11EFA8EF188F762E951A.roa (raw, json)
Hash identifier: sLm+VxrF0gqIYYWrMeaPyCiKXVb8QRFJvY1rOOeuSj4=
Subject key identifier: 5D:25:3E:0A:31:A8:7A:4F:4A:51:D0:9C:2F:59:4B:5A:E8:A7:2D:A7
Certificate issuer: /CN=F368788DAF/serialNumber=37BF37CB655AF6C78EBA88082A9BEDD1BE4049C4
Certificate serial: 033D
Authority key identifier: 37:BF:37:CB:65:5A:F6:C7:8E:BA:88:08:2A:9B:ED:D1:BE:40:49:C4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/N783y2Va9seOuogIKpvt0b5AScQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/054F4B7C63BC11EFA8EF188F762E951A.roa
Signing time: Mon 26 Aug 2024 15:01:07 +0000
ROA not before: Mon 26 Aug 2024 15:01:03 +0000
ROA not after: Fri 27 Aug 2027 15:01:03 +0000
asID: 328567
IP address blocks: 102.36.240.0/24 maxlen: 24
102.36.241.0/24 maxlen: 24
102.36.242.0/24 maxlen: 24
102.36.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 829 (0x33d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368788DAF
Validity
Not Before: Aug 26 15:01:03 2024 GMT
Not After : Aug 27 15:01:03 2027 GMT
Subject: CN=66cc98b2-88af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:97:ae:8e:5e:2c:d2:42:8f:b6:4a:33:5b:a2:
8b:69:38:6b:94:5f:ce:9a:bb:9c:ab:46:b5:d7:57:
c7:3a:ed:51:7a:2b:29:cb:4c:35:29:ed:cd:60:11:
f1:3d:68:de:85:05:5f:b8:68:3b:7d:a9:eb:0a:9c:
39:d7:1e:b7:cb:d6:3b:6e:71:5c:85:38:58:ab:4a:
3c:a3:90:a6:0e:31:8f:15:43:a3:78:b8:f8:97:84:
6f:64:62:bf:81:7b:f8:95:91:41:14:f7:08:22:b3:
ec:4a:8a:77:a3:ca:bf:91:04:b4:d3:1f:a2:4f:da:
93:46:6e:32:5b:b4:55:2d:03:97:21:93:f3:13:20:
9e:8c:a9:58:04:ed:14:0c:b3:b3:e2:96:82:e1:03:
24:df:46:f6:65:89:9a:d0:6d:cb:f7:cd:8e:cc:39:
6b:67:73:3a:93:f9:9c:81:e0:7b:55:9c:2e:cf:b4:
89:b8:10:89:b8:bc:6f:66:b0:43:e0:4c:5e:c4:1e:
ee:1b:0d:da:f8:a9:34:c1:ad:e1:77:3a:b7:88:b9:
06:38:89:27:d2:54:c4:1b:9f:50:1d:06:1b:1b:4a:
6a:9f:fe:77:ee:a7:b8:58:36:ef:f3:9c:03:bd:58:
fe:86:98:80:ae:53:06:ab:2d:62:f5:b9:6f:ac:94:
5f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:25:3E:0A:31:A8:7A:4F:4A:51:D0:9C:2F:59:4B:5A:E8:A7:2D:A7
X509v3 Authority Key Identifier:
keyid:37:BF:37:CB:65:5A:F6:C7:8E:BA:88:08:2A:9B:ED:D1:BE:40:49:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/N783y2Va9seOuogIKpvt0b5AScQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/054F4B7C63BC11EFA8EF188F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.240.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:da:32:53:54:4a:05:84:67:d1:b2:cb:f8:38:6b:b2:72:d2:
23:dd:ff:66:6c:95:56:39:8f:be:cb:aa:67:d7:f8:a7:b2:28:
cb:b2:fe:8c:c0:0e:e0:d3:b6:9c:99:00:85:ee:ad:da:b9:53:
3a:46:cf:8c:9e:b8:38:b2:20:d7:5b:39:9c:f8:55:cd:59:4b:
97:bc:5c:13:6c:9e:d2:3c:d8:5d:56:39:26:73:90:d3:fb:ec:
f7:06:0d:ae:5e:71:cb:34:11:60:c1:69:40:32:5b:02:d1:81:
07:b9:c6:ca:da:e0:dc:5c:9a:64:06:2b:9e:3b:4c:de:1c:4d:
fc:a3:eb:4c:08:18:ce:74:f9:ff:be:57:7d:ae:a6:22:91:0c:
9b:03:21:59:db:6c:85:56:25:64:49:41:97:34:57:31:d1:8e:
a0:ee:32:b7:90:f7:3e:4f:ee:0d:1c:34:f2:77:a2:1b:38:ff:
67:d2:1a:4b:da:65:0f:3c:b1:fb:03:5d:39:46:80:d8:a4:2a:
bf:a6:6e:17:3d:87:9d:a9:cd:77:1e:0e:2d:40:a4:0b:db:b4:
be:6e:15:db:81:99:7c:3e:9c:99:24:81:4a:c1:4d:90:15:df:
66:a0:08:bb:b9:b5:c2:6b:98:99:16:b4:91:87:15:04:75:b6:
fd:5b:50:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:31:45 2025 by rpki-client