Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/7D242F2063AB11EFA5073EA9762E951A.roa
File: 7D242F2063AB11EFA5073EA9762E951A.roa (raw, json)
Hash identifier: j6s7+D+sOoor2rnPY/jLlNXmijWZQCCdk4aJ0Yczhkw=
Subject key identifier: A2:EB:3E:65:35:3B:5C:B2:4F:14:21:E1:5D:1E:A6:FB:C4:4A:F5:D1
Certificate issuer: /CN=F368788DAF/serialNumber=37BF37CB655AF6C78EBA88082A9BEDD1BE4049C4
Certificate serial: 0336
Authority key identifier: 37:BF:37:CB:65:5A:F6:C7:8E:BA:88:08:2A:9B:ED:D1:BE:40:49:C4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/N783y2Va9seOuogIKpvt0b5AScQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/7D242F2063AB11EFA5073EA9762E951A.roa
Signing time: Mon 26 Aug 2024 13:02:46 +0000
ROA not before: Mon 26 Aug 2024 13:02:43 +0000
ROA not after: Fri 27 Aug 2027 13:02:43 +0000
asID: 328567
IP address blocks: 102.36.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 822 (0x336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368788DAF
Validity
Not Before: Aug 26 13:02:43 2024 GMT
Not After : Aug 27 13:02:43 2027 GMT
Subject: CN=66cc7cf6-3c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6d:d3:94:94:4f:83:43:a3:70:4c:16:65:31:
1d:3c:b0:35:3d:74:b8:98:b6:2b:cf:56:4a:e6:83:
22:e5:50:0b:9c:db:7a:b8:a0:44:7c:79:5a:78:e8:
3a:a2:b9:a6:cf:d9:64:f0:87:fa:a3:52:1b:82:96:
7c:2c:26:64:ac:f9:6d:c9:75:72:f6:ba:40:0e:b2:
3a:6a:57:c3:b9:24:30:a4:9d:6b:39:7a:96:cf:fc:
b9:81:a1:eb:8a:d9:c0:69:80:65:d8:ad:26:60:bd:
ec:63:1d:fc:0c:7a:ad:59:62:0b:74:0e:ab:c2:07:
87:94:ff:f0:51:eb:12:f9:bd:d6:7b:fa:41:49:f1:
32:8e:0e:14:b5:73:f3:46:a3:cb:f0:56:b2:4b:c8:
ad:3f:b7:03:77:8a:cd:84:dd:df:cd:71:17:3f:54:
ef:9c:0f:d3:0b:6c:64:6a:c9:e1:ba:3a:68:ff:4b:
c2:e6:59:e7:50:6a:8a:9a:82:1e:4b:c7:73:9f:21:
2f:39:d8:f6:ab:22:40:ff:18:8b:7e:21:54:b2:41:
40:77:6a:2c:6f:89:67:89:15:77:1f:e7:89:a7:f1:
b3:40:4f:14:b7:32:e6:81:c6:8f:fd:83:a7:b6:a6:
82:bb:f5:3d:1a:68:fc:e9:dd:69:05:b8:cd:0a:17:
7a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EB:3E:65:35:3B:5C:B2:4F:14:21:E1:5D:1E:A6:FB:C4:4A:F5:D1
X509v3 Authority Key Identifier:
keyid:37:BF:37:CB:65:5A:F6:C7:8E:BA:88:08:2A:9B:ED:D1:BE:40:49:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/N783y2Va9seOuogIKpvt0b5AScQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/7D242F2063AB11EFA5073EA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.240.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:c2:dd:66:1c:40:e1:45:9e:54:11:cf:28:06:eb:ce:c6:76:
c8:d0:09:19:b7:94:d0:56:2a:a5:ad:7f:cb:cd:78:1b:8b:d9:
f9:4b:8d:00:15:2e:e3:bf:0c:38:43:c1:c9:ee:91:2d:0c:f7:
13:97:a6:14:5b:a5:08:24:7f:34:d3:33:d9:88:e2:16:51:92:
4c:a1:48:35:92:82:13:48:4d:0b:26:f2:f4:a2:e3:6e:9c:21:
c9:67:d9:c4:de:8c:b5:16:34:aa:27:f8:8e:72:0f:2f:b8:4c:
b1:45:82:4d:61:b0:20:76:29:17:7c:0b:20:67:b4:24:ea:0c:
29:95:85:1e:8d:d1:0c:e5:d8:b4:c6:a9:71:e0:da:da:69:3c:
dc:c5:cf:26:4f:ae:3f:da:75:8b:02:f5:77:1d:7e:11:db:d8:
6d:bb:7f:c1:46:3b:e0:04:3c:70:70:8f:a8:95:92:03:fa:de:
12:6b:a5:b1:3b:c9:21:3e:ae:f5:4e:ae:79:f9:96:75:f2:a8:
f7:bb:fe:34:97:d2:78:95:55:75:ee:3f:ca:a2:e3:e0:f9:5e:
5a:08:28:ac:90:b1:ba:79:10:b7:04:4c:e6:d0:1f:47:bb:b3:
24:37:7c:da:48:46:57:1f:c0:b6:db:a2:64:63:4e:d0:72:30:
82:d1:e1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:53 2025 by rpki-client