Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/0F329508984711EF85483C4D762E951A.roa
File: 0F329508984711EF85483C4D762E951A.roa (raw, json)
Hash identifier: a0BidHbztDQTPkWjYpuerywnpAYxfdwn5c2aRLRiLtE=
Subject key identifier: 2C:7D:F8:E8:59:38:87:17:6F:46:1F:61:C6:6E:BC:0C:13:98:8D:16
Certificate issuer: /CN=F3694A3EAF/serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Certificate serial: 02
Authority key identifier: 0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/0F329508984711EF85483C4D762E951A.roa
Signing time: Fri 01 Nov 2024 11:47:24 +0000
ROA not before: Fri 01 Nov 2024 11:47:17 +0000
ROA not after: Sun 01 Nov 2026 11:47:17 +0000
asID: 329067
IP address blocks: 102.215.104.0/22 maxlen: 22
2c0f:dc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3694A3EAF
Validity
Not Before: Nov 1 11:47:17 2024 GMT
Not After : Nov 1 11:47:17 2026 GMT
Subject: CN=6724bfcc-14c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:9b:20:4c:4a:48:6e:36:0a:70:fc:df:05:
48:25:1b:c2:68:d3:c7:c4:44:2b:3b:90:6a:e0:0a:
2c:9b:b0:40:0b:d3:bb:a2:72:f9:9c:d6:38:1d:72:
d7:52:5b:46:51:4e:50:01:5e:a0:35:8e:97:cc:85:
3b:10:e5:31:8a:1f:ae:05:64:f0:6e:88:b7:65:ba:
fd:66:6e:9c:a4:d3:16:c9:16:7f:97:9e:f5:26:30:
98:9b:6b:1e:29:6c:13:aa:16:19:d4:9f:84:e3:83:
63:09:7e:32:e4:44:51:70:6a:67:db:fd:d1:0c:e0:
67:8c:92:ac:8c:11:96:c3:52:ed:5f:bc:ec:32:80:
99:4d:a9:d4:04:76:f3:fc:46:74:50:85:7a:ae:29:
08:1b:3a:6a:0c:cd:6a:2b:cb:ec:c4:92:60:d2:e6:
35:fe:00:84:a7:0c:ab:d5:29:66:e1:cd:a9:43:b2:
8a:98:a7:e4:81:ef:3b:d5:1e:dd:3b:26:7b:d6:a0:
d8:99:eb:46:a1:a6:a8:b5:46:c9:ef:1d:64:57:be:
d4:11:39:dd:70:b6:b3:cc:a1:6f:a8:21:6c:03:5c:
2e:88:6d:df:d1:66:ab:fa:a5:58:2a:3b:47:d2:bd:
93:56:37:1b:65:2e:c4:42:10:b6:59:5a:4c:56:60:
d0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7D:F8:E8:59:38:87:17:6F:46:1F:61:C6:6E:BC:0C:13:98:8D:16
X509v3 Authority Key Identifier:
keyid:0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/0F329508984711EF85483C4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.104.0/22
IPv6:
2c0f:dc0::/32
Signature Algorithm: sha256WithRSAEncryption
0e:ee:df:f0:7f:2a:67:ba:e0:5a:bb:9e:8d:99:72:8e:2d:22:
81:e7:ff:a7:eb:e7:92:74:65:0c:6e:37:77:7d:1f:84:05:2b:
96:5a:6a:b4:c7:0b:d1:c8:33:32:2e:4e:5f:f2:57:10:f1:fb:
d5:70:3a:f4:2e:1f:6a:87:4b:bd:90:50:36:bd:ee:c7:2a:2b:
67:a9:d2:c7:d6:c8:c2:81:74:33:99:56:11:c7:d7:da:19:e5:
67:3a:7a:5d:ef:c6:e3:6e:2e:96:3c:5a:70:09:36:39:6e:11:
b0:31:3d:ee:db:ef:47:87:ec:ff:30:18:33:9e:c9:ac:35:45:
d2:c1:4e:01:1e:eb:2a:93:fd:76:d2:20:4d:f7:b9:17:90:fc:
86:f2:fd:ab:63:a7:76:71:5c:84:91:dc:1c:21:04:dc:78:a2:
81:c8:4c:47:c0:3f:b5:d5:13:56:1f:53:e3:e6:a8:a8:e1:89:
e1:d9:ba:4d:1a:a3:a8:05:0c:df:f7:72:c8:cb:d9:16:9b:3d:
73:22:7f:16:46:77:4e:ab:c7:18:82:da:d3:b4:49:d9:e4:77:
d7:dd:c2:68:e3:0d:92:a8:42:fc:f7:57:61:fa:e3:89:94:ee:
3b:1e:7d:6a:a4:06:dc:cb:f7:36:1a:19:08:c8:ff:b8:e5:2e:
01:cd:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:43 2025 by rpki-client