Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/147022E0FF7811EF8AD31A7F762E951A.roa
File: 147022E0FF7811EF8AD31A7F762E951A.roa (raw, json)
Hash identifier: qYTfJITsVD5T5eimpEou1GQGKMzGQHZktsprbHqNuAg=
Subject key identifier: B4:D0:A4:DA:66:CD:E3:DB:24:BC:AA:14:21:CE:8A:0F:B0:75:11:4A
Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial: 0589
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/147022E0FF7811EF8AD31A7F762E951A.roa
Signing time: Wed 12 Mar 2025 19:27:47 +0000
ROA not before: Wed 12 Mar 2025 19:27:43 +0000
ROA not after: Sat 31 Mar 2035 19:27:43 +0000
asID: 328840
IP address blocks: 102.208.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1417 (0x589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36960E7AF
Validity
Not Before: Mar 12 19:27:43 2025 GMT
Not After : Mar 31 19:27:43 2035 GMT
Subject: CN=67d1e033-e83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:24:a8:25:3e:be:7c:d7:83:a2:e7:35:d9:
c3:2d:4a:64:37:a8:ee:a3:bf:ca:d3:ae:34:3f:e2:
cd:6b:68:00:31:5a:9a:80:61:30:b2:ee:c4:bc:af:
da:15:98:69:68:71:5a:3d:32:cc:bc:93:81:ea:41:
a3:0c:6d:28:10:f6:de:bf:06:1b:a9:46:62:0c:b5:
74:8b:7b:58:38:ce:80:55:15:bb:a1:79:a2:8f:78:
83:e4:75:ff:b3:45:70:74:14:26:14:1e:26:96:d1:
84:ab:b7:9f:29:a8:4f:fa:7e:9e:e9:72:fc:24:51:
5c:2e:29:d1:07:e5:6a:84:80:9e:27:55:ed:89:97:
19:69:48:11:01:69:7d:f0:89:cc:ca:4a:c1:d2:7a:
9d:6c:60:73:de:dd:40:99:fe:da:e5:7f:cb:f6:49:
2e:ed:72:63:b0:2d:49:fe:e6:cf:66:ff:9b:f3:b0:
c2:44:f9:96:1c:6b:c7:54:53:90:33:54:cd:17:f1:
4b:26:28:66:c1:b7:d0:3b:f6:32:40:61:f8:0b:b9:
37:f4:8f:69:b5:c4:ee:52:3e:dd:7f:08:07:79:74:
1b:cf:d7:e6:4e:be:c4:f6:72:92:a8:3f:60:ac:3a:
48:da:c8:37:6f:2d:e2:8f:f5:38:bf:d3:0f:da:50:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D0:A4:DA:66:CD:E3:DB:24:BC:AA:14:21:CE:8A:0F:B0:75:11:4A
X509v3 Authority Key Identifier:
keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/147022E0FF7811EF8AD31A7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.106.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:8d:cb:26:c4:fd:44:5b:82:ea:f3:6c:7c:83:52:9a:bc:ff:
88:99:a3:ee:bd:69:e3:35:7c:c7:e7:c4:38:7f:3b:a8:b6:c9:
fb:e9:f5:a8:cf:4a:5d:98:cf:1d:c3:2e:e6:32:92:29:05:ee:
bd:c1:23:29:47:5f:7e:c7:1b:51:2a:ad:1d:9a:95:78:b7:21:
18:78:b2:08:b6:22:b6:c2:a0:77:97:71:34:17:1c:c1:57:bf:
b4:f5:14:d4:65:3e:35:aa:d8:36:23:56:07:6b:7a:92:4c:2d:
ec:9f:33:06:e8:79:fa:1c:4e:68:07:16:4b:fa:48:ae:58:91:
d9:8f:75:90:15:8d:ae:73:fe:04:52:f0:a4:ff:69:c4:f0:4a:
90:27:55:28:8c:46:87:44:62:b1:d0:19:36:bf:d4:7b:8f:c3:
30:7d:72:c3:5f:75:e0:f5:aa:03:97:50:8d:dc:fc:24:a2:d0:
21:1c:0c:df:ee:55:03:a9:48:3b:8a:b2:9f:4d:97:7d:e9:4f:
5a:97:5f:d9:89:d6:31:99:1f:e1:bc:b0:9c:f9:1d:f4:70:85:
65:5f:e7:8f:19:51:57:de:2c:05:3d:01:80:75:6c:36:b7:84:
36:a2:8e:e4:f5:f3:96:f1:57:0b:21:d8:72:c7:82:81:fe:19:
66:4f:a7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:05 2025 by rpki-client