Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/7A18E53AE3A511EFB1E8E756762E951A.roa
File: 7A18E53AE3A511EFB1E8E756762E951A.roa (raw, json)
Hash identifier: 2LPC2UkkLzMGcbYCbFGtnfKTTqIGsxGXV0s+CLhea/M=
Subject key identifier: 97:A0:86:C4:59:54:B1:13:E3:27:8F:B4:37:37:53:D7:0D:C6:D6:B0
Certificate issuer: /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial: D6
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/7A18E53AE3A511EFB1E8E756762E951A.roa
Signing time: Wed 05 Feb 2025 09:42:13 +0000
ROA not before: Wed 05 Feb 2025 09:42:09 +0000
ROA not after: Thu 07 Feb 2030 09:42:09 +0000
asID: 329130
IP address blocks: 102.214.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697E68AF
Validity
Not Before: Feb 5 09:42:09 2025 GMT
Not After : Feb 7 09:42:09 2030 GMT
Subject: CN=67a33275-82d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:ed:0e:4f:ee:dc:6d:6d:83:88:0f:b0:0e:
4c:14:a6:2f:e9:81:47:5d:43:c4:1e:5c:8d:09:68:
17:25:6e:c3:d4:3e:d9:f4:0d:8e:d5:8c:7b:37:33:
78:e8:ac:67:6f:f0:80:7c:7a:ef:6d:75:d0:5d:0b:
5b:a9:ad:ba:47:c2:95:9f:4c:6b:68:e4:c3:16:8f:
51:c3:92:71:57:c2:d0:19:42:a4:fa:93:47:b3:fe:
2f:79:08:55:78:01:c7:4a:c1:56:75:eb:77:c3:31:
d6:45:9b:9c:07:21:db:da:5a:6a:97:ca:ac:fc:a1:
4a:2f:77:99:95:31:e2:03:96:41:88:cb:1f:73:ea:
d4:4c:44:8f:c3:6e:02:97:80:08:92:e7:b3:76:7c:
4f:40:52:b1:f4:93:15:00:bc:67:e0:34:09:d8:7e:
83:d5:e3:70:93:32:94:55:1e:71:69:5f:70:c8:7b:
d9:08:9b:51:00:83:88:ae:d1:bf:d7:78:5f:cc:6f:
2f:93:5f:f6:32:37:c8:32:8c:e5:6e:01:52:6c:1f:
28:88:b2:4e:68:fe:c1:3d:80:2a:7b:97:14:bc:04:
1e:a1:41:8c:0a:66:5b:50:95:80:1e:7c:95:5b:4f:
5a:75:ff:75:d2:db:75:fb:de:bf:60:13:ca:ef:84:
b7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A0:86:C4:59:54:B1:13:E3:27:8F:B4:37:37:53:D7:0D:C6:D6:B0
X509v3 Authority Key Identifier:
keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/7A18E53AE3A511EFB1E8E756762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ba:9e:d6:8c:d5:07:ff:25:16:40:9f:9b:68:55:86:b6:85:
ec:13:e3:f5:6a:7d:2c:d5:29:29:36:e2:eb:63:82:33:3a:30:
33:2b:f4:25:4a:9d:d0:67:48:48:25:05:1f:07:50:57:53:31:
4c:fd:c1:b1:bb:67:80:69:d0:5b:75:cd:de:27:6c:f8:96:b6:
b9:ec:97:36:da:f2:d0:36:00:ee:3e:6e:da:3a:45:f4:98:5d:
8e:72:04:53:04:31:0f:47:ee:b8:6b:7a:a4:cb:55:80:26:7f:
a9:f7:c0:8f:2a:d5:da:53:aa:e2:9c:8f:5c:b8:56:63:f3:a5:
46:96:8e:29:67:31:29:bb:98:e9:95:41:cf:43:61:86:7f:57:
2c:47:ee:bb:9f:03:10:18:a1:0b:dc:3b:73:bf:e0:00:23:a0:
35:48:bf:5d:06:5c:79:16:5a:e6:14:9f:1e:e3:1b:31:6d:ac:
dc:24:bc:1d:a1:b3:85:6a:02:8b:3e:65:09:c4:14:0f:e7:f4:
d7:c9:0d:9a:af:ae:f9:80:1a:d0:eb:3c:9e:eb:89:52:89:e6:
63:7c:7b:4c:42:2d:35:7d:b6:bc:ce:d9:27:89:ad:17:3e:0f:
f8:24:fa:5d:b7:7b:e7:d2:11:21:29:76:41:fd:3a:dd:d0:62:
07:11:92:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:50 2025 by rpki-client