Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/6F61D56CD3F011EF874D80BD762E951A.roa
File: 6F61D56CD3F011EF874D80BD762E951A.roa (raw, json)
Hash identifier: aQ5eotveqGJrhssXyUfqPg5E0r4EtEOvK2qBBQ8Oc9Q=
Subject key identifier: 59:F7:F3:1C:55:EF:B1:C0:AA:65:FB:5D:50:6B:DC:78:52:74:3E:85
Certificate issuer: /CN=F369E4C8AF/serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Certificate serial: 0329
Authority key identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/6F61D56CD3F011EF874D80BD762E951A.roa
Signing time: Thu 16 Jan 2025 09:58:29 +0000
ROA not before: Thu 16 Jan 2025 09:58:25 +0000
ROA not after: Mon 31 Dec 2040 09:58:25 +0000
asID: 329174
IP address blocks: 102.206.204.0/22 maxlen: 24
102.213.241.0/24 maxlen: 24
2c0f:2d80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 809 (0x329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E4C8AF
Validity
Not Before: Jan 16 09:58:25 2025 GMT
Not After : Dec 31 09:58:25 2040 GMT
Subject: CN=6788d844-a884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1d:2d:b4:0d:7d:44:6d:a6:60:6f:f2:95:2e:
2a:3c:9e:e6:fb:e8:39:b8:36:e1:a7:2a:40:56:02:
02:c0:0a:43:d5:41:72:03:fe:e9:ca:ee:47:e3:8c:
7a:59:af:5e:14:99:92:db:aa:3b:8d:11:8e:d5:06:
b8:18:47:19:c6:b7:a1:03:61:f1:48:cb:c2:b4:03:
ee:39:3b:d0:26:69:50:0c:07:74:d8:6f:54:58:b9:
c6:0d:e2:5a:dc:36:fe:18:d6:5e:26:d0:24:ae:df:
25:65:27:50:9f:80:2e:18:91:92:49:2b:7a:8a:ee:
ba:e3:9f:6e:bf:5f:42:25:33:83:00:fd:92:2b:14:
d7:21:88:5c:18:c9:5b:5b:34:1b:7c:91:ff:23:99:
e0:c6:b8:c3:bb:bc:17:09:1f:e6:62:37:7b:16:31:
41:55:2f:41:77:71:90:18:e9:9f:b4:7a:67:ea:12:
05:d8:aa:2c:cd:3a:0b:13:4b:2e:5a:b3:ea:a8:7e:
6a:e2:d8:50:39:ae:d8:a6:5f:91:b0:94:5e:6c:29:
ea:f9:46:80:e9:67:8c:e5:32:7e:ed:05:ca:32:51:
6c:27:a4:23:e9:c5:0e:ed:14:33:20:97:43:94:c6:
fc:a1:3c:9a:4c:f4:0a:28:86:15:a5:37:08:d4:0a:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F7:F3:1C:55:EF:B1:C0:AA:65:FB:5D:50:6B:DC:78:52:74:3E:85
X509v3 Authority Key Identifier:
keyid:C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/6F61D56CD3F011EF874D80BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.204.0/22
102.213.241.0/24
IPv6:
2c0f:2d80::/32
Signature Algorithm: sha256WithRSAEncryption
8b:07:b4:2f:14:d6:c4:09:a7:84:7e:c7:1a:62:97:b3:10:45:
bc:ba:cb:d1:77:b1:94:c7:15:00:a9:18:a0:36:40:35:37:69:
29:55:d7:9d:05:09:83:7c:96:79:13:c7:66:97:a9:7a:b2:a3:
40:83:b0:59:09:b2:67:f5:74:32:b7:2f:d5:c1:04:8c:8e:e1:
14:f3:2d:ef:fb:6f:9b:be:b7:c0:de:48:62:c0:ea:f1:a3:09:
d9:40:d6:5b:1f:b1:89:8d:ec:12:02:f0:0c:f2:75:ec:f2:23:
63:1e:96:0a:df:0a:ef:05:30:ce:43:5e:74:c8:ab:4c:e3:02:
99:21:a0:6d:ea:a3:ce:62:0e:c3:20:22:b5:91:fb:76:f7:3d:
11:08:d4:db:63:49:eb:6d:66:92:b9:62:ba:17:5b:e4:ec:9a:
ed:c4:05:22:ca:8c:f7:a1:4d:d8:60:7e:8c:c0:e9:e0:48:4a:
9b:be:ba:b6:16:33:10:10:7e:42:ec:08:ba:0f:ea:24:25:32:
71:6b:d5:ca:91:18:18:e2:95:58:fc:1c:d8:a5:bb:13:c8:2d:
37:8c:f4:87:2d:d5:1b:a9:bb:28:8f:da:42:c5:4a:47:94:f8:
bb:5d:a3:a8:62:9c:99:fe:1c:e8:79:66:ce:1b:bd:14:ea:25:
91:36:b7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:02 2025 by rpki-client