Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/111BD7DCE3AE11EF8894E28F762E951A.roa
File: 111BD7DCE3AE11EF8894E28F762E951A.roa (raw, json)
Hash identifier: djJy//nqF4vHyJ4+PresBjZlxrALQCLSVGMcIglIjq0=
Subject key identifier: 1F:7F:37:E8:04:31:47:75:ED:74:7F:79:44:A6:DC:C1:F9:0E:B8:34
Certificate issuer: /CN=F369F697AF/serialNumber=01237ACFF964532C9C5315875A14582EAAAAB664
Certificate serial: 02
Authority key identifier: 01:23:7A:CF:F9:64:53:2C:9C:53:15:87:5A:14:58:2E:AA:AA:B6:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ASN6z_lkUyycUxWHWhRYLqqqtmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/111BD7DCE3AE11EF8894E28F762E951A.roa
Signing time: Wed 05 Feb 2025 10:43:42 +0000
ROA not before: Wed 05 Feb 2025 10:43:38 +0000
ROA not after: Tue 30 Jun 2026 10:43:38 +0000
asID: 329249
IP address blocks: 102.212.20.0/24 maxlen: 24
2c0f:48c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369F697AF
Validity
Not Before: Feb 5 10:43:38 2025 GMT
Not After : Jun 30 10:43:38 2026 GMT
Subject: CN=67a340de-f948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:34:17:5b:ec:50:bc:ba:d0:14:87:3b:42:
22:09:ea:42:f1:eb:af:3d:99:21:29:b9:63:d1:6f:
7d:9c:dc:28:9b:d3:92:a8:6a:fd:db:b6:79:e6:05:
9b:ef:4c:1d:04:72:2b:ab:01:ad:b3:b8:12:62:df:
f0:7c:47:1a:da:5d:09:8b:6c:54:8d:f0:17:03:b6:
f7:e2:f8:3a:33:59:e9:69:b9:07:81:39:d1:33:5a:
1e:e7:7c:17:3d:8b:c9:86:bc:a3:f1:6b:a2:76:1b:
36:d4:35:68:fa:6d:c3:1a:ec:a1:40:6f:f0:28:b2:
45:61:82:95:1e:73:56:f5:43:fe:f3:61:76:af:51:
dd:ca:e1:50:0d:fc:f5:99:0e:40:74:b6:77:bf:58:
2c:ac:4e:1c:d9:2f:56:c8:63:67:b2:c0:06:ea:e8:
01:37:3a:d5:e3:d4:c6:ef:77:b2:62:66:c2:66:41:
4f:9a:b9:52:35:f3:01:3a:c3:4a:08:e1:25:d9:12:
5c:c2:06:4e:26:09:a3:b8:ca:82:fc:49:86:f1:44:
46:7d:4a:80:cc:77:0b:7f:ca:98:cb:cf:d4:c1:ae:
63:44:7f:75:3f:2e:0e:2d:1c:cc:2e:c0:95:52:9b:
85:5b:67:7a:57:aa:4e:1f:9a:89:67:b0:bc:9d:e1:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7F:37:E8:04:31:47:75:ED:74:7F:79:44:A6:DC:C1:F9:0E:B8:34
X509v3 Authority Key Identifier:
keyid:01:23:7A:CF:F9:64:53:2C:9C:53:15:87:5A:14:58:2E:AA:AA:B6:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/ASN6z_lkUyycUxWHWhRYLqqqtmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ASN6z_lkUyycUxWHWhRYLqqqtmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/111BD7DCE3AE11EF8894E28F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.20.0/24
IPv6:
2c0f:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
07:03:52:78:ad:d1:44:88:90:20:5a:e1:eb:dc:d7:ec:ae:64:
3e:33:95:07:4b:8a:4a:40:d7:58:d6:f5:68:24:32:8d:ef:13:
50:c1:f3:e0:a5:53:6d:ec:c9:09:e8:55:87:5b:59:52:60:2a:
da:8c:d7:7a:b2:39:df:8c:44:51:04:75:c1:2a:14:f1:c3:5c:
a9:bc:52:96:51:d3:e7:97:40:b6:93:8c:89:84:d4:97:ff:84:
c9:8d:38:2e:42:35:31:7d:8f:78:c0:9f:cf:13:f4:ce:dc:c2:
aa:c5:b4:b9:03:d5:62:b8:fe:64:fd:ae:39:f4:3c:07:52:6d:
8d:54:06:1b:74:23:6c:7d:a5:a6:40:76:b5:c9:71:09:3a:a5:
e8:5e:a8:90:f4:23:04:cd:08:1c:27:a1:6d:f8:c1:22:3d:f0:
22:d8:c9:72:2b:90:e3:c0:15:da:b3:87:12:2e:0a:5c:fd:d2:
04:2e:31:70:4e:f8:18:df:61:ef:77:25:38:8e:6a:90:e7:c2:
f0:e4:64:1b:75:9f:32:93:61:59:87:d9:34:3d:ef:58:cc:fd:
bb:a3:5e:87:30:2d:14:e9:24:4d:7e:52:d0:1c:b1:b6:c3:05:
f1:57:6f:d0:99:52:c8:3a:c9:97:22:d1:1f:d6:7a:00:80:52:
a8:24:d2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:52 2025 by rpki-client