Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/CDB8F76CE2F011EF8B167384762E951A.roa
File: CDB8F76CE2F011EF8B167384762E951A.roa (raw, json)
Hash identifier: 9KKjnosE/y11PQGz3bLEh/OZ2s+jOF1SYOCeKyVCZGQ=
Subject key identifier: 2F:8F:15:F5:81:D0:61:50:46:5B:79:15:FB:62:F2:4B:18:3F:91:CD
Certificate issuer: /CN=F36AD16CAF/serialNumber=D5404B046D6ECD6D74141BD3AE4927B8C607EE62
Certificate serial: 02
Authority key identifier: D5:40:4B:04:6D:6E:CD:6D:74:14:1B:D3:AE:49:27:B8:C6:07:EE:62
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1UBLBG1uzW10FBvTrkknuMYH7mI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/CDB8F76CE2F011EF8B167384762E951A.roa
Signing time: Tue 04 Feb 2025 12:08:54 +0000
ROA not before: Tue 04 Feb 2025 12:08:51 +0000
ROA not after: Sun 04 Feb 2035 12:08:51 +0000
asID: 328548
IP address blocks: 102.23.192.0/20 maxlen: 20
2c0f:380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AD16CAF
Validity
Not Before: Feb 4 12:08:51 2025 GMT
Not After : Feb 4 12:08:51 2035 GMT
Subject: CN=67a20356-a1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:96:3e:15:04:4e:ae:be:73:d7:f9:63:5c:
4f:3c:e7:88:f1:08:5a:5e:fc:4f:3c:0f:9c:27:c6:
14:53:0b:f0:b1:1e:ae:08:22:2c:e1:2f:d4:79:a2:
2e:b3:cc:b9:30:a4:b8:eb:99:0a:1a:7f:ac:8a:14:
ea:87:2b:cf:58:ab:b3:3b:be:77:c0:5d:00:2b:6c:
36:2f:28:9e:2f:b4:76:18:0c:9c:38:5c:84:af:e3:
a9:57:93:db:af:19:b3:31:2f:d9:cd:a1:7e:ca:7d:
5d:4e:51:31:89:20:d7:57:40:d8:26:cc:f8:1d:38:
67:46:35:a2:e5:76:fe:ae:25:7f:53:a6:f9:16:13:
5f:12:f9:f4:f0:d3:d5:97:82:21:f1:82:ef:4c:b9:
70:c2:0e:56:a6:99:0a:eb:05:ae:70:c6:a3:5f:3e:
89:45:c7:4d:5e:d2:02:d6:81:24:bb:9a:d3:1b:18:
32:67:b4:cb:6f:d9:dc:42:dd:9f:eb:1b:d9:be:94:
45:02:b9:ac:63:a1:35:c0:1c:43:ef:0d:d5:26:27:
c1:4c:8f:cf:f7:5f:b9:81:e4:d0:d4:4e:30:b6:40:
a7:bd:ca:2d:06:c6:df:72:63:dd:04:21:6a:8f:5c:
af:fb:fd:1a:68:76:96:60:33:ee:93:c7:94:ce:0e:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8F:15:F5:81:D0:61:50:46:5B:79:15:FB:62:F2:4B:18:3F:91:CD
X509v3 Authority Key Identifier:
keyid:D5:40:4B:04:6D:6E:CD:6D:74:14:1B:D3:AE:49:27:B8:C6:07:EE:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/1UBLBG1uzW10FBvTrkknuMYH7mI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1UBLBG1uzW10FBvTrkknuMYH7mI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/CDB8F76CE2F011EF8B167384762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.23.192.0/20
IPv6:
2c0f:380::/32
Signature Algorithm: sha256WithRSAEncryption
3b:0e:0b:72:8b:0e:bf:b4:c6:dc:64:a3:4f:e1:f1:48:45:9e:
e8:28:c3:01:bc:d7:d5:80:0f:db:a0:bd:c1:df:d4:ce:6b:8b:
e7:bd:49:2f:a7:38:3e:06:cf:23:c4:11:40:65:b6:44:1a:3d:
31:02:d6:37:f1:84:c6:2f:97:3d:06:4c:2c:25:63:f3:ae:aa:
a6:a8:10:19:3e:f9:d0:04:96:d8:f0:97:a9:aa:e1:d0:3a:c0:
0d:30:78:79:32:41:e0:90:cd:9c:21:9f:35:5f:4b:37:bd:8f:
83:96:26:bb:2c:c7:07:31:ba:2f:45:f6:bc:b5:83:ae:1c:86:
32:7c:dd:8d:6d:5d:23:48:44:4b:fd:3d:60:24:62:48:93:75:
2f:b3:17:7f:f4:b2:83:e6:90:47:39:15:83:b8:79:e7:49:f9:
49:93:12:f3:87:93:7e:86:19:40:e1:ed:3e:d5:1f:1c:20:a1:
b3:33:1b:59:15:6c:3f:37:b5:03:81:92:8c:d6:97:0b:33:d9:
b5:6b:e0:1c:dd:e3:b5:27:49:0c:f5:db:78:ef:32:70:4a:a0:
51:d3:94:9e:91:22:3b:a7:8a:98:bd:d9:15:39:c7:45:f4:82:
b1:1f:28:3e:ad:78:c4:14:91:a9:f8:24:44:62:1a:d6:0b:2b:
d8:f0:87:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:19:23 2025 by rpki-client