Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/76CEBC9C056F11F08FA2C475762E951A.roa
File: 76CEBC9C056F11F08FA2C475762E951A.roa (raw, json)
Hash identifier: QdYwpsnwsqZLllEQ4dlrKUm/W+md4J/tjMQObumMnu8=
Subject key identifier: D4:38:CB:0C:90:D0:4D:5E:1A:65:74:21:B3:A8:11:06:C4:AE:C5:3E
Certificate issuer: /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial: 056B
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/76CEBC9C056F11F08FA2C475762E951A.roa
Signing time: Thu 20 Mar 2025 09:41:14 +0000
ROA not before: Thu 20 Mar 2025 09:41:10 +0000
ROA not after: Tue 20 Mar 2035 09:41:10 +0000
asID: 37725
IP address blocks: 102.220.125.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1387 (0x56b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B3234AF
Validity
Not Before: Mar 20 09:41:10 2025 GMT
Not After : Mar 20 09:41:10 2035 GMT
Subject: CN=67dbe2ba-4389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:eb:ec:21:4a:5d:35:00:b1:32:a9:e1:7a:
92:bb:27:1f:17:68:f2:29:ea:24:00:df:b8:4f:bf:
16:2c:a6:69:39:21:66:0c:27:00:ca:bc:2a:30:c6:
83:c1:20:39:20:08:c0:e7:ba:db:df:32:a1:70:df:
85:79:82:81:98:7a:2f:77:30:29:93:c4:fa:47:cd:
73:77:ce:da:93:af:1b:53:5d:e7:b8:0e:4b:80:0d:
62:26:70:5c:b1:4c:4b:f0:e8:a6:33:bd:f5:62:8a:
00:fd:f4:46:2c:a0:6f:78:2b:04:a1:ff:71:1a:96:
40:51:7b:e0:b9:d5:b2:c3:5e:53:8b:fc:7b:66:7f:
94:6e:e7:e4:06:62:68:f9:c1:13:89:ba:e3:7b:6b:
8d:69:11:27:1e:19:76:f8:56:a4:39:c8:eb:6a:2e:
af:68:be:bd:4e:50:e5:03:b3:3b:79:c0:9b:ff:bc:
90:20:9c:ea:2b:62:9b:c5:0d:14:5a:0c:c4:71:3a:
d3:5e:68:fe:5d:39:22:66:0a:63:6e:e8:bc:66:f9:
fd:ef:24:6f:fe:88:99:6d:d2:e2:b2:9a:1e:38:16:
ea:f3:e7:12:97:39:12:6d:dc:7e:f2:d6:a3:bd:a2:
9b:bd:f8:f9:26:48:89:88:49:ea:7f:77:dd:4f:22:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:38:CB:0C:90:D0:4D:5E:1A:65:74:21:B3:A8:11:06:C4:AE:C5:3E
X509v3 Authority Key Identifier:
keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/76CEBC9C056F11F08FA2C475762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.125.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:ab:68:c1:9c:b4:11:3f:3b:ca:c3:69:47:c2:03:63:f2:4d:
4c:07:06:c0:d3:8b:72:71:8f:30:ff:e9:f9:5e:80:f9:a4:08:
6a:69:06:b9:cf:3a:42:ce:73:3f:82:72:93:f1:f7:7e:73:81:
69:13:97:ed:25:69:e9:78:a7:15:3c:af:7b:ce:27:42:38:5b:
b7:be:15:c7:4c:af:c9:80:b3:89:79:c0:9d:46:bb:d1:34:db:
9d:94:66:3a:0d:53:ae:69:1f:57:9d:ab:83:0a:18:29:61:69:
f9:99:76:78:f1:eb:89:63:ea:05:94:e7:f5:6c:1c:aa:58:da:
79:e5:7f:4a:0c:4d:90:ad:e6:4b:6f:1e:53:30:cd:2e:ef:18:
fc:71:fe:27:9f:1f:23:3f:57:51:2e:a3:3f:84:de:3e:55:d4:
92:ef:58:24:eb:fb:db:04:6e:aa:a6:45:ff:df:fb:6b:6a:f7:
ce:ce:92:fc:f0:d5:41:0b:0e:5a:b1:73:f7:b4:6b:82:4a:e3:
cf:a9:ed:df:b6:98:46:e0:74:f0:1a:99:b0:4b:89:e9:ce:67:
25:6f:44:d2:7e:3e:c6:32:9d:fb:da:6a:e7:21:f0:65:6d:fb:
00:3c:01:f9:9d:bc:90:38:ec:4d:b1:e4:ab:cb:35:14:9c:22:
16:c8:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:51 2025 by rpki-client