Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/641ADEEC093411EFBC62A76A017001B1.roa
File: 641ADEEC093411EFBC62A76A017001B1.roa (raw, json)
Hash identifier: 7RofrytqiAZkC8olZeL24JXarKRiHHpszoxgshTtLtE=
Subject key identifier: 8C:EB:B0:A2:BF:45:BE:D9:F6:50:57:CA:3F:FC:D2:57:6A:54:63:0C
Certificate issuer: /CN=F36B86D4AF/serialNumber=BF60DD19B64265A7B5B453F015B8B8A60B4298CF
Certificate serial: 10
Authority key identifier: BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/641ADEEC093411EFBC62A76A017001B1.roa
Signing time: Fri 03 May 2024 10:03:30 +0000
ROA not before: Fri 03 May 2024 10:03:26 +0000
ROA not after: Sun 03 May 2026 10:03:26 +0000
asID: 329157
IP address blocks: 102.214.96.0/22 maxlen: 22
102.214.96.0/23 maxlen: 23
102.214.96.0/24 maxlen: 24
102.214.97.0/24 maxlen: 24
102.214.98.0/23 maxlen: 23
102.214.98.0/24 maxlen: 24
102.214.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B86D4AF
Validity
Not Before: May 3 10:03:26 2024 GMT
Not After : May 3 10:03:26 2026 GMT
Subject: CN=6634b671-4649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:7a:1b:f1:cb:35:c5:40:92:63:47:71:be:
4b:26:55:79:be:1b:df:c1:6f:16:4f:84:65:fc:ea:
12:2c:2f:2d:85:b4:d7:f9:21:b9:1a:35:b3:e3:34:
e1:8d:d5:34:90:55:44:13:a7:62:fc:4c:a6:3f:ff:
cc:5a:22:da:5f:1c:3d:6a:8b:59:14:1f:f7:1e:b5:
0b:9b:ec:07:a4:e1:1a:6a:a7:28:7c:1c:60:73:cb:
73:ba:2e:af:85:c8:d4:01:77:58:8d:55:9e:eb:94:
d1:1c:2c:99:ed:36:0a:af:8d:17:10:6a:cf:7d:6b:
5c:ac:9e:d8:8e:57:b3:64:51:e4:39:1e:c7:67:31:
71:72:8b:99:47:eb:a4:04:04:6d:a5:3e:eb:d0:22:
75:04:55:57:41:5e:cb:fb:9f:06:b7:dd:59:ab:02:
1f:91:46:44:14:da:f6:bb:0d:12:f0:a2:d5:93:b0:
29:83:bd:dd:8f:63:6d:65:e1:25:ae:db:0e:1c:6a:
c7:3f:ca:a8:a2:b1:76:ff:4f:2e:c7:d1:4c:65:6d:
07:8b:d8:c8:46:0b:a9:e1:17:ea:c5:eb:7d:11:f6:
85:75:08:c8:cd:b1:87:de:5a:d6:87:1d:af:b0:05:
d8:82:fb:0d:68:bd:50:e6:8e:ba:27:2e:2d:a3:97:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EB:B0:A2:BF:45:BE:D9:F6:50:57:CA:3F:FC:D2:57:6A:54:63:0C
X509v3 Authority Key Identifier:
keyid:BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/641ADEEC093411EFBC62A76A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.96.0/22
Signature Algorithm: sha256WithRSAEncryption
53:d1:05:25:97:d8:2f:90:04:7e:bc:d7:97:1a:87:dd:af:61:
5b:09:34:6f:77:ae:65:36:0f:3c:76:a9:24:8e:34:d9:ac:c1:
3e:2d:35:61:c6:16:ab:46:a8:1f:b2:4a:38:d9:6d:e1:a2:64:
f0:77:74:2f:0d:5d:c2:75:4c:73:cc:df:c5:6c:51:47:27:8a:
c5:42:4c:43:ae:9f:8e:22:95:82:61:60:a5:46:99:ff:a2:86:
99:f3:27:31:41:bc:8d:81:22:c9:09:18:c6:af:3f:1a:75:7a:
68:4f:fe:22:0e:3f:eb:ce:4e:b5:78:ba:0a:5c:ec:ec:e2:cf:
60:53:cf:77:a4:7d:9e:db:12:35:e0:34:c4:e0:3a:70:77:e4:
63:ef:bf:8a:0b:11:a1:b1:9c:e8:dc:dd:56:15:bb:a1:20:89:
3e:c2:0a:2f:b3:87:66:12:e8:f1:aa:23:b1:45:8f:59:0a:99:
04:f3:65:a6:ea:0b:f7:1d:ca:9f:38:43:d2:cb:62:da:38:2d:
c6:69:a8:78:16:ee:c2:c5:5b:6e:fb:ec:f1:a0:7d:bb:9f:7a:
ed:fc:eb:18:de:dd:fd:d2:a3:fd:36:ad:ad:a8:30:2a:95:00:
93:92:a9:1d:6b:42:b5:2a:f7:18:56:e8:6e:38:9e:2c:2c:f9:
5c:20:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:04 2025 by rpki-client