Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/C4EF296EF5CC11EF948FCB78762E951A.roa
File: C4EF296EF5CC11EF948FCB78762E951A.roa (raw, json)
Hash identifier: 6EhZAZOfI7/G45J7guhw2ognpwwtVmscJX9jxlBfd4k=
Subject key identifier: 33:B0:E2:76:39:1E:A3:6D:85:14:08:70:A6:53:85:49:97:39:73:D4
Certificate issuer: /CN=F36C3E3DAF/serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
Certificate serial: 03A0
Authority key identifier: 8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/C4EF296EF5CC11EF948FCB78762E951A.roa
Signing time: Fri 28 Feb 2025 12:08:50 +0000
ROA not before: Fri 28 Feb 2025 12:08:46 +0000
ROA not after: Sun 28 Feb 2027 12:08:46 +0000
asID: 328549
IP address blocks: 102.36.184.0/22 maxlen: 22
102.36.184.0/24 maxlen: 24
102.36.185.0/24 maxlen: 24
102.36.186.0/24 maxlen: 24
102.36.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 928 (0x3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C3E3DAF
Validity
Not Before: Feb 28 12:08:46 2025 GMT
Not After : Feb 28 12:08:46 2027 GMT
Subject: CN=67c1a752-de19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b4:ca:3b:d5:4a:35:db:8c:05:d3:10:7e:10:
fc:a1:d5:2b:cf:e1:51:52:2c:02:20:f7:e2:93:fb:
1e:a5:3c:d8:9d:57:c7:1a:53:10:10:bc:e4:4f:60:
34:61:c7:91:92:dc:0e:4b:6d:83:6c:9b:a0:36:a2:
a3:b4:3d:68:ec:98:e6:3d:a9:39:ae:dd:c4:e7:36:
13:ad:c5:db:90:5a:48:6a:0a:0a:96:2f:21:cb:13:
93:bb:2f:c2:e5:48:c5:72:07:9a:a6:a0:ad:e0:06:
05:7c:73:aa:8c:ab:a1:49:43:14:b8:8b:9a:a5:91:
16:d2:f2:07:72:b9:cb:79:74:31:aa:88:42:d0:53:
5b:bb:6a:d8:77:9b:f1:41:42:6a:75:73:77:7c:08:
fa:75:8a:4f:c6:6b:78:6e:43:c8:d3:61:8c:41:0f:
1b:86:8b:cd:fc:41:be:c2:bb:76:0d:77:d7:50:5b:
4e:e4:a7:ff:10:b2:f5:04:1e:29:1f:0d:1c:8b:fb:
a0:fa:f1:f4:2e:aa:b2:a1:01:49:ae:0b:46:35:3e:
7a:f8:69:f7:91:ec:80:4f:bb:35:1b:27:98:e8:31:
80:31:d6:b7:f8:21:3e:88:0e:c8:ed:97:12:1a:3b:
ce:fd:f8:67:e6:a4:84:79:a6:88:31:b5:20:aa:03:
2f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B0:E2:76:39:1E:A3:6D:85:14:08:70:A6:53:85:49:97:39:73:D4
X509v3 Authority Key Identifier:
keyid:8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/C4EF296EF5CC11EF948FCB78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.184.0/22
Signature Algorithm: sha256WithRSAEncryption
97:fb:68:56:9f:a0:df:a8:ef:8d:48:d0:5f:4f:fa:f7:3a:2d:
a5:74:b0:f6:b4:f4:4b:ae:4e:ba:e8:67:d6:a7:93:4f:39:b6:
47:5b:ba:6d:0c:c7:e3:db:be:11:c4:e3:e3:d1:6d:d9:66:79:
21:13:76:8d:c2:e1:8d:e3:cd:c9:36:4b:29:40:6c:bf:51:46:
9d:17:2e:61:b6:01:f8:79:cf:7b:9d:92:ed:44:5a:12:a7:cc:
45:a3:7f:1a:f6:94:6d:0f:37:80:cd:9c:51:66:f9:6d:69:c2:
96:d9:dd:e5:94:c9:e4:44:25:03:af:86:1e:e9:72:23:d3:f0:
15:01:08:36:32:fb:a6:7d:9a:ea:60:78:b1:49:d2:3f:5c:09:
e4:b9:a2:be:fa:16:ec:de:29:b6:2e:6e:8c:41:50:08:8d:2d:
ac:3d:0c:5c:a2:23:61:93:ed:6b:6c:d7:d8:88:29:51:33:3d:
b4:e5:d3:e0:e2:9a:e0:44:55:5e:48:cf:df:3c:5c:48:65:50:
ed:95:4b:48:40:a1:4a:e5:13:91:a7:af:de:50:dd:c2:f8:86:
74:b5:e8:bf:72:10:17:ae:f4:bc:24:0c:cf:4c:57:9e:35:34:
ed:c7:39:51:74:14:47:61:95:b9:39:06:e8:ee:39:72:37:8b:
9a:aa:8e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:37 2025 by rpki-client