Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/44AA2642DD5211EFB4022CA6762E951A.roa
File: 44AA2642DD5211EFB4022CA6762E951A.roa (raw, json)
Hash identifier: YLlkpcwgvPAJRBxib2dLmg6by1FzGd47JbcV2KYgirg=
Subject key identifier: 2E:5B:0D:4C:41:02:26:74:B1:33:87:1B:2A:37:9B:A3:E5:09:E0:1D
Certificate issuer: /CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
Certificate serial: 0368
Authority key identifier: 83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/44AA2642DD5211EFB4022CA6762E951A.roa
Signing time: Tue 28 Jan 2025 08:31:28 +0000
ROA not before: Tue 28 Jan 2025 08:31:24 +0000
ROA not after: Wed 17 Jan 2035 08:31:24 +0000
asID: 328474
IP address blocks: 102.206.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 872 (0x368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6E7CAF
Validity
Not Before: Jan 28 08:31:24 2025 GMT
Not After : Jan 17 08:31:24 2035 GMT
Subject: CN=679895e0-0263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:8c:8c:10:13:f3:18:a0:07:a8:09:66:24:
1f:1e:72:af:1d:09:3a:d8:af:8a:57:e6:1e:6f:33:
de:10:18:0a:d5:02:0b:96:21:4e:e0:8c:32:11:fa:
4a:92:8e:13:aa:31:70:00:44:33:a0:89:ef:48:e9:
50:72:8d:a3:2d:71:68:c8:60:31:b4:58:1c:73:a6:
1f:4d:ac:ec:d0:2f:e2:79:2d:e6:a7:d8:83:ae:0f:
5a:b0:3b:4b:c6:ab:22:4e:d2:fb:a9:02:c8:28:2c:
29:f3:91:7e:e8:ee:d2:5a:0e:b5:e0:04:26:3f:ee:
11:49:49:0e:4e:c9:fd:61:35:72:07:62:20:00:13:
07:01:df:4b:d6:22:20:a1:1a:76:b8:52:5e:dc:84:
c1:d4:cc:af:2b:a7:96:b9:58:60:09:5b:44:95:5c:
75:d2:dd:d6:da:5f:19:e2:72:a5:7b:b3:76:31:30:
5e:65:1d:b0:d8:d3:f2:9e:b8:2b:64:c0:79:2e:da:
87:16:66:5d:6a:9b:81:b5:00:7d:60:e7:41:05:27:
2c:f7:d6:3f:6c:19:f7:2c:78:0a:49:31:c7:66:08:
a8:1f:e8:8a:54:c4:6d:9c:05:5a:19:33:e3:9b:15:
2b:89:74:3f:e3:82:6f:2b:e4:99:98:b3:60:67:d5:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5B:0D:4C:41:02:26:74:B1:33:87:1B:2A:37:9B:A3:E5:09:E0:1D
X509v3 Authority Key Identifier:
keyid:83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/44AA2642DD5211EFB4022CA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.192.0/22
Signature Algorithm: sha256WithRSAEncryption
94:cb:f3:a4:81:55:54:51:8b:f2:07:b1:94:2d:1a:71:b5:6a:
6c:bd:77:46:b3:00:6b:ea:82:a9:06:1c:dc:d3:e8:58:eb:f7:
62:0a:48:97:71:2d:e9:c3:ac:8d:bd:0f:b2:54:e6:98:38:3c:
83:c6:9a:05:82:16:02:77:2b:da:92:e9:02:1a:be:f4:79:dc:
bb:86:b5:56:a2:7f:38:9d:38:ea:0f:d7:3b:83:30:fc:85:38:
c5:ca:2b:57:d3:08:c3:e0:ef:f6:03:57:fa:65:42:8f:43:e9:
8c:24:f8:1c:6d:1c:d3:d2:d4:97:a9:e2:07:a5:95:ef:5f:5f:
a4:a6:3e:88:9c:e6:a8:4a:57:95:c1:b5:76:ab:f4:ad:98:d2:
47:96:ff:c9:82:ce:9d:e6:09:10:54:f6:62:f9:e7:0f:ba:97:
46:d0:a3:c0:bd:37:27:8b:6d:5d:38:d1:9e:09:c4:11:7a:ec:
15:f5:91:cb:da:e5:00:ce:fd:1b:14:d6:87:fc:40:7a:31:7c:
f7:07:84:cc:f3:90:4e:78:f8:f8:1c:d8:5d:0e:b2:24:26:fa:
88:bb:93:b4:fd:1a:43:b4:e8:f9:9f:3d:3c:4a:69:67:57:ed:
dc:89:61:d4:af:84:c9:65:09:44:e0:7c:cd:25:b3:1f:bf:6f:
95:e8:e4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:09 2025 by rpki-client