Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/3351D8BA906B11EF863EED45762E951A.roa
File: 3351D8BA906B11EF863EED45762E951A.roa (raw, json)
Hash identifier: f+6bS50NnPqvSk/R0+YRZ5jqENm4eV0Yy6N0dzB+iPU=
Subject key identifier: 14:54:19:95:A0:56:58:BC:F3:98:2A:51:85:F5:B6:5E:8F:45:6E:16
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 012B
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/3351D8BA906B11EF863EED45762E951A.roa
Signing time: Tue 22 Oct 2024 11:45:57 +0000
ROA not before: Tue 22 Oct 2024 11:45:53 +0000
ROA not after: Tue 31 Dec 2024 11:45:53 +0000
asID: 19905
IP address blocks: 102.208.96.0/22 maxlen: 22
102.208.96.0/24 maxlen: 24
102.208.97.0/24 maxlen: 24
102.208.98.0/24 maxlen: 24
102.208.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF
Validity
Not Before: Oct 22 11:45:53 2024 GMT
Not After : Dec 31 11:45:53 2024 GMT
Subject: CN=67179075-3554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:4d:d8:5e:ac:6a:40:9d:f2:56:14:ea:1c:
67:d8:e0:94:71:2b:e3:ed:e4:b4:0d:c0:74:b3:2e:
b8:60:b8:f0:b0:29:26:e0:5b:13:92:ac:a5:80:0c:
b7:24:eb:5d:42:79:0c:d7:ae:7f:38:92:ed:94:cd:
3f:fa:05:2d:21:8a:e2:3c:3f:74:cc:fa:63:db:a7:
48:35:da:cf:91:a9:86:7d:e0:24:f5:61:28:13:23:
15:4e:86:26:30:20:e0:ce:22:88:71:b4:36:46:4a:
34:c5:08:e6:14:2e:4f:01:72:45:0d:08:b8:39:a5:
79:92:69:19:cc:9c:0b:d3:bf:13:e9:d6:03:fe:04:
49:24:ba:18:c7:28:b8:56:55:1c:9b:f5:8a:24:a9:
ac:52:ae:79:9a:16:4f:5f:46:76:7f:17:be:f5:81:
67:65:ab:f3:16:e2:09:f5:85:b3:da:d6:99:6b:51:
45:fb:2a:9e:d8:c2:c9:c1:e0:de:79:f3:00:67:c5:
f8:31:48:6e:9b:9e:e3:28:a6:92:9f:93:3c:86:53:
2d:d9:ea:1e:49:fe:6d:71:7a:5a:8d:75:2e:b2:b1:
93:b9:89:3e:5d:c5:3f:f8:6e:c1:09:76:c7:17:2c:
f1:f3:bc:86:b2:50:1c:87:24:bb:a2:02:e6:5d:98:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:54:19:95:A0:56:58:BC:F3:98:2A:51:85:F5:B6:5E:8F:45:6E:16
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/3351D8BA906B11EF863EED45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.96.0/22
Signature Algorithm: sha256WithRSAEncryption
44:c9:09:6e:76:52:7b:f0:a8:67:a4:35:be:ec:74:30:37:12:
b7:7d:53:e2:c2:55:06:46:5a:26:e9:36:d0:40:f4:af:06:fb:
92:20:cf:59:45:61:00:9a:94:46:15:42:dd:54:78:73:5f:ea:
b6:b3:49:90:b6:b8:9f:42:52:1f:9a:5f:5e:e6:21:61:55:65:
da:ec:30:ad:1d:90:d3:47:79:32:69:9d:28:f8:37:55:a1:21:
a6:5b:b1:c6:3d:da:94:8f:ea:3b:00:19:10:fe:79:4c:d4:c9:
dc:da:92:33:74:fe:02:f6:fd:86:b8:c4:3b:7c:84:7e:34:9e:
ba:44:ab:34:27:55:66:ed:05:b5:a1:46:38:4c:dd:d2:a1:03:
32:88:9a:bf:d7:dc:d1:d3:61:a7:cd:6e:06:e2:e3:17:50:31:
cf:83:84:e4:f6:92:03:af:2c:37:49:92:b0:f3:f9:6a:98:11:
09:3b:35:6a:91:f9:d7:03:44:62:d6:3a:bb:f3:a3:f6:b5:c9:
af:ff:31:fd:75:20:37:d3:eb:d7:c1:6b:3b:86:63:64:90:d6:
fe:4a:05:12:9e:53:88:10:7d:90:3c:69:f8:78:9e:47:e8:df:
d8:cb:94:47:87:c3:9c:c7:3e:b9:e5:3e:20:27:8c:4e:eb:d0:
ca:c2:62:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:06 2025 by rpki-client