Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/AE001706F38111EF91513EA5762E951A.roa
File: AE001706F38111EF91513EA5762E951A.roa (raw, json)
Hash identifier: CsyczAumlFcQb05ZCYSr5KvRFw0VwExDeS0urlWHtWU=
Subject key identifier: 6E:43:0F:D9:FB:A6:E2:A4:A0:74:79:1E:E3:E5:CB:DD:5A:4F:4C:C4
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 01BA
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/AE001706F38111EF91513EA5762E951A.roa
Signing time: Tue 25 Feb 2025 14:06:17 +0000
ROA not before: Tue 25 Feb 2025 14:06:13 +0000
ROA not after: Wed 25 Feb 2026 14:06:13 +0000
asID: 328988
IP address blocks: 102.218.48.0/24 maxlen: 24
102.218.49.0/24 maxlen: 24
102.218.50.0/24 maxlen: 24
102.218.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF
Validity
Not Before: Feb 25 14:06:13 2025 GMT
Not After : Feb 25 14:06:13 2026 GMT
Subject: CN=67bdce59-0a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:2e:54:70:73:96:fa:68:24:63:cc:b4:03:
2e:1f:99:91:64:fe:d1:9f:9e:b1:2c:76:b9:dc:48:
4c:a6:1f:ce:33:0a:d9:e3:00:2d:fd:1c:83:d4:3b:
30:82:e1:4c:2b:85:fc:49:33:1a:e2:4d:75:87:db:
22:b3:61:43:ac:5a:c8:b6:5c:1a:1c:49:25:35:4c:
9f:dd:c8:ff:b4:16:af:8d:5a:b1:2a:3c:ed:a1:da:
48:1c:50:d2:72:a6:68:a6:ce:27:7d:bc:e7:47:69:
96:68:be:16:c3:d9:f1:db:db:b4:3a:db:a8:df:02:
a1:eb:49:c3:fd:5e:80:0c:97:5b:f8:b9:c2:39:ca:
6b:f8:bd:fb:77:c5:ef:75:ff:e0:ec:1d:39:cb:3c:
f0:81:b3:e5:27:ac:c5:67:f5:d2:ae:1e:49:5a:33:
7d:6f:2b:d5:79:2d:7b:c5:98:bf:93:5d:27:d5:7c:
31:78:f1:ad:72:be:99:7d:ae:75:2c:d1:85:fa:e8:
ea:03:f5:5f:35:78:1e:26:31:2b:df:92:f8:4e:c1:
7a:94:2a:50:9c:a5:5a:3d:dd:d3:6e:f8:2f:38:a1:
38:95:8e:f3:17:e5:11:c2:93:71:17:76:0c:1f:2d:
76:4b:bf:62:8e:6a:ef:ad:2d:7c:72:d3:88:de:22:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:43:0F:D9:FB:A6:E2:A4:A0:74:79:1E:E3:E5:CB:DD:5A:4F:4C:C4
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/AE001706F38111EF91513EA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.48.0/22
Signature Algorithm: sha256WithRSAEncryption
58:28:1f:51:93:8d:d7:dd:57:6d:2c:6b:67:55:71:39:42:bb:
d0:7e:f0:a6:c2:96:d3:de:a7:c4:03:4e:70:c3:d0:f3:60:01:
7c:2b:5a:a4:6a:0f:bb:4a:db:fc:99:ab:97:81:bd:2e:ce:3a:
11:45:b0:5d:fb:05:49:13:f3:6c:b8:17:ac:d7:e2:d0:31:cd:
53:23:c0:6b:a3:0f:0c:3b:1c:16:14:c5:3a:19:19:ed:d0:b6:
0b:2b:f8:cc:8e:1c:18:64:8b:1c:73:15:9d:4e:d9:92:3a:ca:
17:50:f4:cf:d2:7f:b7:5e:71:79:43:19:44:f2:64:2f:89:69:
bf:36:55:13:c6:38:a3:91:90:43:75:14:0e:d3:83:69:92:7c:
24:07:7a:99:ca:bc:0c:93:48:a2:4e:1d:dc:6e:02:b6:8e:25:
f8:b6:21:57:66:d4:b2:b0:36:c9:46:d5:b3:32:9c:6d:23:20:
d4:59:e0:bd:18:c1:f4:3a:09:2e:f8:32:36:28:8b:a8:7d:c9:
fd:f3:ba:4d:fc:d5:f1:35:d7:06:dc:46:a6:d7:2e:54:db:87:
00:b0:56:62:70:93:0c:56:0a:96:10:38:e6:60:96:4b:4b:2e:
7b:2a:11:e6:cc:76:dd:cd:b2:fa:bc:ca:e5:aa:ed:43:cd:40:
0e:28:55:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:15 2025 by rpki-client