Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/C8EAD44AF37F11EF8F918B9B762E951A.roa
File: C8EAD44AF37F11EF8F918B9B762E951A.roa (raw, json)
Hash identifier: 3FY1R5G9e62ZEEsY++tdAL5amowSbQTfKV7h0U0s8pU=
Subject key identifier: 8D:10:D0:E2:08:74:86:41:E5:63:79:08:4C:B2:6B:6E:2E:5D:2A:9E
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 01B8
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/C8EAD44AF37F11EF8F918B9B762E951A.roa
Signing time: Tue 25 Feb 2025 13:52:43 +0000
ROA not before: Tue 25 Feb 2025 13:52:39 +0000
ROA not after: Wed 25 Feb 2026 13:52:39 +0000
asID: 328988
IP address blocks: 102.213.68.0/24 maxlen: 24
102.213.69.0/24 maxlen: 24
102.213.70.0/24 maxlen: 24
102.213.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF
Validity
Not Before: Feb 25 13:52:39 2025 GMT
Not After : Feb 25 13:52:39 2026 GMT
Subject: CN=67bdcb2b-a087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:3d:ec:80:27:eb:00:de:52:62:aa:38:16:
d3:b9:3f:19:ad:43:98:51:81:84:82:38:6a:0f:7b:
b8:cd:eb:cc:04:0a:59:a4:c7:11:e8:58:36:67:ae:
22:52:39:8f:dc:2d:71:ad:e5:5c:67:71:90:61:13:
45:70:73:d4:69:a5:43:de:f1:18:a1:05:1a:71:9a:
af:27:62:7f:30:42:59:f4:ae:56:34:3c:ef:a3:25:
f3:da:69:e9:55:af:a0:c9:a7:20:11:9e:f7:8b:0b:
da:03:85:05:65:05:1c:f4:3f:6b:f6:d0:7d:42:74:
58:1e:2a:9c:9a:da:78:28:3d:10:78:b6:a9:00:c8:
d4:61:50:d7:09:7e:a2:04:f1:e1:0c:fd:5f:d3:55:
8e:40:0a:88:cc:49:0b:72:bf:e1:81:77:e9:5e:23:
a1:ec:7b:a3:20:26:b9:71:d8:ab:f4:4b:d5:8f:ba:
0a:6e:9f:05:e5:5e:fd:8c:73:fe:13:ba:06:41:64:
c0:12:98:bd:71:d6:9d:82:97:59:f3:16:5c:95:0e:
12:d6:ea:21:32:03:13:1b:72:76:5e:00:3f:93:81:
ee:d7:46:5a:af:f2:54:6c:7c:3e:38:9f:61:60:1e:
35:a3:ac:52:08:0d:c1:86:ac:10:92:b0:2f:35:0a:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:10:D0:E2:08:74:86:41:E5:63:79:08:4C:B2:6B:6E:2E:5D:2A:9E
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/C8EAD44AF37F11EF8F918B9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.68.0/22
Signature Algorithm: sha256WithRSAEncryption
80:49:9c:54:65:73:e3:8f:2c:56:e7:df:35:fd:32:ed:01:6f:
ed:bd:5f:17:1f:5c:5a:84:05:2f:51:49:73:6a:41:90:cd:0c:
39:e1:05:6f:76:3a:2c:b8:ed:ca:5a:b5:b0:85:48:32:31:6c:
65:91:af:b8:9d:66:51:84:b0:95:15:b7:47:66:ee:b1:26:14:
a9:9c:0f:4f:b1:78:33:01:0f:0e:04:05:18:37:de:a8:8e:ce:
50:d5:e1:48:35:90:ad:7f:0d:11:db:39:dc:93:d2:cd:1d:9b:
e9:c6:3f:ac:16:66:e2:67:7b:c8:c7:57:bb:1c:65:6c:84:27:
09:49:10:d3:9a:ba:f1:4a:a7:aa:ba:99:78:43:0d:44:d2:24:
da:43:2a:c7:d6:ec:96:30:8e:7f:83:0e:a5:20:a6:10:04:75:
0d:3e:66:ed:4d:95:b7:2b:6b:45:07:48:43:04:76:39:4f:fb:
a1:bc:b1:9e:4a:e5:97:ab:14:0a:d8:b6:83:f4:41:c5:42:d6:
9a:43:99:13:1f:f9:0c:e5:c2:f2:e0:0e:39:b7:c3:3a:99:7b:
9c:3d:4f:de:3f:07:ae:a3:64:50:01:13:08:f9:27:ad:c1:30:
0a:22:92:a0:a9:25:47:bc:22:c9:40:28:47:2d:00:28:b1:3d:
23:f4:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:36:18 2025 by rpki-client