Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/D378C19EDB2C11EF97120DAA762E951A.roa
File: D378C19EDB2C11EF97120DAA762E951A.roa (raw, json)
Hash identifier: XvBxie++FSr21ud0Lfttnl+zogzSereMyWWkFD2zdWI=
Subject key identifier: 34:A6:91:B4:22:E9:8B:98:B4:DD:69:D6:02:DC:EA:D9:49:A0:7B:A3
Certificate issuer: /CN=F36D06FDAF/serialNumber=B878401E49754E50A1F2979F1228E5415AF785CB
Certificate serial: 05
Authority key identifier: B8:78:40:1E:49:75:4E:50:A1:F2:97:9F:12:28:E5:41:5A:F7:85:CB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/D378C19EDB2C11EF97120DAA762E951A.roa
Signing time: Sat 25 Jan 2025 14:58:24 +0000
ROA not before: Sat 25 Jan 2025 14:58:21 +0000
ROA not after: Thu 25 Jan 2035 14:58:21 +0000
asID: 329390
IP address blocks: 102.210.24.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D06FDAF
Validity
Not Before: Jan 25 14:58:21 2025 GMT
Not After : Jan 25 14:58:21 2035 GMT
Subject: CN=6794fc10-570f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f8:f0:4a:94:ce:8a:67:58:d5:68:cc:08:51:
1f:a1:1d:e5:74:59:5b:75:67:75:71:47:bd:5f:11:
5f:40:e7:7f:14:f7:63:8d:f0:9a:cc:8a:2f:f1:72:
16:7d:94:84:28:99:6c:32:d4:6f:ff:e2:d8:66:5d:
51:6b:a3:6c:a8:45:4d:07:27:63:96:53:14:df:90:
24:6f:bd:21:93:60:9d:2b:a1:56:3e:2d:a5:02:6e:
99:c4:e8:8e:81:1a:45:4b:49:df:20:df:56:37:50:
f9:9c:8a:e2:c1:64:2c:e0:5b:ef:76:33:78:2e:96:
04:a9:fe:d6:8a:6b:d4:f1:1e:f9:fa:fd:93:04:b0:
0e:84:33:4c:47:e2:3a:56:53:b5:2f:66:0c:1e:4b:
2c:e3:99:04:9b:25:68:83:e4:d6:38:36:ef:a7:fa:
46:1e:55:b4:4f:ec:80:c3:26:bc:6d:c1:fe:d1:91:
ad:61:ff:81:fc:d6:ad:c7:18:74:eb:98:68:aa:eb:
8e:80:e8:a9:86:5b:5a:06:84:02:89:f6:d3:93:47:
50:8a:99:b5:82:84:57:9d:95:94:ba:8c:36:64:53:
94:b6:3f:e1:a6:51:5c:89:0b:a3:54:e8:55:3b:df:
34:4c:20:25:e3:05:f7:f0:37:d4:c6:8e:d1:5e:ae:
4a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A6:91:B4:22:E9:8B:98:B4:DD:69:D6:02:DC:EA:D9:49:A0:7B:A3
X509v3 Authority Key Identifier:
keyid:B8:78:40:1E:49:75:4E:50:A1:F2:97:9F:12:28:E5:41:5A:F7:85:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/D378C19EDB2C11EF97120DAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.24.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:3a:1f:c3:4f:b4:fe:d1:45:c4:50:94:c5:c2:ca:d5:c9:7c:
5c:6e:b0:bc:17:70:83:a3:0d:fa:23:e7:a9:81:f7:0f:39:29:
33:cf:a5:4d:b1:4e:e8:4b:29:90:e7:81:9a:c2:7d:1a:ee:cc:
fa:db:77:cf:79:4d:f2:28:08:fa:a1:f5:57:cd:ec:a9:b5:9c:
8c:3c:8b:fb:f4:29:ac:b7:50:90:89:9e:e4:5f:4f:43:92:63:
cb:eb:df:97:8d:90:f5:e0:94:19:4a:4d:b6:d8:48:6b:f8:34:
e3:35:86:64:56:c4:aa:77:8e:14:0c:8e:28:f4:95:7f:1f:dc:
c5:41:0c:dc:58:8b:c1:6d:88:30:b9:c0:c8:28:c1:9c:5a:37:
fd:a1:c8:62:45:64:8b:fd:2d:8d:5b:16:44:81:b1:c3:70:f6:
8b:3d:8d:41:29:d7:47:83:c0:6e:76:d1:4a:ee:47:14:bc:c9:
d2:6f:95:48:13:01:59:79:9a:23:19:9e:a7:4f:96:82:60:a3:
c2:59:a7:f3:cc:ec:82:37:64:32:ee:74:27:66:5a:3b:07:e6:
4f:49:21:64:30:8f:c3:8a:92:69:8b:3c:81:db:3e:80:8d:17:
cf:87:09:7f:8e:92:69:fe:c9:bd:00:d0:b1:f3:9a:68:ed:61:
ea:3a:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:41 2025 by rpki-client