Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/0E6CEF8EABF611EF8D257368762E951A.roa
File: 0E6CEF8EABF611EF8D257368762E951A.roa (raw, json)
Hash identifier: 3IMYv2fYZHxMilsGAD7UzjHLGo67Jrz37D1HYZiI4Ac=
Subject key identifier: 43:36:CE:0B:70:59:71:B2:33:CA:F1:C0:2B:CA:80:49:A5:C8:D0:6B
Certificate issuer: /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial: 025B
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/0E6CEF8EABF611EF8D257368762E951A.roa
Signing time: Tue 26 Nov 2024 12:57:56 +0000
ROA not before: Tue 26 Nov 2024 12:57:53 +0000
ROA not after: Tue 01 Jan 2030 12:57:53 +0000
asID: 37684
IP address blocks: 102.207.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CAF
Validity
Not Before: Nov 26 12:57:53 2024 GMT
Not After : Jan 1 12:57:53 2030 GMT
Subject: CN=6745c5d4-0bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:16:b6:29:71:b6:1f:9c:79:d0:b1:f3:0d:
e8:7a:b7:d9:a5:ab:af:3c:22:17:43:5b:f3:e9:2c:
f3:87:ac:dc:a4:c5:35:17:26:09:b9:09:32:3b:3f:
48:af:be:c4:34:c6:fd:24:38:20:7e:59:39:4c:56:
6b:a5:9e:61:ec:79:1e:35:ac:31:02:75:2c:de:b3:
52:78:d6:44:c0:9e:3a:c9:03:49:ad:e6:a5:7c:30:
b4:ce:cb:d3:6a:7e:4d:59:0f:3e:28:a4:32:eb:43:
53:f8:43:3e:3b:37:9f:13:e7:3f:4f:f8:89:e8:ab:
f4:99:cd:51:d6:43:32:35:46:1a:91:96:5b:f3:8d:
32:ed:3a:48:bf:7d:e5:92:8b:2c:41:4b:70:cf:23:
ae:b3:9c:15:3f:b3:27:db:08:7f:b3:c0:ac:e6:f5:
09:78:c7:a8:1b:2e:a4:17:b9:c6:3c:4c:e4:6e:95:
e1:4b:b7:2b:9f:e4:dd:16:2e:9f:4c:6e:92:87:f5:
f8:28:58:09:d3:fa:0b:9b:29:9c:41:fc:74:95:b0:
0c:24:35:5e:e6:32:1d:6e:2e:1f:43:d3:28:f6:4f:
0c:24:c1:60:6f:ed:e2:f7:bc:b2:c4:34:0c:b1:f1:
15:10:0e:c2:b8:24:dc:ac:9b:cd:4d:68:9c:88:d6:
32:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:36:CE:0B:70:59:71:B2:33:CA:F1:C0:2B:CA:80:49:A5:C8:D0:6B
X509v3 Authority Key Identifier:
keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/0E6CEF8EABF611EF8D257368762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.148.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e8:c0:ac:f3:dc:15:25:1a:b9:08:16:bf:51:49:3b:5e:76:
74:62:e6:35:a7:95:03:1f:89:1c:2f:72:7a:e7:e6:a0:40:63:
ca:86:36:8b:af:27:0a:66:82:a7:4a:e7:4e:bc:e4:0c:af:2d:
82:86:d6:01:4a:48:28:27:aa:e4:c5:ba:c0:4f:1a:93:c0:7c:
0d:c4:c2:49:1f:ec:e0:30:c1:88:cd:db:75:c6:17:04:dc:d4:
c8:bc:a8:80:05:b6:91:7a:dd:3e:59:13:5f:b8:2d:a6:56:41:
61:34:4d:fe:99:82:43:08:14:40:8d:e4:a5:e3:ef:28:14:f3:
ca:3c:4e:04:d0:01:3d:ce:ce:e2:4a:bf:de:6c:4f:7b:fd:25:
8f:af:6a:4f:ac:42:74:22:a0:36:bb:ca:2b:d6:0f:f6:ac:15:
91:7c:02:1c:46:f9:ed:60:66:bf:72:18:3b:5e:2d:32:89:5f:
e9:72:56:b6:2a:e8:c0:e1:2d:5b:58:13:70:f2:ef:6a:cd:5d:
1b:81:d2:22:28:67:24:58:6b:f8:0b:41:e5:df:60:6f:53:82:
0c:0b:fa:d5:26:cf:06:f6:e4:66:4e:54:9a:e6:0e:42:29:c7:
2e:4f:87:69:10:d7:69:7b:08:98:64:f8:03:ec:b0:06:55:2c:
86:10:b9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:26:35 2025 by rpki-client