Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/9CC8E63CE06E11EFA35596A7762E951A.roa
File: 9CC8E63CE06E11EFA35596A7762E951A.roa (raw, json)
Hash identifier: tnxSoqA43WiGOfqUI3P0OD/A29+9xuwJnrtEPxKmVjM=
Subject key identifier: E6:B3:52:E1:9F:CA:0D:BA:0C:FD:C0:49:2C:7B:BE:37:95:E7:5C:10
Certificate issuer: /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial: 02AF
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/9CC8E63CE06E11EFA35596A7762E951A.roa
Signing time: Sat 01 Feb 2025 07:31:55 +0000
ROA not before: Sat 01 Feb 2025 07:31:51 +0000
ROA not after: Tue 01 Jan 2030 07:31:51 +0000
asID: 37684
IP address blocks: 102.221.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687 (0x2af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CAF
Validity
Not Before: Feb 1 07:31:51 2025 GMT
Not After : Jan 1 07:31:51 2030 GMT
Subject: CN=679dcdeb-a674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:53:61:21:5e:d8:f2:93:3c:7f:e0:73:ec:
0d:17:ee:65:3c:57:2d:84:84:e4:a3:0b:99:8c:b1:
ce:8c:55:ee:eb:c4:a0:50:4a:3f:f2:17:40:54:84:
fd:04:26:a7:e5:ea:27:3e:3c:6c:84:c4:9c:37:2d:
27:3d:96:11:1f:97:12:03:07:3a:4f:d3:a3:15:54:
67:4b:fa:37:79:22:d7:03:2f:9a:0b:f5:a7:c5:de:
b6:24:9c:58:bf:49:02:07:ed:e8:a1:eb:dc:45:06:
ce:c2:88:4b:d4:97:b4:5f:21:d7:8f:fc:c5:ca:9b:
70:6d:0a:0b:cd:4d:1e:49:3a:db:9d:67:12:b8:67:
19:8c:95:8d:33:f6:c4:d2:9c:81:45:a7:b1:72:c2:
df:d4:6b:bc:f1:e0:60:d7:ff:99:2d:fe:97:0e:8e:
e0:44:4f:5f:06:2e:4e:c3:2d:1f:89:9f:c9:2f:f2:
12:84:14:1a:fd:21:01:b9:fe:e9:d8:f6:d8:d8:72:
e9:85:78:70:ca:f5:bd:05:3f:b6:06:65:34:68:e9:
82:b3:96:1a:2b:c8:c5:54:63:44:10:cc:e2:65:a2:
ea:3d:5b:cb:24:90:e4:bd:c3:af:a6:d7:f9:7b:c8:
02:33:1d:bd:32:a7:16:3b:92:a9:d5:48:92:7d:44:
8c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B3:52:E1:9F:CA:0D:BA:0C:FD:C0:49:2C:7B:BE:37:95:E7:5C:10
X509v3 Authority Key Identifier:
keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/9CC8E63CE06E11EFA35596A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.33.0/24
Signature Algorithm: sha256WithRSAEncryption
62:af:0a:5f:6e:36:fb:61:80:14:83:d0:36:6d:26:00:34:f8:
3a:f6:52:59:08:98:fb:b5:91:d6:a6:13:a9:c0:41:90:46:ed:
65:8f:4c:d7:44:4f:d1:75:bd:60:56:24:cf:e7:99:7b:be:47:
9b:b9:a7:64:97:16:4a:75:a8:be:f0:2c:36:09:6c:6a:c2:09:
d2:32:0f:8e:59:31:b1:40:3b:46:8c:b8:11:43:95:6f:2b:39:
f6:bc:cc:b6:c7:ef:56:d8:b9:7b:b1:d9:7e:c8:f2:43:8c:a2:
e4:99:b6:2b:42:ac:a6:84:6e:d1:f7:15:04:52:4d:62:d2:64:
d6:89:3f:31:5b:f0:03:5a:d3:07:75:50:cf:e0:b4:35:c6:92:
c3:95:48:fe:c4:e7:72:f7:25:dd:b8:59:a4:31:7b:31:81:19:
a9:e8:f2:9b:52:d4:4a:58:41:74:4c:89:8d:d5:25:40:c6:67:
b8:09:46:67:fe:7a:61:28:2b:a0:2c:6b:71:6d:72:11:93:54:
09:b6:8a:1e:06:11:6c:d6:b8:c5:42:88:89:e0:98:55:30:6b:
c8:c1:41:02:03:e6:15:f2:63:02:2b:24:47:af:87:6f:72:df:
25:cd:77:11:e6:4e:2e:24:9b:91:39:b2:7a:95:46:07:db:a0:
65:4a:07:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:38 2025 by rpki-client