Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/CEF17564ABF511EFBDA49866762E951A.roa
File: CEF17564ABF511EFBDA49866762E951A.roa (raw, json)
Hash identifier: 8BXeQXZRcKRCn2PxlkZ/H8leejJBWYahhy9w+VGTV0w=
Subject key identifier: D0:E0:18:9D:35:AD:DB:A9:28:EF:A4:85:FA:FA:AB:D7:E3:0D:8A:BE
Certificate issuer: /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial: 0259
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/CEF17564ABF511EFBDA49866762E951A.roa
Signing time: Tue 26 Nov 2024 12:56:10 +0000
ROA not before: Tue 26 Nov 2024 12:56:06 +0000
ROA not after: Tue 01 Jan 2030 12:56:06 +0000
asID: 37684
IP address blocks: 102.207.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CAF
Validity
Not Before: Nov 26 12:56:06 2024 GMT
Not After : Jan 1 12:56:06 2030 GMT
Subject: CN=6745c56a-e3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:a6:9b:d2:df:26:f8:b8:6d:e4:a3:eb:8f:
77:52:46:b0:2c:9d:ab:78:5c:97:7e:a9:72:bc:00:
8b:18:d9:e1:b8:b2:38:c4:d4:13:bf:20:7d:80:c9:
92:b3:68:44:8e:3c:55:80:2b:07:92:9e:71:de:40:
d3:00:fc:2e:41:86:b3:a2:97:0d:17:f4:3f:1c:2a:
95:35:30:b6:85:66:9d:53:93:1c:65:8b:27:db:ee:
74:14:8a:69:c0:ab:bc:9c:6d:d0:45:5d:db:a0:fc:
d9:a3:39:11:a7:24:97:dd:ac:63:53:dc:01:78:d5:
9b:c7:f4:86:61:44:07:e9:26:41:5f:ae:18:ba:60:
83:10:b5:93:60:3f:fb:5c:f4:29:3d:37:49:1c:fc:
3d:ad:bf:06:f3:dc:33:db:5f:52:0d:26:cb:83:ab:
7f:7f:d9:2d:06:c8:e3:88:c3:74:96:02:09:88:39:
38:95:5a:e7:3b:76:3f:2d:11:ef:b6:24:64:31:8b:
d8:07:92:09:55:f4:78:1c:af:0e:be:bb:53:5e:21:
93:44:72:0d:be:2b:ef:9b:85:b1:c8:0b:ef:81:1b:
4b:c9:83:62:bc:d9:97:cb:6b:da:07:85:1b:cd:69:
cd:70:49:a2:51:3d:6c:e7:fc:82:8f:6a:48:9b:46:
ea:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E0:18:9D:35:AD:DB:A9:28:EF:A4:85:FA:FA:AB:D7:E3:0D:8A:BE
X509v3 Authority Key Identifier:
keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/CEF17564ABF511EFBDA49866762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.148.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:6e:d1:ca:23:fc:2e:80:07:e1:88:ab:61:71:71:ac:a9:b4:
96:47:0c:27:dc:f6:24:25:80:02:18:9b:9c:9d:71:20:ae:6d:
57:20:e2:bc:78:4e:84:bf:4c:fc:58:3d:68:ac:39:47:02:0b:
ac:16:73:a2:03:02:88:18:ca:26:86:58:82:b1:a7:66:a8:ec:
80:c3:8e:23:6f:bd:b8:66:19:09:25:20:05:07:9e:b5:15:74:
b2:bd:20:84:0f:28:db:fb:a1:31:59:c6:0d:e6:3d:eb:1b:c0:
12:4d:8f:a7:b6:7d:06:65:71:87:3f:37:f9:61:91:c2:51:1c:
24:0c:03:fd:90:bc:ac:6d:ee:f0:fc:17:55:09:ae:e3:86:10:
cb:87:82:47:08:de:bc:0d:ef:5b:e8:bf:eb:9c:66:5d:d1:64:
88:03:cb:5e:f2:88:78:1b:70:30:2e:f8:b4:1d:7f:31:27:c4:
a5:37:97:ea:e7:9a:07:9d:25:1a:ca:ad:67:ff:b5:84:b3:46:
1f:c9:4c:13:ad:ae:01:43:90:5f:30:6c:42:ee:ff:7a:0c:0b:
69:c7:54:4f:30:d6:7e:7a:5c:72:f5:5b:99:c7:46:0d:64:65:
97:00:a1:f1:e7:3f:b9:91:08:e9:da:5d:ea:03:1e:42:91:8b:
2c:c4:56:d6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTJCOENBRjExMC8GA1UEBRMoODcyMTMwRTY5QjNGQjgwMzVCMUIyNUQzRjZGQjk3
NEEyQTA3OEVDQzAeFw0yNDExMjYxMjU2MDZaFw0zMDAxMDExMjU2MDZaMBgxFjAU
BgNVBAMTDTY3NDVjNTZhLWUzZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdN6ab0t8m+Lht5KPrj3dSRrAsnat4XJd+qXK8AIsY2eG4sjjE1BO/IH2A
yZKzaESOPFWAKweSnnHeQNMA/C5BhrOilw0X9D8cKpU1MLaFZp1Tkxxliyfb7nQU
imnAq7ycbdBFXdug/NmjORGnJJfdrGNT3AF41ZvH9IZhRAfpJkFfrhi6YIMQtZNg
P/tc9Ck9N0kc/D2tvwbz3DPbX1INJsuDq39/2S0GyOOIw3SWAgmIOTiVWuc7dj8t
Ee+2JGQxi9gHkglV9Hgcrw6+u1NeIZNEcg2+K++bhbHIC++BG0vJg2K82ZfLa9oH
hRvNac1wSaJRPWzn/IKPakibRurDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0OAY
nTWt26ko76SF+vqr1+MNir4wHwYDVR0jBBgwFoAUhyEw5ps/uANbGyXT9vuXSioH
jswwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUyQjhDL0M4RjlERjFFMEI2MjExRUU4NjJEODY4QTRBRDlFNkZDL2h5RXc1
cHNfdUFOYkd5WFQ5dnVYU2lvSGpzdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2h5RXc1cHNfdUFOYkd5WFQ5dnVYU2lvSGpzdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkUyQjhDL0M4RjlERjFFMEI2MjExRUU4NjJEODY4QTRB
RDlFNkZDL0NFRjE3NTY0QUJGNTExRUZCREE0OTg2Njc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmz5QwDQYJKoZIhvcNAQEL
BQADggEBAC5u0coj/C6AB+GIq2FxcayptJZHDCfc9iQlgAIYm5ydcSCubVcg4rx4
ToS/TPxYPWisOUcCC6wWc6IDAogYyiaGWIKxp2ao7IDDjiNvvbhmGQklIAUHnrUV
dLK9IIQPKNv7oTFZxg3mPesbwBJNj6e2fQZlcYc/N/lhkcJRHCQMA/2QvKxt7vD8
F1UJruOGEMuHgkcI3rwN71vov+ucZl3RZIgDy17yiHgbcDAu+LQdfzEnxKU3l+rn
mgedJRrKrWf/tYSzRh/JTBOtrgFDkF8wbELu/3oMC2nHVE8w1n56XHL1W5nHRg1k
ZZcAofHnP7mRCOnaXeoDHkKRiyzEVtY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:10 2025 by rpki-client