Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/1E5FEBEE48F011EFB9BFD745762E951A.roa
File: 1E5FEBEE48F011EFB9BFD745762E951A.roa (raw, json)
Hash identifier: PTqvlhOUii83LEr1qJ+vZHVrSOoJNI+jvnvWw3B5l+8=
Subject key identifier: A4:8E:13:1A:56:E6:D1:96:19:07:B7:EC:06:9B:DB:77:6D:CA:18:61
Certificate issuer: /CN=F36E68C0AF/serialNumber=8C4E77FA322349C0B27F01763233AE47B0DC9AF3
Certificate serial: 02
Authority key identifier: 8C:4E:77:FA:32:23:49:C0:B2:7F:01:76:32:33:AE:47:B0:DC:9A:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jE53-jIjScCyfwF2MjOuR7DcmvM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/1E5FEBEE48F011EFB9BFD745762E951A.roa
Signing time: Tue 23 Jul 2024 12:36:01 +0000
ROA not before: Tue 23 Jul 2024 12:35:58 +0000
ROA not after: Tue 23 Jul 2030 12:35:58 +0000
asID: 328464
IP address blocks: 102.222.240.0/22 maxlen: 22
2c0f:4f80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E68C0AF
Validity
Not Before: Jul 23 12:35:58 2024 GMT
Not After : Jul 23 12:35:58 2030 GMT
Subject: CN=669fa3b1-7ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:83:4f:21:09:19:d5:a5:b5:4b:26:4d:3b:
75:d2:10:0c:55:f5:d7:e9:a1:6d:07:04:0d:0d:c5:
ed:84:d4:3d:f0:c9:de:d0:9d:57:49:c4:34:3a:38:
90:e1:c6:d2:b1:d6:d0:cb:95:6b:7b:39:6d:cb:4b:
d0:9b:88:94:e6:ab:d4:de:36:36:8e:8a:60:f6:70:
c2:f0:a0:01:4f:ab:42:13:02:45:fe:f8:1f:0b:f0:
4b:3a:a0:11:be:6d:ad:d0:91:0c:a6:7d:22:e6:2c:
4f:5d:b8:6e:14:f2:08:a2:9b:d8:4b:5b:69:0f:27:
a7:d7:76:72:89:bf:70:c6:1d:15:e6:44:6c:3e:25:
8b:64:ae:d6:07:26:d6:9b:b9:a8:7a:6b:c6:d0:f5:
01:c9:35:bb:a9:50:4f:47:a4:2c:27:bb:5f:d9:11:
65:9a:1f:c9:dd:fd:e4:f5:be:69:1c:24:a6:6e:62:
64:02:ae:3e:36:1e:55:06:44:91:ef:e6:4d:43:82:
e6:e0:bd:52:90:36:e8:e2:a5:26:45:08:69:09:ce:
5c:69:da:02:8c:de:67:37:32:24:03:14:5f:5c:22:
f6:62:f5:35:b8:6c:1e:a5:00:30:40:7e:1b:37:fd:
4c:59:90:e8:07:08:ab:08:9c:95:d0:54:a0:83:5f:
71:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8E:13:1A:56:E6:D1:96:19:07:B7:EC:06:9B:DB:77:6D:CA:18:61
X509v3 Authority Key Identifier:
keyid:8C:4E:77:FA:32:23:49:C0:B2:7F:01:76:32:33:AE:47:B0:DC:9A:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jE53-jIjScCyfwF2MjOuR7DcmvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/1E5FEBEE48F011EFB9BFD745762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.240.0/22
IPv6:
2c0f:4f80::/32
Signature Algorithm: sha256WithRSAEncryption
a7:b7:92:04:e3:11:2d:9e:22:82:c4:ae:bd:fa:e8:46:18:2a:
d6:2a:ac:e9:46:62:06:fb:05:23:46:d8:97:86:15:f2:c7:38:
57:25:a5:98:1d:42:dc:cf:37:bf:7a:59:17:9f:88:b6:35:71:
3e:5c:1b:43:98:2c:79:9b:23:b3:84:59:80:ce:de:08:11:23:
1f:c6:67:ac:2e:c8:0c:7a:45:f4:d1:87:3d:f4:55:6e:f1:ac:
bb:57:29:4b:66:b9:4d:c0:97:65:95:31:e4:43:54:a7:6f:2a:
b0:9e:2b:2b:5a:1a:07:5b:69:01:2e:52:47:6a:de:f3:12:8c:
6e:cb:9e:61:79:a1:93:19:54:46:c5:44:e4:55:4b:13:c1:76:
12:a7:d4:c1:12:5c:64:29:d7:f8:25:31:ed:43:e1:86:ba:e2:
af:d7:1d:64:c4:9c:71:82:da:4d:70:d4:98:4a:ec:46:5e:a8:
54:36:69:0b:1c:ed:ea:92:81:d0:5b:a7:22:8c:e5:77:b1:8a:
d5:11:40:74:2c:14:19:6e:d7:6d:e2:be:ba:8f:6a:8a:70:01:
8b:1c:1c:f8:68:f0:d0:97:a0:07:b2:d7:d2:9d:4c:b8:8d:ad:
a9:8c:b0:1f:62:ad:f1:d2:1f:4b:fe:f2:ea:b0:2b:15:c9:fa:
70:e0:06:07
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
NjhDMEFGMTEwLwYDVQQFEyg4QzRFNzdGQTMyMjM0OUMwQjI3RjAxNzYzMjMzQUU0
N0IwREM5QUYzMB4XDTI0MDcyMzEyMzU1OFoXDTMwMDcyMzEyMzU1OFowGDEWMBQG
A1UEAxMNNjY5ZmEzYjEtN2VhODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANAvg08hCRnVpbVLJk07ddIQDFX11+mhbQcEDQ3F7YTUPfDJ3tCdV0nENDo4
kOHG0rHW0MuVa3s5bctL0JuIlOar1N42No6KYPZwwvCgAU+rQhMCRf74HwvwSzqg
Eb5trdCRDKZ9IuYsT124bhTyCKKb2EtbaQ8np9d2com/cMYdFeZEbD4li2Su1gcm
1pu5qHprxtD1Ack1u6lQT0ekLCe7X9kRZZofyd395PW+aRwkpm5iZAKuPjYeVQZE
ke/mTUOC5uC9UpA26OKlJkUIaQnOXGnaAozeZzcyJAMUX1wi9mL1NbhsHqUAMEB+
Gzf9TFmQ6AcIqwicldBUoINfcW0CAwEAAaOCArQwggKwMB0GA1UdDgQWBBSkjhMa
VubRlhkHt+wGm9t3bcoYYTAfBgNVHSMEGDAWgBSMTnf6MiNJwLJ/AXYyM65HsNya
8zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTY4QzAvM0VDRTg5NUU0OEVGMTFFRkJBQjkzNUJGNzYyRTk1MUEvakU1My1q
SWpTY0N5ZndGMk1qT3VSN0RjbXZNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvakU1My1qSWpTY0N5ZndGMk1qT3VSN0RjbXZNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTY4QzAvM0VDRTg5NUU0OEVGMTFFRkJBQjkzNUJGNzYy
RTk1MUEvMUU1RkVCRUU0OEYwMTFFRkI5QkZENzQ1NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbe8DANBAIAAjAHAwUALA9P
gDANBgkqhkiG9w0BAQsFAAOCAQEAp7eSBOMRLZ4igsSuvfroRhgq1iqs6UZiBvsF
I0bYl4YV8sc4VyWlmB1C3M83v3pZF5+ItjVxPlwbQ5gseZsjs4RZgM7eCBEjH8Zn
rC7IDHpF9NGHPfRVbvGsu1cpS2a5TcCXZZUx5ENUp28qsJ4rK1oaB1tpAS5SR2re
8xKMbsueYXmhkxlURsVE5FVLE8F2EqfUwRJcZCnX+CUx7UPhhrrir9cdZMSccYLa
TXDUmErsRl6oVDZpCxzt6pKB0FunIozld7GK1RFAdCwUGW7XbeK+uo9qinABixwc
+Gjw0JegB7LX0p1MuI2tqYywH2Kt8dIfS/7y6rArFcn6cOAGBw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:58 2025 by rpki-client