Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/DC0411CAFA5711EFA0C15158762E951A.roa
File: DC0411CAFA5711EFA0C15158762E951A.roa (raw, json)
Hash identifier: 3eW9DvSOVij5SdKc0NclAvUK7jyKsaBWMt4dydb1suk=
Subject key identifier: 91:49:44:59:3A:49:B4:51:60:EB:06:5E:B0:58:86:27:38:BE:B9:F5
Certificate issuer: /CN=F36EE687AF/serialNumber=789ADAD338C20D7244DC7BE6D0F44A9253FC8F13
Certificate serial: 04
Authority key identifier: 78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/DC0411CAFA5711EFA0C15158762E951A.roa
Signing time: Thu 06 Mar 2025 06:54:33 +0000
ROA not before: Thu 06 Mar 2025 06:54:29 +0000
ROA not after: Fri 06 Mar 2026 06:54:29 +0000
asID: 328980
IP address blocks: 102.218.144.0/23 maxlen: 23
102.218.146.0/23 maxlen: 23
102.218.146.0/24 maxlen: 24
102.218.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EE687AF
Validity
Not Before: Mar 6 06:54:29 2025 GMT
Not After : Mar 6 06:54:29 2026 GMT
Subject: CN=67c946a9-bbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:57:d7:8a:10:f4:62:36:8f:c6:c8:78:be:
3c:a5:97:9a:7e:a3:33:de:8d:31:25:10:56:c4:ac:
43:93:bf:6e:76:67:8a:ea:8f:c4:9e:57:be:d7:ad:
57:38:c3:a9:3d:05:f4:78:67:73:b4:45:ee:d5:19:
42:89:03:55:6b:20:40:02:8c:fd:3e:06:95:4c:e9:
37:d7:cf:60:54:26:0f:cb:20:c1:ed:fd:6a:6d:22:
17:af:27:0c:b4:5b:49:be:e6:a7:88:d5:48:12:ba:
b6:31:01:ab:33:d6:c5:c8:6d:46:08:93:5c:c5:0a:
b6:44:c4:a8:48:fd:df:ab:6d:35:91:a1:45:fe:d5:
25:e7:43:a8:14:56:5b:de:f1:76:20:51:c0:bc:ee:
3f:ef:6e:48:9a:57:3e:b8:9c:d4:02:93:3c:69:b4:
78:e7:aa:0f:cd:34:e5:fb:58:b0:09:25:b7:b3:04:
53:21:9b:65:f6:07:9e:a2:f5:0a:02:d5:b0:4d:32:
c5:cf:3f:a8:8f:28:c9:a0:c6:15:19:97:a0:69:d8:
d4:22:f0:eb:85:c1:91:35:68:b3:d1:64:37:c0:38:
ec:60:a7:d1:23:e3:9f:3a:25:1c:4d:07:f1:2f:c2:
76:39:b4:b4:a9:2b:e1:bb:f7:76:1e:75:2b:7a:30:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:49:44:59:3A:49:B4:51:60:EB:06:5E:B0:58:86:27:38:BE:B9:F5
X509v3 Authority Key Identifier:
keyid:78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/DC0411CAFA5711EFA0C15158762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.144.0/22
Signature Algorithm: sha256WithRSAEncryption
45:bb:0e:7a:dc:b9:b1:7c:84:e0:0a:56:1e:69:ea:7b:31:39:
52:11:9a:25:bb:d0:07:d7:8c:2c:87:64:d1:fd:73:ab:e1:78:
7e:6d:41:e3:5a:c2:a6:cf:63:19:2e:a0:8f:f3:67:18:bd:c6:
f5:86:88:36:ee:ec:07:21:98:cf:44:ea:3b:b0:19:9a:19:b5:
56:47:38:56:ca:03:f0:cf:75:fc:c1:66:a6:cf:71:f2:b0:6c:
e3:a3:cd:dd:39:30:eb:9f:ed:dc:f0:31:cb:d1:5e:f9:c5:0a:
7b:a4:35:d0:85:28:35:66:db:a1:51:6f:98:c6:19:bc:02:a4:
92:10:a0:0c:12:88:01:05:41:1e:08:6a:eb:1c:66:64:6c:5f:
95:4c:e7:d5:49:c4:84:58:8c:a1:13:5e:22:56:83:07:68:b2:
f3:8e:d3:70:e6:25:52:fc:2e:c2:d3:e8:89:ef:ee:97:77:1e:
b9:d8:de:d2:97:0d:96:7e:9e:e6:8f:45:2a:52:b0:d2:fd:88:
df:6c:a9:e2:44:62:c0:43:e9:ff:d9:87:af:6c:c9:96:ba:ee:
53:9b:f0:18:08:13:c8:9f:36:23:1d:40:9b:2d:12:0d:ac:5c:
c1:57:e5:29:86:b2:a2:02:c8:c0:2c:4b:01:cf:13:fe:b8:4b:
38:2b:68:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:27 2025 by rpki-client