Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/4A776B14298B11EFB3DE7F497DDC24C2.roa
File: 4A776B14298B11EFB3DE7F497DDC24C2.roa (raw, json)
Hash identifier: iw3LWLgAdNnOZzR39MrgwdKDPLauqxFBpSP+XRyVoFY=
Subject key identifier: AA:10:16:D2:AC:17:7D:0F:77:71:4E:BC:24:73:3E:96:24:F8:26:9B
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 01BF
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/4A776B14298B11EFB3DE7F497DDC24C2.roa
Signing time: Thu 13 Jun 2024 13:46:10 +0000
ROA not before: Thu 13 Jun 2024 13:46:06 +0000
ROA not after: Thu 13 Jun 2030 13:46:06 +0000
asID: 205175
IP address blocks: 102.211.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF
Validity
Not Before: Jun 13 13:46:06 2024 GMT
Not After : Jun 13 13:46:06 2030 GMT
Subject: CN=666af822-bae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:f5:cd:b1:7c:3b:b2:8a:f9:e8:07:79:54:
7e:bb:12:64:0e:db:0e:1f:a1:98:db:00:8f:b5:b6:
59:40:00:11:5a:ba:ba:90:fd:2b:a0:4c:63:38:fd:
71:75:00:1b:e6:a8:d1:55:08:30:25:bd:17:18:e7:
00:52:92:9f:9c:1d:11:b9:57:9f:4a:cd:27:e1:bb:
f5:40:0a:b7:4f:51:f7:a5:1a:89:4d:2f:69:b9:23:
af:3a:6f:e3:4f:72:79:92:0a:c1:d3:51:0f:1a:83:
06:93:aa:0c:a1:54:4e:e6:9f:a4:31:de:4f:75:3a:
76:99:a7:ac:48:bf:e4:c4:e2:a8:5a:01:da:86:0c:
92:f3:ee:0e:5e:9d:73:77:f7:a5:fd:82:81:d9:b2:
41:60:59:dd:f3:27:87:52:67:d6:23:9f:50:17:b3:
ee:dd:83:b7:a7:1a:2a:9c:2f:49:87:d0:f3:72:8f:
f4:86:2b:28:ef:8f:97:a3:dd:8f:27:37:47:57:27:
f4:88:02:35:e9:0f:3f:ff:79:84:12:d0:55:88:cd:
c4:9c:50:a7:ad:90:d9:e4:b3:fc:56:f3:d7:01:d5:
63:cf:e9:99:24:d4:c5:d4:16:7c:49:6b:c5:c5:e3:
4c:60:29:92:1d:23:ba:4a:cd:fe:f9:35:b9:b3:ac:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:10:16:D2:AC:17:7D:0F:77:71:4E:BC:24:73:3E:96:24:F8:26:9B
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/4A776B14298B11EFB3DE7F497DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.232.0/24
Signature Algorithm: sha256WithRSAEncryption
01:74:bf:47:52:23:db:82:f5:e8:54:ae:d9:a8:83:55:b7:25:
75:09:1b:bd:eb:ad:89:03:5e:fe:e6:e4:3c:13:7c:5b:b2:86:
33:c0:85:7d:78:9e:4c:67:1e:d2:96:61:26:63:13:d3:10:a2:
67:39:18:62:d5:89:df:86:5d:4f:88:cc:d8:40:6d:cb:43:a1:
19:03:64:f8:84:f4:ee:da:a7:2e:b2:49:89:8b:6b:44:d1:4b:
52:32:9a:b8:d8:1a:bc:2b:00:9f:66:50:04:57:cd:a9:ac:89:
9f:73:ec:f1:2e:54:06:15:36:b7:f3:4a:b4:5e:7c:e7:ff:1e:
46:dc:23:3f:fe:9e:53:c0:39:69:2d:af:56:e6:66:a7:a6:ff:
03:03:16:27:ea:66:5e:46:d1:73:19:be:f2:8f:7c:ab:c3:3f:
22:c7:d2:ca:c4:41:13:f0:1d:a6:52:36:58:80:c4:8b:b6:9f:
63:fb:28:17:49:79:04:16:d0:28:1b:63:84:71:49:80:1a:54:
c4:9d:58:ed:2f:36:c1:a0:cf:60:89:43:3d:b6:e0:c3:2c:26:
a3:70:bb:05:4b:c0:53:be:42:45:4a:ff:f7:7c:86:4a:16:a4:
18:af:4e:7b:15:b0:32:81:0a:36:97:50:b5:ee:ec:98:49:3c:
3d:5f:25:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:46 2025 by rpki-client