Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/5242EE0A8BCD11EFBC698FA8762E951A.roa
File: 5242EE0A8BCD11EFBC698FA8762E951A.roa (raw, json)
Hash identifier: 5MVIpnD2gyz7narxFgIImrPbVzBFOrySGPBpj0cklPs=
Subject key identifier: D7:C6:55:0B:5B:3C:DD:37:65:35:85:4C:78:B8:AA:F2:74:C0:13:75
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 0254
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/5242EE0A8BCD11EFBC698FA8762E951A.roa
Signing time: Wed 16 Oct 2024 14:45:44 +0000
ROA not before: Wed 16 Oct 2024 14:45:36 +0000
ROA not after: Wed 16 Oct 2030 14:45:36 +0000
asID: 834
IP address blocks: 102.211.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 596 (0x254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF
Validity
Not Before: Oct 16 14:45:36 2024 GMT
Not After : Oct 16 14:45:36 2030 GMT
Subject: CN=670fd198-d274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:c4:93:df:31:1b:45:be:48:f7:d0:a6:f1:
dc:28:05:69:56:c1:4b:43:6b:54:94:93:1d:d3:d6:
1e:ca:43:d5:50:e2:f3:8a:b4:4f:b6:d8:df:bd:a0:
2a:22:4c:0b:44:de:43:66:99:2e:63:07:8c:54:82:
85:08:8a:f6:8a:ee:96:bc:b9:99:bd:a3:9b:1d:0f:
53:61:6c:56:62:e2:aa:87:f1:c1:d2:18:b0:20:4b:
86:67:2e:ce:bb:e2:f4:5b:ae:9e:4a:82:7d:7c:dd:
7c:be:8e:78:6e:d2:ac:67:45:da:27:3e:77:6e:90:
23:68:21:a3:7b:b4:0f:d1:66:1a:ed:37:ac:61:9a:
59:a6:3b:5e:eb:5c:e0:62:4f:b2:43:86:b8:cc:9e:
d5:f4:2c:45:a1:a6:10:4d:35:ee:21:af:92:dd:39:
bb:ef:78:16:b1:6b:61:ca:da:88:3b:17:0f:69:16:
3d:0b:51:1f:66:a5:dc:80:13:29:f5:0e:7e:04:67:
11:0d:56:a5:ab:a1:b8:fc:93:06:e7:20:21:9a:84:
30:fb:90:f0:cb:a2:70:d6:6d:2a:df:4b:4e:e3:71:
b0:be:16:6b:17:f6:63:ec:11:2e:7b:e0:da:58:69:
bf:7d:9c:06:d5:fe:6f:fa:dc:41:b6:8d:76:78:f3:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C6:55:0B:5B:3C:DD:37:65:35:85:4C:78:B8:AA:F2:74:C0:13:75
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/5242EE0A8BCD11EFBC698FA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.232.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d3:c0:69:ac:32:41:52:aa:33:ed:c3:81:cc:f1:ef:75:fc:
a6:8d:94:67:e4:df:f7:b3:d1:9d:00:58:6d:30:79:e1:31:4a:
fc:57:fb:31:ef:5f:f7:19:74:e1:52:17:b3:26:01:99:55:c9:
55:f6:04:83:ff:e6:fb:24:f9:70:c8:54:6a:68:82:c2:e1:d9:
1b:41:cc:6d:54:fe:ac:60:9d:e6:3c:48:50:a5:80:ba:5d:b1:
2a:36:65:c5:13:ed:ba:b1:ae:7d:24:35:c7:5c:c6:5d:fb:ae:
39:cf:65:ba:d4:33:7e:2d:5c:33:75:64:66:a8:4c:8c:43:7d:
29:e3:c2:25:7d:4e:01:2d:ee:cd:8b:99:63:64:6c:0b:76:9a:
eb:64:42:8a:1a:60:f7:12:b8:2b:92:c6:8b:00:5e:15:0c:1e:
c4:45:9c:6a:3f:e1:cc:83:b5:ab:fd:2e:48:73:eb:e8:ca:50:
8a:2e:90:8e:f6:e4:6e:fd:f7:d7:0f:24:56:ac:9d:ea:af:d8:
04:7b:ae:1f:c0:86:09:d2:0e:37:75:86:43:d3:a9:15:17:01:
d0:79:7d:50:db:db:2c:b4:6c:98:2d:45:f3:53:c9:22:c7:2a:
9b:90:46:20:c0:8a:67:e3:4f:55:9d:2c:6f:43:b3:46:64:40:
83:ae:b8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:25 2025 by rpki-client