Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/6076E1720C9611EF96EBFA69017001B1.roa
File: 6076E1720C9611EF96EBFA69017001B1.roa (raw, json)
Hash identifier: 5glwlgHkaBiYALzWVqzeb766bLh2ebSj5gpo29WXJ6E=
Subject key identifier: BB:BD:14:C6:06:4D:D3:4B:DA:4F:EE:00:4C:12:0B:90:94:34:4A:3B
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 0187
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/6076E1720C9611EF96EBFA69017001B1.roa
Signing time: Tue 07 May 2024 17:22:27 +0000
ROA not before: Tue 07 May 2024 17:22:24 +0000
ROA not after: Tue 07 May 2030 17:22:24 +0000
asID: 29802
IP address blocks: 102.211.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF
Validity
Not Before: May 7 17:22:24 2024 GMT
Not After : May 7 17:22:24 2030 GMT
Subject: CN=663a6353-784a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:ce:c9:2f:65:b2:71:05:82:75:30:8f:14:
14:67:6b:c8:41:88:70:e4:e8:66:16:78:29:88:c0:
84:9a:d3:fb:96:ac:17:73:db:7c:45:df:28:5f:13:
d9:c5:fc:c1:b4:54:47:f6:76:38:9a:f2:7e:31:4d:
4c:a2:eb:93:32:4d:54:af:9e:47:80:bb:65:95:58:
40:dd:a4:f7:fe:d3:31:9a:49:a9:5c:3e:e8:5b:85:
83:f7:8e:6f:ba:c9:d8:81:51:81:58:0b:33:b6:0c:
af:17:91:f6:d8:bb:d3:90:2e:1e:d6:96:ae:37:24:
47:8c:33:cb:53:06:1e:c9:cb:67:16:79:09:a9:44:
f9:3d:e4:3f:2d:af:b6:fa:88:42:ea:2f:6a:87:9b:
41:a2:75:43:dc:da:b9:d7:f4:21:e9:7a:c5:9f:ee:
56:49:9b:a9:67:23:23:ce:50:5c:78:8e:a2:65:69:
32:0a:e7:ae:80:d5:06:ef:ea:c0:5b:6f:f3:54:7c:
54:c5:ef:d8:35:2d:37:85:25:ac:b9:96:8a:da:cf:
10:7c:bb:87:38:77:18:22:ce:2b:a9:45:8f:f0:4b:
0a:9d:b3:54:f8:e7:99:2b:e2:43:65:81:9c:5f:0e:
18:e9:ad:77:d7:2c:c7:80:00:1b:53:36:56:e5:7a:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BD:14:C6:06:4D:D3:4B:DA:4F:EE:00:4C:12:0B:90:94:34:4A:3B
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/6076E1720C9611EF96EBFA69017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.235.0/24
Signature Algorithm: sha256WithRSAEncryption
92:89:2b:ad:ce:b8:17:3e:10:33:c9:b8:c3:59:e8:e8:50:48:
77:f0:b7:90:2e:46:d4:f1:8a:04:8c:b4:e0:70:93:61:cd:e9:
7a:d6:93:b6:03:b9:b7:dd:53:1b:a1:2d:1e:b3:9b:bd:e8:73:
63:36:2d:27:64:02:eb:be:97:a7:45:2b:36:f6:a1:a9:37:71:
6a:42:3f:29:2a:12:17:22:b1:de:df:7d:49:47:2a:c1:9e:02:
83:55:b0:74:ed:0c:62:78:0b:8b:3c:c8:e8:65:40:6e:32:6f:
7f:f4:92:67:3a:0e:0b:f6:5c:31:82:c3:c7:5c:1f:21:25:2b:
51:30:53:54:d4:6d:0f:12:4c:81:a1:10:40:8c:4a:c5:5e:19:
06:78:a1:25:36:fe:76:62:9f:67:ba:b3:25:27:44:a8:d7:bc:
bf:42:ca:f6:52:eb:14:31:dc:23:40:e1:c3:8f:6f:f7:fc:bd:
75:c7:6b:a2:ea:5a:f7:85:8d:9b:ee:40:2f:2c:a2:f7:36:e5:
70:fb:93:2d:53:1b:4b:b9:49:6a:a3:62:96:49:48:52:7f:3e:
c4:22:6c:a8:ff:19:ea:40:42:d2:fa:c0:66:4e:46:d8:f4:d0:
f4:f2:96:a4:8d:45:e1:a5:c8:b7:32:58:97:84:f2:07:be:8f:
9c:74:30:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:46 2025 by rpki-client