Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/A9777DB400A111F0BFE5D984762E951A.roa
File: A9777DB400A111F0BFE5D984762E951A.roa (raw, json)
Hash identifier: /NRI84ju86WCQqU5dc2FqAKEMK10FL0ooHDMUCIRqrU=
Subject key identifier: C7:25:50:0B:38:4D:03:FA:ED:CD:2A:E8:67:B4:94:62:F5:5C:CA:DA
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 02F8
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/A9777DB400A111F0BFE5D984762E951A.roa
Signing time: Fri 14 Mar 2025 06:57:58 +0000
ROA not before: Fri 14 Mar 2025 06:57:54 +0000
ROA not after: Thu 14 Mar 2030 06:57:54 +0000
asID: 141718
IP address blocks: 102.212.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 760 (0x2f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF
Validity
Not Before: Mar 14 06:57:54 2025 GMT
Not After : Mar 14 06:57:54 2030 GMT
Subject: CN=67d3d376-f74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:26:b7:b0:47:b7:30:f8:03:09:f9:31:d0:
86:0e:96:99:e7:16:a0:87:34:71:d8:bd:ac:03:3f:
98:8b:55:50:37:2a:5d:92:52:1b:65:43:a3:b2:1c:
4f:60:b7:4b:38:93:0d:e6:42:7b:10:4a:24:bb:cb:
11:6a:41:7f:f4:e3:d1:a3:97:fb:3c:a4:6a:71:77:
98:f3:b5:08:88:ce:01:56:98:6c:4b:53:ef:89:2c:
85:97:b5:43:ad:91:7b:bc:06:25:af:67:c3:23:1e:
b1:3a:09:d8:06:30:a9:a4:a6:60:64:b9:f4:6c:38:
5b:86:c4:bb:b3:4f:c7:6e:ac:ce:e8:c8:65:43:db:
13:40:1c:cb:25:da:4c:e9:1b:b7:ab:44:92:d7:15:
5b:90:57:15:25:46:6c:65:d8:f7:d7:7c:8a:c1:ba:
17:70:52:5a:76:5a:5b:aa:09:7f:e7:85:5c:1e:51:
2e:cd:6b:a7:50:01:c5:2b:94:ea:ea:07:20:43:ac:
ab:73:1a:6d:9a:ad:ba:31:19:e5:2f:4b:17:4a:35:
71:d1:f9:d9:7b:c7:ba:34:8e:0d:ac:e4:2a:49:ce:
b6:24:71:8e:0c:f1:e9:8f:8e:dc:26:5c:23:45:78:
bc:b8:23:78:15:d1:b1:be:9a:38:bc:a1:cd:c0:b3:
af:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:25:50:0B:38:4D:03:FA:ED:CD:2A:E8:67:B4:94:62:F5:5C:CA:DA
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/A9777DB400A111F0BFE5D984762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.5.0/24
Signature Algorithm: sha256WithRSAEncryption
01:48:24:67:47:59:56:d7:46:ef:6e:67:94:27:89:dd:b1:fe:
be:87:83:6e:75:4a:90:79:cb:3e:24:b6:90:e1:e0:8a:8d:bd:
cc:1b:74:16:e6:be:9e:5f:c6:57:a4:3b:ce:7a:2c:00:5b:f5:
3b:dd:89:5e:b8:b8:5d:69:b1:87:54:6a:24:ae:25:1e:a6:62:
db:6d:da:0c:48:42:59:a4:19:ad:86:60:76:9f:19:ee:4e:f9:
16:b5:dc:cf:b5:ca:7b:78:eb:64:76:63:57:47:54:ea:53:77:
39:8c:9d:69:51:c8:2e:40:86:a3:f2:bd:17:86:49:e0:aa:78:
99:ee:91:67:df:49:e7:97:53:4a:8a:b7:34:30:c1:a6:cd:56:
9a:82:75:1d:72:07:a7:4a:3a:7c:3f:7e:3a:70:66:29:22:a6:
d5:64:bc:0a:1c:f0:72:44:8c:c5:bd:ff:cc:1e:3d:57:64:46:
18:b4:42:bd:25:ae:67:93:43:99:b5:32:a7:f3:01:7d:ae:8b:
a4:49:13:16:ef:7d:3f:40:46:e0:e8:43:3c:63:92:a5:4e:6b:
11:09:93:04:ba:c3:67:ff:50:f5:fb:3a:f1:38:3a:78:c0:04:
e4:e1:1f:25:6c:df:d3:ce:9c:ed:f4:1b:71:11:46:30:73:44:
6d:cd:31:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:58:59 2025 by rpki-client