Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/BDA909CACFB911EEA2EBAB6A775412E6.roa
File: BDA909CACFB911EEA2EBAB6A775412E6.roa (raw, json)
Hash identifier: oOsN7fS/FRC6cCK/W7sGcZ0zEfirLAaFD65Y5zMuPNM=
Subject key identifier: 79:19:C2:89:79:71:6D:CA:C8:7F:85:5B:7E:F0:04:4D:05:3F:3D:27
Certificate issuer: /CN=F36F4212AF/serialNumber=8E2A4D6FC5180D7D4758AA798C389802EEF3BFB3
Certificate serial: 02
Authority key identifier: 8E:2A:4D:6F:C5:18:0D:7D:47:58:AA:79:8C:38:98:02:EE:F3:BF:B3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/BDA909CACFB911EEA2EBAB6A775412E6.roa
Signing time: Tue 20 Feb 2024 06:31:55 +0000
ROA not before: Tue 20 Feb 2024 06:31:52 +0000
ROA not after: Wed 20 Feb 2030 06:31:52 +0000
asID: 328591
IP address blocks: 102.36.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F4212AF/serialNumber=8E2A4D6FC5180D7D4758AA798C389802EEF3BFB3
Validity
Not Before: Feb 20 06:31:52 2024 GMT
Not After : Feb 20 06:31:52 2030 GMT
Subject: CN=65d4475b-39d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:f9:85:40:15:05:8f:1b:f1:50:03:59:1c:
ce:63:25:ec:9c:33:71:7a:f2:53:fa:96:7e:e1:68:
b0:0f:74:85:62:04:c5:b8:be:6d:96:a5:03:ed:10:
c9:82:c9:c7:dd:51:47:7f:3f:c2:de:12:3b:e8:3f:
5f:db:60:af:61:b5:6e:12:32:6f:36:b3:e1:2b:2a:
34:28:e4:e5:50:ae:f1:1a:bb:6f:1a:e6:04:4b:dd:
7a:95:4b:96:d9:f1:d5:a8:63:80:e3:ae:ba:a3:9f:
cb:6d:7e:ff:47:50:d9:db:83:9d:23:d0:31:18:48:
dc:09:ec:35:4c:a5:24:d9:91:0f:bd:f7:05:7f:ae:
8c:0a:71:79:ac:68:03:ce:4e:cc:dc:c1:79:2d:2a:
6d:70:46:c1:c1:ff:74:b4:3c:b1:e0:3d:5f:04:67:
0b:91:aa:29:2a:ba:28:c1:89:da:17:a0:72:62:f0:
e4:78:e6:85:57:6d:db:80:ab:f3:41:e8:eb:17:67:
a6:34:62:f7:f5:53:06:2f:c6:6f:07:89:22:43:22:
59:f3:6a:f7:7c:bd:44:66:dd:23:00:64:04:4e:ad:
56:96:3f:70:8f:bc:4e:2d:3e:d5:fc:72:ea:40:f0:
17:29:e7:d7:a4:6a:ee:ba:0e:74:c9:84:e5:cb:4f:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:19:C2:89:79:71:6D:CA:C8:7F:85:5B:7E:F0:04:4D:05:3F:3D:27
X509v3 Authority Key Identifier:
keyid:8E:2A:4D:6F:C5:18:0D:7D:47:58:AA:79:8C:38:98:02:EE:F3:BF:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/BDA909CACFB911EEA2EBAB6A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.146.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a7:56:47:dd:c8:7a:0b:9c:a4:7d:b1:cd:d5:ef:6b:c4:79:
ff:c0:e0:3f:4e:29:50:0e:70:35:5c:57:5d:97:19:15:03:44:
27:9d:57:8c:1e:3c:7e:3b:bc:35:40:7f:56:96:85:3a:41:4f:
c0:2f:43:fa:18:31:66:88:62:ac:d8:69:ce:b8:0c:69:1e:cc:
4a:49:c8:f1:1d:2b:ef:2b:a8:09:57:aa:94:be:da:bf:46:ef:
6a:87:c3:ac:e5:85:a5:4c:1b:1d:ac:c1:88:1e:c2:04:1f:2a:
4b:08:f8:7c:32:3a:c0:ce:56:c2:69:f6:ec:72:be:12:26:f5:
64:e6:3d:82:34:76:23:10:e5:5f:38:01:51:e4:25:73:ee:7a:
b6:6a:03:31:62:84:fe:43:61:6e:25:e0:cf:61:10:b3:d6:5d:
ea:ae:46:db:aa:78:ea:04:3d:13:b2:5d:33:f8:5b:21:bf:d4:
d3:d4:aa:a1:f7:ef:12:02:db:ad:bd:66:3a:0e:f2:54:f3:9b:
9a:0e:32:63:65:92:d3:5e:74:af:01:46:9d:0b:b1:f3:46:56:
51:8e:46:03:ad:d0:10:77:43:38:3f:e8:d0:d1:2b:88:5b:18:
20:8f:d2:2c:d1:62:41:a2:d7:9c:59:24:df:9c:0f:36:e3:9b:
ff:74:2f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:57 2025 by rpki-client