Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/A798BB92B7BE11EFBBD7D5A6762E951A.roa
File: A798BB92B7BE11EFBBD7D5A6762E951A.roa (raw, json)
Hash identifier: +g8MeAXdeAtTT98H/YM8sl9WTYj5dC794WszOCkagdY=
Subject key identifier: 47:9D:BC:24:2A:CC:F0:8F:FB:A1:90:C9:96:34:10:F9:DA:3D:4B:E8
Certificate issuer: /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial: 1D
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/A798BB92B7BE11EFBBD7D5A6762E951A.roa
Signing time: Wed 11 Dec 2024 12:51:36 +0000
ROA not before: Wed 11 Dec 2024 12:51:32 +0000
ROA not after: Fri 01 Dec 2034 12:51:32 +0000
asID: 328467
IP address blocks: 102.67.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362793FAF
Validity
Not Before: Dec 11 12:51:32 2024 GMT
Not After : Dec 1 12:51:32 2034 GMT
Subject: CN=67598ad7-8a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f4:a7:f0:64:af:c8:b4:bd:81:54:60:e1:88:
08:73:61:14:47:c8:73:84:13:ec:2f:e3:8d:37:50:
f9:83:0a:df:7b:21:49:cb:0b:18:45:2e:7e:ca:23:
4a:d0:1f:f1:a1:fd:b7:4a:1b:ee:83:e7:19:15:19:
8f:4a:61:94:a2:63:0f:8d:34:10:2b:66:a0:41:fc:
0d:8c:3b:51:0a:89:28:35:cb:f6:e2:8d:94:66:f9:
02:51:05:26:fb:47:7b:f1:cd:87:21:4d:a2:0a:13:
7b:9c:26:ea:d0:2b:50:6c:67:fa:fa:d1:5d:ec:ae:
33:6b:9c:51:68:72:bf:ff:85:8d:bb:e7:e1:42:3e:
b2:64:f9:ef:a5:58:36:0e:1e:3d:aa:38:02:26:cc:
e9:9f:e2:e1:85:39:57:1e:19:0a:0e:09:85:ea:80:
99:98:f0:15:ff:4a:cc:a4:01:46:17:80:85:f1:70:
43:af:01:5a:34:bc:ac:a0:be:02:f2:43:66:4f:46:
c3:ea:2c:9d:fb:c5:93:d2:6a:a3:0e:ed:c7:e9:c5:
f7:e2:f8:aa:23:3d:d9:4f:45:df:a1:0e:b6:06:3d:
2b:27:b5:0c:4b:ca:9f:e7:ca:d5:85:df:40:ce:ef:
31:fa:40:7a:1c:e6:ec:c9:2c:ee:01:f1:df:30:79:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9D:BC:24:2A:CC:F0:8F:FB:A1:90:C9:96:34:10:F9:DA:3D:4B:E8
X509v3 Authority Key Identifier:
keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/A798BB92B7BE11EFBBD7D5A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.128.0/21
Signature Algorithm: sha256WithRSAEncryption
40:06:ee:dd:cf:72:16:06:2f:25:00:87:d7:f1:fc:75:3a:4a:
fb:96:0b:cd:a5:6f:6f:24:73:ad:1a:cf:5c:15:3c:70:5f:47:
cd:3c:39:02:b5:4a:e3:61:1a:45:10:b7:b3:f0:6d:cf:e4:7b:
d5:b5:32:b9:6f:d6:a1:af:c8:00:79:d2:b3:2a:9c:b5:70:04:
34:11:02:a9:dd:4b:f0:3c:1a:06:4d:08:bd:64:19:29:11:42:
9c:2b:23:ba:15:db:70:ba:76:8e:97:2c:b4:17:be:88:d6:04:
f7:64:54:4e:7e:2e:e1:93:2c:83:a5:08:ee:2a:a7:6e:76:40:
05:da:74:00:ca:45:22:a5:40:27:53:da:5d:90:c0:4c:ff:d2:
68:bb:93:64:d7:86:9a:3a:eb:d0:bd:df:d8:c8:ff:1c:f5:fe:
34:9d:b0:b6:d4:0e:6a:d2:41:3d:5b:6c:d4:cb:1a:5d:fb:a1:
86:f1:77:a9:7e:d6:3d:e9:5f:8c:cb:3a:2c:dd:a1:80:2b:63:
e2:c0:51:86:33:69:9b:aa:0e:e9:21:a4:e2:fe:69:68:bb:1a:
44:46:0d:ff:bb:0d:e6:83:52:c8:4b:61:25:2a:3e:8c:45:c8:
d1:f9:df:0c:bc:df:8f:f0:b0:fb:07:91:27:39:c5:d4:00:4b:
98:b6:8b:38
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBHTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
NzkzRkFGMTEwLwYDVQQFEyhEQUE4NzJGRjlBMDQ0NDZCNzE4QThEOUY0NzU1NEJG
QTU4MUIzQTBFMB4XDTI0MTIxMTEyNTEzMloXDTM0MTIwMTEyNTEzMlowGDEWMBQG
A1UEAxMNNjc1OThhZDctOGEyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOb0p/Bkr8i0vYFUYOGICHNhFEfIc4QT7C/jjTdQ+YMK33shScsLGEUufsoj
StAf8aH9t0ob7oPnGRUZj0phlKJjD400ECtmoEH8DYw7UQqJKDXL9uKNlGb5AlEF
JvtHe/HNhyFNogoTe5wm6tArUGxn+vrRXeyuM2ucUWhyv/+Fjbvn4UI+smT576VY
Ng4ePao4AibM6Z/i4YU5Vx4ZCg4JheqAmZjwFf9KzKQBRheAhfFwQ68BWjS8rKC+
AvJDZk9Gw+osnfvFk9Jqow7tx+nF9+L4qiM92U9F36EOtgY9Kye1DEvKn+fK1YXf
QM7vMfpAehzm7Mks7gHx3zB5necCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRHnbwk
Kszwj/uhkMmWNBD52j1L6DAfBgNVHSMEGDAWgBTaqHL/mgREa3GKjZ9HVUv6WBs6
DjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Mjc5M0YvMDY1RDREQkFBNjQzMTFFRjhCNEQzRThCNzYyRTk1MUEvMnFoeV81
b0VSR3R4aW8yZlIxVkwtbGdiT2c0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMnFoeV81b0VSR3R4aW8yZlIxVkwtbGdiT2c0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Mjc5M0YvMDY1RDREQkFBNjQzMTFFRjhCNEQzRThCNzYy
RTk1MUEvQTc5OEJCOTJCN0JFMTFFRkJCRDdENUE2NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2ZDgDANBgkqhkiG9w0BAQsF
AAOCAQEAQAbu3c9yFgYvJQCH1/H8dTpK+5YLzaVvbyRzrRrPXBU8cF9HzTw5ArVK
42EaRRC3s/Btz+R71bUyuW/Woa/IAHnSsyqctXAENBECqd1L8DwaBk0IvWQZKRFC
nCsjuhXbcLp2jpcstBe+iNYE92RUTn4u4ZMsg6UI7iqnbnZABdp0AMpFIqVAJ1Pa
XZDATP/SaLuTZNeGmjrr0L3f2Mj/HPX+NJ2wttQOatJBPVts1MsaXfuhhvF3qX7W
PelfjMs6LN2hgCtj4sBRhjNpm6oO6SGk4v5paLsaREYN/7sN5oNSyEthJSo+jEXI
0fnfDLzfj/Cw+weRJznF1ABLmLaLOA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:58:46 2025 by rpki-client