Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/D32ABF04016911F09185408C762E951A.roa
File: D32ABF04016911F09185408C762E951A.roa (raw, json)
Hash identifier: rqBAdgkCso8D6S2r6ezDreEuBXyU04A27rkA3l5xCyA=
Subject key identifier: D1:56:28:04:7B:DD:EF:BA:88:66:E4:78:D6:05:8C:4A:F9:D5:D1:C1
Certificate issuer: /CN=F36364C2AF/serialNumber=5EE80C7E888C71B3102418780BD6E10A52D17088
Certificate serial: 045D
Authority key identifier: 5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/D32ABF04016911F09185408C762E951A.roa
Signing time: Sat 15 Mar 2025 06:50:47 +0000
ROA not before: Sat 15 Mar 2025 06:50:43 +0000
ROA not after: Sun 31 Mar 2030 06:50:43 +0000
asID: 328974
IP address blocks: 102.217.228.0/22 maxlen: 24
102.217.228.0/30 maxlen: 32
2c0f:5f00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117 (0x45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36364C2AF
Validity
Not Before: Mar 15 06:50:43 2025 GMT
Not After : Mar 31 06:50:43 2030 GMT
Subject: CN=67d52347-fcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c9:ea:8f:f8:39:d4:e5:45:be:d4:cc:b6:a5:
a6:fe:ea:f1:c8:b0:92:4f:39:9b:a2:e0:8b:62:21:
a2:50:1e:80:a5:85:df:c7:20:0b:ba:eb:56:1a:26:
33:7e:7c:7a:38:88:00:b3:38:40:8c:81:f3:ec:0a:
4e:ce:e9:2f:cb:9a:e2:13:ab:50:78:0c:dd:e9:51:
89:b2:89:cd:13:ca:21:54:3e:28:8e:95:d1:9f:d6:
bb:da:a0:49:ab:88:06:c7:12:27:a0:1b:8e:43:52:
d5:1f:81:22:56:bc:21:65:b0:07:d4:fe:5a:bc:23:
64:e7:4b:3a:2e:12:4f:5b:56:80:5f:4b:45:dc:7e:
44:3d:0f:7e:cd:65:14:42:fc:ac:e4:24:dc:9d:12:
6d:71:c9:e2:d9:22:b1:dc:91:5e:f5:9b:f5:1a:22:
4e:fc:e8:f8:2c:62:33:d4:cd:27:e9:36:00:06:33:
37:84:55:57:6e:89:40:98:79:4f:56:9f:f9:14:83:
00:ac:7b:bb:b7:c4:5a:bc:72:30:fc:6c:32:6f:bf:
3e:e5:76:70:aa:62:f4:33:d8:93:d0:21:88:42:33:
48:cd:b5:a1:8b:af:df:7c:30:b4:65:61:77:92:79:
85:73:f7:12:65:ad:36:4b:01:27:47:55:f7:59:cc:
4b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:56:28:04:7B:DD:EF:BA:88:66:E4:78:D6:05:8C:4A:F9:D5:D1:C1
X509v3 Authority Key Identifier:
keyid:5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/D32ABF04016911F09185408C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.228.0/22
IPv6:
2c0f:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
5f:a3:9d:28:0c:48:8f:77:5a:3d:cf:dd:65:28:12:e5:ba:14:
86:fa:6b:74:95:b1:c5:d2:2d:11:40:fc:54:58:1f:07:f4:50:
88:c3:16:21:24:a1:62:47:de:bc:9d:de:31:fe:6d:16:fc:a0:
4f:74:68:bb:b9:38:b0:30:44:d6:25:1c:fa:c4:fe:f9:cf:8c:
84:9d:d3:86:12:96:9d:a6:cd:f0:9b:8e:45:55:5e:4d:2f:bc:
06:49:e4:77:ac:08:6d:f3:0c:95:9c:9e:75:e5:37:39:80:bb:
b9:62:da:e2:07:5a:8a:4a:d9:33:1d:01:f2:21:57:e3:c8:12:
1b:90:32:ff:0a:91:13:fe:4a:32:84:1a:2e:11:ec:7f:e2:29:
c6:c3:dd:cc:ed:05:82:e5:f7:94:aa:0e:b9:17:7e:d8:a1:56:
90:f3:b4:f7:2f:66:f8:b2:9f:34:97:64:8a:1a:70:47:5f:86:
ac:06:4a:79:38:18:32:73:88:e5:bc:03:7d:aa:52:79:1f:93:
a5:5c:7a:fd:c7:6a:c7:f4:92:2a:76:ff:7e:07:22:4f:34:81:
3d:fb:6b:65:54:51:16:33:d9:72:30:ea:5b:e2:67:92:39:bf:
f8:82:9d:3f:58:f6:f7:10:37:3f:a9:b5:3e:f6:21:e8:a9:77:
50:fe:14:bc
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzY0QzJBRjExMC8GA1UEBRMoNUVFODBDN0U4ODhDNzFCMzEwMjQxODc4MEJENkUx
MEE1MkQxNzA4ODAeFw0yNTAzMTUwNjUwNDNaFw0zMDAzMzEwNjUwNDNaMBgxFjAU
BgNVBAMTDTY3ZDUyMzQ3LWZjZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdyeqP+DnU5UW+1My2pab+6vHIsJJPOZui4ItiIaJQHoClhd/HIAu661Ya
JjN+fHo4iACzOECMgfPsCk7O6S/LmuITq1B4DN3pUYmyic0TyiFUPiiOldGf1rva
oEmriAbHEiegG45DUtUfgSJWvCFlsAfU/lq8I2TnSzouEk9bVoBfS0XcfkQ9D37N
ZRRC/KzkJNydEm1xyeLZIrHckV71m/UaIk786PgsYjPUzSfpNgAGMzeEVVduiUCY
eU9Wn/kUgwCse7u3xFq8cjD8bDJvvz7ldnCqYvQz2JPQIYhCM0jNtaGLr998MLRl
YXeSeYVz9xJlrTZLASdHVfdZzEvXAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQU0VYo
BHvd77qIZuR41gWMSvnV0cEwHwYDVR0jBBgwFoAUXugMfoiMcbMQJBh4C9bhClLR
cIgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM2NEMyLzY0M0I3QTU0QjU4NDExRUNCN0NGQzc3NTVBNDBENTc3L1h1Z01m
b2lNY2JNUUpCaDRDOWJoQ2xMUmNJZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1h1Z01mb2lNY2JNUUpCaDRDOWJoQ2xMUmNJZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjM2NEMyLzY0M0I3QTU0QjU4NDExRUNCN0NGQzc3NTVB
NDBENTc3L0QzMkFCRjA0MDE2OTExRjA5MTg1NDA4Qzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm2eQwDQQCAAIwBwMFACwP
XwAwDQYJKoZIhvcNAQELBQADggEBAF+jnSgMSI93Wj3P3WUoEuW6FIb6a3SVscXS
LRFA/FRYHwf0UIjDFiEkoWJH3ryd3jH+bRb8oE90aLu5OLAwRNYlHPrE/vnPjISd
04YSlp2mzfCbjkVVXk0vvAZJ5HesCG3zDJWcnnXlNzmAu7li2uIHWopK2TMdAfIh
V+PIEhuQMv8KkRP+SjKEGi4R7H/iKcbD3cztBYLl95SqDrkXftihVpDztPcvZviy
nzSXZIoacEdfhqwGSnk4GDJziOW8A32qUnkfk6Vcev3Hasf0kip2/34HIk80gT37
a2VUURYz2XIw6lviZ5I5v/iCnT9Y9vcQNz+ptT72Ieipd1D+FLw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:25:11 2025 by rpki-client