Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/2A9C4F82DB0E11EFB5D5F65C762E951A.roa
File: 2A9C4F82DB0E11EFB5D5F65C762E951A.roa (raw, json)
Hash identifier: NVW3v8GbViH2PMxW79Km4bUGB7n8gRCMb5uUvG/8ofI=
Subject key identifier: 1E:4D:9E:12:34:73:98:5E:90:70:19:45:A4:7D:BD:98:6C:F7:DA:2B
Certificate issuer: /CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Certificate serial: 01A2
Authority key identifier: C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/2A9C4F82DB0E11EFB5D5F65C762E951A.roa
Signing time: Sat 25 Jan 2025 11:18:56 +0000
ROA not before: Sat 25 Jan 2025 11:18:53 +0000
ROA not after: Wed 31 Jan 2035 11:18:53 +0000
asID: 329007
IP address blocks: 102.216.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BE89AF
Validity
Not Before: Jan 25 11:18:53 2025 GMT
Not After : Jan 31 11:18:53 2035 GMT
Subject: CN=6794c8a0-3f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:f0:0f:e1:29:36:dc:3c:5e:b5:6f:2a:04:
16:4a:34:6c:f9:bc:9a:38:07:c2:40:b3:33:f3:2f:
71:43:92:ae:44:37:5c:32:c0:74:0e:6e:fb:ca:cb:
69:8d:fa:80:87:02:70:fd:dc:3a:1b:7c:6a:2f:b7:
ad:52:d7:38:55:72:7c:a6:b5:a2:8a:67:13:e9:a0:
74:fc:1f:9b:a8:40:c5:94:50:f7:4f:29:2e:6a:f9:
30:20:d2:e4:3c:fc:a8:b7:06:cf:7a:d3:a4:6c:b8:
78:8b:63:e0:9f:31:67:7f:57:cd:49:c4:d7:74:c9:
c6:7e:ca:ac:ef:b0:e4:dc:af:d9:9e:16:18:ea:c7:
f2:6c:d3:4f:1c:f6:96:24:3d:91:c8:2f:d9:7a:14:
81:40:05:fe:3f:e4:aa:c4:e3:c6:3b:10:02:c4:43:
13:8b:77:4b:4d:7a:44:19:2a:fe:41:70:25:46:22:
81:60:8c:80:89:54:eb:4e:3c:80:c2:ce:89:c4:a3:
c5:46:fd:ab:77:6b:10:60:bf:ff:12:51:e2:5d:38:
c1:c9:fb:31:80:5d:5a:fe:f6:f5:09:66:db:a0:23:
fd:03:25:50:79:24:b1:f2:21:60:f7:4e:7e:96:b9:
97:a8:48:4d:77:af:15:74:07:9b:b6:e9:fe:b0:ee:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4D:9E:12:34:73:98:5E:90:70:19:45:A4:7D:BD:98:6C:F7:DA:2B
X509v3 Authority Key Identifier:
keyid:C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/2A9C4F82DB0E11EFB5D5F65C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.253.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6a:bc:5e:f7:90:85:87:49:c4:16:ce:6b:99:8b:a7:ea:ff:
05:9c:16:b1:27:58:b2:fe:3c:e8:73:64:39:5d:a5:66:78:4a:
08:47:30:ca:74:28:d1:17:50:c3:d1:de:65:ea:e5:11:a6:d8:
32:81:6b:05:3b:eb:d3:8a:61:26:76:6f:8d:a4:67:03:33:5a:
a4:9d:4c:19:13:87:7a:d2:90:9a:64:4d:cd:d1:4d:a3:26:a1:
2a:14:a0:07:f6:0e:32:9d:ea:ff:8f:57:78:b5:eb:55:fd:3e:
48:bc:fb:00:2c:b9:64:32:54:bf:db:a3:fb:bb:a7:d4:e1:bd:
e1:e8:d2:c6:5a:1f:c0:84:dc:df:6f:97:bb:4f:d1:e3:ea:9b:
cc:01:ad:38:32:c7:f2:30:3f:3e:f4:33:2f:f2:0e:28:e2:94:
6c:91:d8:e3:95:86:dd:80:97:c1:f9:3c:5e:93:ce:97:09:19:
68:1f:be:3c:c7:2d:d2:fe:82:8a:e2:3e:86:da:16:d9:8d:1d:
06:b1:7d:df:c0:19:56:13:89:11:d8:ec:24:e8:30:f8:79:1f:
1b:61:38:9e:53:dd:0b:a9:e9:ed:fb:57:e7:44:d8:07:8f:7b:
a1:30:d4:92:80:4e:03:49:59:a5:4d:48:71:d3:3b:24:cd:ed:
91:2b:9a:33
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUJFODlBRjExMC8GA1UEBRMoQzNCNEEzRERCMkRBQ0ZDNTM4OEVFRUM3MzU5RDIx
NDY2NDQ5NkEwMTAeFw0yNTAxMjUxMTE4NTNaFw0zNTAxMzExMTE4NTNaMBgxFjAU
BgNVBAMTDTY3OTRjOGEwLTNmMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWkPAP4Sk23DxetW8qBBZKNGz5vJo4B8JAszPzL3FDkq5EN1wywHQObvvK
y2mN+oCHAnD93DobfGovt61S1zhVcnymtaKKZxPpoHT8H5uoQMWUUPdPKS5q+TAg
0uQ8/Ki3Bs9606RsuHiLY+CfMWd/V81JxNd0ycZ+yqzvsOTcr9meFhjqx/Js008c
9pYkPZHIL9l6FIFABf4/5KrE48Y7EALEQxOLd0tNekQZKv5BcCVGIoFgjICJVOtO
PIDCzonEo8VG/at3axBgv/8SUeJdOMHJ+zGAXVr+9vUJZtugI/0DJVB5JLHyIWD3
Tn6WuZeoSE13rxV0B5u26f6w7tfBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUHk2e
EjRzmF6QcBlFpH29mGz32iswHwYDVR0jBBgwFoAUw7Sj3bLaz8U4ju7HNZ0hRmRJ
agEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVCRTg5LzA5OUI0ODNBQkU4RTExRUVCMTk1QTk4RTc3NTQxMkU2L3c3U2oz
YkxhejhVNGp1N0hOWjBoUm1SSmFnRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3c3U2ozYkxhejhVNGp1N0hOWjBoUm1SSmFnRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjVCRTg5LzA5OUI0ODNBQkU4RTExRUVCMTk1QTk4RTc3
NTQxMkU2LzJBOUM0RjgyREIwRTExRUZCNUQ1RjY1Qzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2P0wDQYJKoZIhvcNAQEL
BQADggEBAHdqvF73kIWHScQWzmuZi6fq/wWcFrEnWLL+POhzZDldpWZ4SghHMMp0
KNEXUMPR3mXq5RGm2DKBawU769OKYSZ2b42kZwMzWqSdTBkTh3rSkJpkTc3RTaMm
oSoUoAf2DjKd6v+PV3i161X9Pki8+wAsuWQyVL/bo/u7p9ThveHo0sZaH8CE3N9v
l7tP0ePqm8wBrTgyx/IwPz70My/yDijilGyR2OOVht2Al8H5PF6TzpcJGWgfvjzH
LdL+goriPobaFtmNHQaxfd/AGVYTiRHY7CToMPh5HxthOJ5T3Qup6e37V+dE2AeP
e6Ew1JKATgNJWaVNSHHTOyTN7ZErmjM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:13 2025 by rpki-client