Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/9622DBF00B1411F0ABF7A15F762E951A.roa
File: 9622DBF00B1411F0ABF7A15F762E951A.roa (raw, json)
Hash identifier: rTDWmoj7RmnffwEk9eaYWih1fM9FJEt62Ns47rcXrNU=
Subject key identifier: 52:82:2B:C8:52:85:64:9B:BA:CF:D5:92:D3:A8:E9:31:A8:D9:D2:1A
Certificate issuer: /CN=F366372CAF/serialNumber=B1A1AA72C9657B40E616BC373E13CF93B229EB3F
Certificate serial: 0381
Authority key identifier: B1:A1:AA:72:C9:65:7B:40:E6:16:BC:37:3E:13:CF:93:B2:29:EB:3F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/saGqcslle0DmFrw3PhPPk7Ip6z8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/9622DBF00B1411F0ABF7A15F762E951A.roa
Signing time: Thu 27 Mar 2025 14:05:49 +0000
ROA not before: Thu 27 Mar 2025 14:05:45 +0000
ROA not after: Mon 23 Mar 2026 14:05:45 +0000
asID: 328676
IP address blocks: 102.214.44.0/24 maxlen: 24
102.214.45.0/24 maxlen: 24
102.223.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897 (0x381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366372CAF
Validity
Not Before: Mar 27 14:05:45 2025 GMT
Not After : Mar 23 14:05:45 2026 GMT
Subject: CN=67e55b3d-75c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:07:37:32:9f:47:45:4f:8f:e1:53:1a:40:1c:
e6:e3:8c:73:f2:c6:19:d5:8c:71:50:6e:5f:df:de:
bc:70:d6:9e:60:dc:09:14:49:fa:57:f0:86:ac:48:
84:f4:30:56:a0:4a:e6:e2:48:23:c1:61:2d:12:42:
5f:96:c7:34:3a:cc:f3:9e:49:a0:59:94:9a:5f:06:
9e:04:a5:b1:56:14:a9:e7:b6:54:ba:d3:3c:2a:2d:
72:47:b3:13:ec:6f:33:d7:b8:b0:c3:1a:74:aa:df:
75:9e:0b:45:19:28:44:13:c3:fb:6f:b3:6a:19:91:
19:b3:ff:da:08:b0:5f:7b:80:ed:ee:82:d3:c3:49:
9e:b9:6c:ef:41:03:22:c7:7f:0b:8b:0d:4c:2d:09:
b7:f6:80:af:7c:fe:e3:d1:72:cd:5b:10:8b:1c:fb:
dd:41:2e:3f:2b:1c:99:d0:00:1d:55:a2:a0:83:bf:
83:5f:69:50:d0:12:76:33:1e:fa:85:83:e2:f7:99:
9c:e6:58:3b:50:81:5d:32:f8:78:29:01:64:46:f0:
ff:1a:1e:31:2b:90:8f:3e:00:19:1e:a1:3c:12:e2:
d5:76:0d:2e:1d:2f:d8:5d:32:ba:dd:79:44:b6:16:
af:ac:7e:f0:15:1c:cf:0f:66:26:dc:72:91:3b:40:
30:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:82:2B:C8:52:85:64:9B:BA:CF:D5:92:D3:A8:E9:31:A8:D9:D2:1A
X509v3 Authority Key Identifier:
keyid:B1:A1:AA:72:C9:65:7B:40:E6:16:BC:37:3E:13:CF:93:B2:29:EB:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/saGqcslle0DmFrw3PhPPk7Ip6z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/9622DBF00B1411F0ABF7A15F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.44.0/23
102.223.7.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:8e:6d:e4:23:0d:ea:9e:74:bc:d0:bd:5e:f4:22:1a:cd:2d:
1a:2f:a8:ef:44:b8:68:d5:4b:85:f2:4d:28:cc:bf:5c:94:d7:
7a:81:c3:d8:3b:98:7e:a9:e3:22:d3:44:b7:51:df:5d:8c:f2:
65:72:c5:44:c0:07:61:14:4d:f4:fa:ab:57:95:e4:e7:87:6e:
97:a2:d1:b7:89:c6:6a:c7:00:b9:14:e9:14:c1:2f:76:74:a0:
f4:7f:8b:c1:f3:8f:3c:27:24:a0:a8:1b:98:3e:e2:29:65:ea:
66:6e:1a:b4:8d:83:91:d8:fa:90:cd:f3:07:33:08:55:a7:fa:
f4:f6:4b:90:56:c5:1e:91:67:cd:0f:b6:9c:ee:92:e0:1b:80:
1d:eb:9e:0c:e6:0a:94:da:54:6a:ae:96:a1:76:ff:1a:ac:6e:
01:bb:14:e9:73:da:d5:2e:65:42:42:b6:8d:64:43:2b:82:48:
37:08:54:95:3f:c1:bd:d2:7e:b3:5d:d9:4f:6c:c2:6b:c4:1a:
dd:fb:c0:d9:9d:80:c5:09:02:87:c6:f4:97:b8:94:71:77:3d:
6f:c4:48:32:5d:36:48:79:ad:0c:f5:84:50:07:7e:04:b0:a5:
b9:3f:3a:79:e6:60:09:60:10:cb:76:a3:12:c1:a1:70:62:c7:
a7:cc:9b:8d
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjM3MkNBRjExMC8GA1UEBRMoQjFBMUFBNzJDOTY1N0I0MEU2MTZCQzM3M0UxM0NG
OTNCMjI5RUIzRjAeFw0yNTAzMjcxNDA1NDVaFw0yNjAzMjMxNDA1NDVaMBgxFjAU
BgNVBAMTDTY3ZTU1YjNkLTc1YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDiBzcyn0dFT4/hUxpAHObjjHPyxhnVjHFQbl/f3rxw1p5g3AkUSfpX8Ias
SIT0MFagSubiSCPBYS0SQl+WxzQ6zPOeSaBZlJpfBp4EpbFWFKnntlS60zwqLXJH
sxPsbzPXuLDDGnSq33WeC0UZKEQTw/tvs2oZkRmz/9oIsF97gO3ugtPDSZ65bO9B
AyLHfwuLDUwtCbf2gK98/uPRcs1bEIsc+91BLj8rHJnQAB1VoqCDv4NfaVDQEnYz
HvqFg+L3mZzmWDtQgV0y+HgpAWRG8P8aHjErkI8+ABkeoTwS4tV2DS4dL9hdMrrd
eUS2Fq+sfvAVHM8PZibccpE7QDC5AgMBAAGjggKrMIICpzAdBgNVHQ4EFgQUUoIr
yFKFZJu6z9WS06jpMajZ0howHwYDVR0jBBgwFoAUsaGqcslle0DmFrw3PhPPk7Ip
6z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYzNzJDLzVGMjE3QzM0NjU3RjExRUQ5NjRBRUY4NUYxMjIyNDY4L3NhR3Fj
c2xsZTBEbUZydzNQaFBQazdJcDZ6OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3NhR3Fjc2xsZTBEbUZydzNQaFBQazdJcDZ6OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjYzNzJDLzVGMjE3QzM0NjU3RjExRUQ5NjRBRUY4NUYx
MjIyNDY4Lzk2MjJEQkYwMEIxNDExRjBBQkY3QTE1Rjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAFm1iwDBABm3wcwDQYJKoZI
hvcNAQELBQADggEBAMiObeQjDeqedLzQvV70IhrNLRovqO9EuGjVS4XyTSjMv1yU
13qBw9g7mH6p4yLTRLdR312M8mVyxUTAB2EUTfT6q1eV5OeHbpei0beJxmrHALkU
6RTBL3Z0oPR/i8HzjzwnJKCoG5g+4ill6mZuGrSNg5HY+pDN8wczCFWn+vT2S5BW
xR6RZ80PtpzukuAbgB3rngzmCpTaVGqulqF2/xqsbgG7FOlz2tUuZUJCto1kQyuC
SDcIVJU/wb3SfrNd2U9swmvEGt37wNmdgMUJAofG9Je4lHF3PW/ESDJdNkh5rQz1
hFAHfgSwpbk/OnnmYAlgEMt2oxLBoXBix6fMm40=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:14 2025 by rpki-client