Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/279BA0540BB911F085E0CF4A762E951A.roa
File: 279BA0540BB911F085E0CF4A762E951A.roa (raw, json)
Hash identifier: 3QesGyp4tYRipz4vg5BH5ybWDB9xF/Y66SZRiVKu4rA=
Subject key identifier: 19:FF:A2:AC:93:61:21:9B:04:04:2A:2F:C1:C5:B9:A1:EB:6D:61:83
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 06A7
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/279BA0540BB911F085E0CF4A762E951A.roa
Signing time: Fri 28 Mar 2025 09:43:51 +0000
ROA not before: Fri 28 Mar 2025 09:43:47 +0000
ROA not after: Wed 09 Apr 2025 09:43:47 +0000
asID: 203020
IP address blocks: 102.177.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1703 (0x6a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF
Validity
Not Before: Mar 28 09:43:47 2025 GMT
Not After : Apr 9 09:43:47 2025 GMT
Subject: CN=67e66f57-05a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:65:75:05:1d:65:5b:82:eb:e8:d4:94:10:
0d:ca:83:4d:b2:c4:23:fd:49:0c:38:3c:70:de:af:
6e:8e:5d:b1:f7:d7:20:d9:17:1d:c6:0f:87:44:83:
e7:94:80:2b:51:51:b4:a2:45:7d:eb:f6:b5:ed:b2:
b9:e8:bc:7f:a5:6f:9a:26:29:cb:36:be:34:b7:49:
85:0c:43:6f:32:da:23:b4:09:3c:71:ca:9d:94:32:
69:cc:52:82:20:a6:04:5d:04:ec:56:40:81:b6:5f:
62:09:53:20:bd:24:95:ad:9f:de:99:4d:5c:21:d4:
27:a1:b7:62:91:d7:40:6d:93:33:65:40:16:8b:26:
b5:74:86:d4:41:b9:cb:89:ff:55:46:f5:76:aa:67:
12:f0:a1:dd:37:ec:f0:91:b4:6b:dd:0f:2e:23:e3:
bf:89:b1:73:ad:04:29:c0:f3:6e:47:f5:7c:dd:4f:
3e:bc:40:35:57:a3:0c:69:43:2a:ff:40:33:03:51:
b1:30:35:4c:c8:0f:d1:46:0d:d3:66:b8:bd:9f:b4:
54:15:8d:1d:41:1a:1b:43:a0:1e:30:af:d5:ab:81:
d8:06:b2:3f:52:87:c9:8a:d6:48:53:c5:37:ed:8d:
5b:4d:00:dd:df:7d:e2:b8:0e:c4:b3:89:a5:4a:66:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FF:A2:AC:93:61:21:9B:04:04:2A:2F:C1:C5:B9:A1:EB:6D:61:83
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/279BA0540BB911F085E0CF4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:7d:cb:03:72:75:50:c0:e9:83:36:c4:a7:33:2e:3c:9e:e0:
d4:05:2a:7d:49:1d:eb:fe:e2:96:fc:fd:70:8b:8b:d1:50:44:
54:ed:34:43:11:87:d0:ba:55:75:f5:37:e3:7d:5e:c0:c0:40:
68:c7:98:f3:e1:d0:77:a9:dc:33:cf:0d:88:d6:6f:c9:37:9c:
74:a4:4b:cb:64:22:95:ce:3a:1d:85:a4:73:52:42:16:d5:63:
4d:f3:a8:53:e4:db:fe:45:1e:8a:92:dc:6d:6b:15:ce:7a:a3:
d3:ed:09:da:65:10:66:11:f4:2d:2d:79:91:ab:5b:8d:b4:1a:
46:7f:35:2d:8e:5e:54:0d:73:d3:f7:73:d1:fc:c9:31:e3:33:
53:aa:db:d9:ef:e0:1a:83:e1:20:db:76:89:a0:d3:79:86:fb:
be:27:5f:08:83:c9:c6:38:e1:b8:98:1b:7e:d7:f3:16:52:43:
9c:a4:0f:f4:24:dc:ee:8b:86:ba:e0:20:82:ac:23:70:00:aa:
1e:cd:f7:57:ab:ee:33:1d:b6:06:54:d5:46:1e:d2:90:42:24:
b8:5f:32:4b:bc:25:06:12:1c:8d:92:93:66:d6:27:96:95:8a:
ee:dd:7a:9c:e1:42:88:86:f8:d5:2f:74:42:f4:69:5e:cd:10:
31:9b:75:34
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBqcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNTAzMjgwOTQzNDdaFw0yNTA0MDkwOTQzNDdaMBgxFjAU
BgNVBAMTDTY3ZTY2ZjU3LTA1YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/VWV1BR1lW4Lr6NSUEA3Kg02yxCP9SQw4PHDer26OXbH31yDZFx3GD4dE
g+eUgCtRUbSiRX3r9rXtsrnovH+lb5omKcs2vjS3SYUMQ28y2iO0CTxxyp2UMmnM
UoIgpgRdBOxWQIG2X2IJUyC9JJWtn96ZTVwh1Ceht2KR10BtkzNlQBaLJrV0htRB
ucuJ/1VG9XaqZxLwod037PCRtGvdDy4j47+JsXOtBCnA825H9XzdTz68QDVXowxp
Qyr/QDMDUbEwNUzID9FGDdNmuL2ftFQVjR1BGhtDoB4wr9WrgdgGsj9Sh8mK1khT
xTftjVtNAN3ffeK4DsSziaVKZkj7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUGf+i
rJNhIZsEBCovwcW5oettYYMwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzI3OUJBMDU0MEJCOTExRjA4NUUwQ0Y0QTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsb8wDQYJKoZIhvcNAQEL
BQADggEBAKl9ywNydVDA6YM2xKczLjye4NQFKn1JHev+4pb8/XCLi9FQRFTtNEMR
h9C6VXX1N+N9XsDAQGjHmPPh0Hep3DPPDYjWb8k3nHSkS8tkIpXOOh2FpHNSQhbV
Y03zqFPk2/5FHoqS3G1rFc56o9PtCdplEGYR9C0teZGrW420GkZ/NS2OXlQNc9P3
c9H8yTHjM1Oq29nv4BqD4SDbdomg03mG+74nXwiDycY44biYG37X8xZSQ5ykD/Qk
3O6LhrrgIIKsI3AAqh7N91er7jMdtgZU1UYe0pBCJLhfMku8JQYSHI2Sk2bWJ5aV
iu7depzhQoiG+NUvdEL0aV7NEDGbdTQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:10:35 2025 by rpki-client