Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/44B107BE0BBA11F0B7AF8852762E951A.roa
File: 44B107BE0BBA11F0B7AF8852762E951A.roa (raw, json)
Hash identifier: 2lsgDetOxz2tEA/haKTe5N+JmsqBvMbXnhGs3La4Rys=
Subject key identifier: 99:59:A4:61:43:A9:C7:59:32:99:5A:EA:E5:6D:C2:A2:5D:39:5A:0F
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 06AB
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/44B107BE0BBA11F0B7AF8852762E951A.roa
Signing time: Fri 28 Mar 2025 09:51:49 +0000
ROA not before: Fri 28 Mar 2025 09:51:45 +0000
ROA not after: Thu 19 Feb 2026 09:51:45 +0000
asID: 209242
IP address blocks: 102.177.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1707 (0x6ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF
Validity
Not Before: Mar 28 09:51:45 2025 GMT
Not After : Feb 19 09:51:45 2026 GMT
Subject: CN=67e67135-b088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:b1:c7:24:0a:75:04:77:72:63:0f:d1:cf:
d9:d5:4a:c0:83:ef:bc:99:69:7f:5c:8e:43:58:46:
ff:28:8a:a7:87:f1:24:17:6d:70:d3:0b:93:e7:27:
dc:2c:e4:67:21:52:ec:ba:af:4b:09:80:95:90:76:
3c:33:cc:c5:9e:1d:56:90:4f:c3:d9:bb:f2:7c:e2:
5c:29:39:5b:0a:55:a1:32:9e:19:6d:08:27:6b:4a:
19:b6:c0:2c:d8:08:34:8d:6d:e6:75:c8:4a:da:1f:
f9:d8:a4:99:06:3e:18:b2:db:66:e3:53:46:98:51:
5e:e3:09:62:6a:65:95:9a:30:d7:a4:98:e3:1c:53:
fb:43:cd:3b:d2:b8:36:51:1a:c6:54:da:14:11:ce:
78:57:5f:2b:a3:c5:8b:b7:2e:cc:36:68:0e:46:8f:
36:f3:90:d8:e5:ef:5c:a2:c7:44:9e:59:9c:96:3e:
f2:b8:7e:bf:88:7d:58:00:19:77:c1:a4:37:d4:b8:
9c:94:a6:83:9e:e9:03:a0:b7:ce:fb:24:48:ba:bf:
58:c1:6b:d3:14:d0:4d:a4:d4:53:4d:29:60:bc:51:
6b:3e:37:35:3a:9c:26:54:75:e7:b7:38:1d:c3:f3:
1d:08:18:e0:00:de:5e:ee:00:37:1e:10:f8:9e:dc:
8f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:59:A4:61:43:A9:C7:59:32:99:5A:EA:E5:6D:C2:A2:5D:39:5A:0F
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/44B107BE0BBA11F0B7AF8852762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.189.0/24
Signature Algorithm: sha256WithRSAEncryption
98:0c:f5:3d:7b:08:3f:f5:8a:d1:2c:c2:fd:62:37:93:bd:8e:
f7:bf:c0:9b:74:4a:b7:a5:54:b1:06:30:f8:29:90:56:70:73:
af:46:9c:fe:69:8b:07:a3:02:7b:43:7a:e9:0a:fd:c8:ef:ed:
ed:33:d1:11:08:1f:20:6a:23:70:1b:0e:fd:54:1f:55:23:cd:
0e:a0:77:e3:76:5e:bf:d5:5a:c9:4b:e7:b6:b3:7b:e0:ee:25:
10:22:27:41:52:62:5e:e7:1a:47:d7:fc:62:ff:61:27:8b:95:
a7:08:ba:22:c5:05:bf:49:0f:d8:9e:f9:08:99:0c:ec:38:c2:
a9:2d:f7:5b:64:98:30:4f:c5:f3:79:62:e9:c7:fe:60:c7:18:
e4:e1:97:e3:e0:3c:7c:e7:97:c1:53:4f:21:44:88:34:ad:7e:
6d:54:73:e2:a2:96:e9:27:b9:2d:63:65:93:77:f3:f3:30:79:
76:df:30:6d:b9:32:bd:a8:79:1b:a2:79:81:22:c5:db:fc:71:
4f:f6:79:74:de:6b:9d:a0:db:44:75:ec:af:2f:58:06:2b:77:
33:fd:9a:83:ed:e9:d4:e5:df:5a:72:1c:08:a1:de:24:d0:cc:
16:4c:17:f0:90:fe:12:bf:48:32:8d:7e:2a:c4:c0:a7:6a:ce:
4f:fa:98:2f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBqswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNTAzMjgwOTUxNDVaFw0yNjAyMTkwOTUxNDVaMBgxFjAU
BgNVBAMTDTY3ZTY3MTM1LWIwODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3dLHHJAp1BHdyYw/Rz9nVSsCD77yZaX9cjkNYRv8oiqeH8SQXbXDTC5Pn
J9ws5GchUuy6r0sJgJWQdjwzzMWeHVaQT8PZu/J84lwpOVsKVaEynhltCCdrShm2
wCzYCDSNbeZ1yEraH/nYpJkGPhiy22bjU0aYUV7jCWJqZZWaMNekmOMcU/tDzTvS
uDZRGsZU2hQRznhXXyujxYu3Lsw2aA5GjzbzkNjl71yix0SeWZyWPvK4fr+IfVgA
GXfBpDfUuJyUpoOe6QOgt877JEi6v1jBa9MU0E2k1FNNKWC8UWs+NzU6nCZUdee3
OB3D8x0IGOAA3l7uADceEPie3I95AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUmVmk
YUOpx1kymVrq5W3Col05Wg8wHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzQ0QjEwN0JFMEJCQTExRjBCN0FGODg1Mjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsb0wDQYJKoZIhvcNAQEL
BQADggEBAJgM9T17CD/1itEswv1iN5O9jve/wJt0SrelVLEGMPgpkFZwc69GnP5p
iwejAntDeukK/cjv7e0z0REIHyBqI3AbDv1UH1UjzQ6gd+N2Xr/VWslL57aze+Du
JRAiJ0FSYl7nGkfX/GL/YSeLlacIuiLFBb9JD9ie+QiZDOw4wqkt91tkmDBPxfN5
YunH/mDHGOThl+PgPHznl8FTTyFEiDStfm1Uc+KiluknuS1jZZN38/MweXbfMG25
Mr2oeRuieYEixdv8cU/2eXTea52g20R17K8vWAYrdzP9moPt6dTl31pyHAih3iTQ
zBZMF/CQ/hK/SDKNfirEwKdqzk/6mC8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:28:52 2025 by rpki-client