Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C43802F00BB811F0BF8F534A762E951A.roa
File: C43802F00BB811F0BF8F534A762E951A.roa (raw, json)
Hash identifier: +d7x/0zPPTg3srrr+eszNEmwGB/DV2b/b/FhuV9OZsU=
Subject key identifier: A4:0A:8D:66:F8:30:66:9D:B4:86:3B:DC:B4:79:21:E5:80:BC:C2:C7
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 06A5
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C43802F00BB811F0BF8F534A762E951A.roa
Signing time: Fri 28 Mar 2025 09:41:04 +0000
ROA not before: Fri 28 Mar 2025 09:40:59 +0000
ROA not after: Sun 30 Mar 2025 09:40:59 +0000
asID: 22724
IP address blocks: 102.177.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1701 (0x6a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF
Validity
Not Before: Mar 28 09:40:59 2025 GMT
Not After : Mar 30 09:40:59 2025 GMT
Subject: CN=67e66eb0-a508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:3a:9c:c4:a7:a2:3d:3f:17:19:62:68:a7:
f4:22:5a:3d:d4:63:27:23:26:75:58:ba:f0:68:82:
bc:94:6b:ef:c8:99:03:f3:3e:c8:3e:70:ad:0e:a5:
a8:90:f3:a7:ed:0e:a4:3f:8c:67:7b:23:14:92:41:
83:78:ad:a4:7c:c2:40:88:c8:89:49:51:3b:af:8c:
b5:e9:9d:a2:a1:35:08:b6:b9:d5:c6:02:65:d2:5a:
e0:87:d3:54:60:f2:fa:d9:89:64:8a:51:b3:c7:60:
de:77:31:74:a7:e6:33:fe:73:92:e1:ca:c1:73:b5:
4f:a8:16:65:b9:58:5c:92:6a:2d:24:a3:f1:b1:b2:
c6:44:f9:1e:b1:f9:26:71:34:53:f8:8b:fa:19:68:
b7:d9:f5:2b:25:1c:5a:7e:7f:c0:f6:9f:05:64:14:
7c:1d:7b:c0:88:f2:dd:2f:29:7b:f2:cf:2f:e1:37:
a9:da:9d:80:5c:94:26:af:fe:ae:31:f3:07:91:de:
61:a1:9b:1f:8c:6d:c2:71:4b:28:58:1d:9c:f9:d3:
05:fc:f8:73:b1:53:b8:aa:f4:bd:f9:ec:22:9c:eb:
bf:e5:ca:7e:83:a9:49:1b:d2:5c:f9:a2:e6:14:5b:
43:0b:f4:c1:6e:a6:13:fb:60:ef:9f:b2:54:12:5d:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0A:8D:66:F8:30:66:9D:B4:86:3B:DC:B4:79:21:E5:80:BC:C2:C7
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C43802F00BB811F0BF8F534A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.160.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b3:4d:4c:b6:41:ac:1b:6d:f3:4c:96:56:a4:1f:e0:a4:e0:
1a:c9:6d:46:05:32:b0:2d:d6:bd:c8:ba:8d:f5:98:20:fd:0d:
3d:3d:7d:21:4c:97:da:65:a6:da:96:42:59:e7:65:f3:64:f0:
94:db:b4:ae:a4:12:d6:93:e3:62:82:55:3f:60:51:d4:c9:23:
44:99:82:4a:53:30:a6:10:ae:83:f0:52:ea:27:9d:e4:a3:17:
8c:ee:2d:a6:a3:23:71:6d:79:d6:bc:59:0b:17:3d:31:c2:d2:
69:cc:c9:c7:32:f7:07:44:98:74:aa:35:75:87:1a:64:88:6f:
3c:c3:dd:88:46:17:27:b4:c8:98:45:1c:c6:1e:fb:fe:77:b4:
8d:10:ef:33:85:e4:fe:b3:50:dd:ed:a6:dc:f0:d0:1e:90:a7:
55:48:8d:f2:83:40:2c:5a:7d:1c:c8:dc:54:64:50:e6:01:bb:
72:61:d9:18:e1:fc:42:f3:41:8f:72:15:5c:53:7a:82:69:8d:
9f:36:b7:f5:4d:a2:9b:21:2a:00:ab:86:b9:9f:da:69:79:14:
29:54:bc:44:f3:3a:95:f0:1a:d3:f8:f3:e3:14:fd:35:b2:3a:
44:44:92:75:fb:56:04:f4:ae:04:51:5b:cc:c6:0e:32:3a:4d:
8f:bb:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:22:36 2025 by rpki-client