Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/9C77CDA869D411EF98D24464762E951A.roa
File: 9C77CDA869D411EF98D24464762E951A.roa (raw, json)
Hash identifier: RWkb+TG04orcdzZ2QGFx/QkFWCvhjM7timUdXxg7AGE=
Subject key identifier: D5:78:90:91:87:F6:B0:40:CF:CB:27:7D:67:DD:35:A5:57:23:61:5F
Certificate issuer: /CN=F367E135AF/serialNumber=34E837F9C42B4E64D0274E86B7DA0C928931630F
Certificate serial: 01B0
Authority key identifier: 34:E8:37:F9:C4:2B:4E:64:D0:27:4E:86:B7:DA:0C:92:89:31:63:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/9C77CDA869D411EF98D24464762E951A.roa
Signing time: Tue 03 Sep 2024 09:12:15 +0000
ROA not before: Tue 03 Sep 2024 09:12:12 +0000
ROA not after: Wed 31 Dec 2025 09:12:12 +0000
asID: 43260
IP address blocks: 102.212.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367E135AF
Validity
Not Before: Sep 3 09:12:12 2024 GMT
Not After : Dec 31 09:12:12 2025 GMT
Subject: CN=66d6d2ef-6404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:1a:d9:31:b7:7c:77:5a:23:9c:31:04:cb:
8a:35:06:1f:77:7d:bf:ac:c2:7b:58:d6:2a:25:6b:
f9:b8:b0:a4:42:fe:0e:0a:1d:8f:8f:c9:ec:e4:b8:
78:1a:59:7a:9e:c0:b8:26:1b:d3:64:20:7e:b8:a3:
c6:7f:86:65:2a:f0:a6:ce:5c:e3:3f:39:40:9d:3d:
c6:e9:60:68:57:97:cb:ad:7c:28:bf:52:b8:4f:60:
b8:8f:d3:67:ed:9e:85:2b:b1:45:e8:34:ef:74:61:
2c:53:ec:a6:ce:ac:fc:10:b2:37:e3:26:e2:6b:35:
b1:6f:5a:d6:7f:36:40:62:7d:89:a6:01:03:e5:be:
49:42:32:72:c8:3e:37:96:1b:cd:2e:90:35:ae:2c:
8c:b6:82:fb:21:97:12:b2:7b:01:57:b5:f3:80:88:
0a:a0:98:5c:f0:13:e3:38:31:dd:c1:45:00:69:60:
42:cf:09:cd:50:89:8c:c5:06:a7:01:ff:e9:75:88:
1a:18:63:d7:37:17:4f:1f:15:cc:8b:b1:9f:c0:22:
d2:4f:6b:02:4d:7e:d3:5b:5f:07:1b:a6:75:49:e7:
4f:9b:40:30:71:5d:5d:34:ad:4e:7f:28:49:05:72:
f2:ed:65:d7:aa:c0:7f:d3:6d:50:df:e5:62:0b:62:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:78:90:91:87:F6:B0:40:CF:CB:27:7D:67:DD:35:A5:57:23:61:5F
X509v3 Authority Key Identifier:
keyid:34:E8:37:F9:C4:2B:4E:64:D0:27:4E:86:B7:DA:0C:92:89:31:63:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/9C77CDA869D411EF98D24464762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.219.0/24
Signature Algorithm: sha256WithRSAEncryption
12:2a:8f:79:40:3d:6b:97:02:c8:6e:70:f8:4a:09:06:2f:0a:
8a:8c:80:83:1e:e3:b1:e8:4d:ac:97:5b:86:b7:74:a5:ba:45:
ad:0d:79:37:be:c7:73:ec:72:eb:73:e6:e0:85:29:ed:38:42:
40:68:9e:fa:c8:36:d4:2f:80:bd:36:8c:3c:1a:96:16:4c:66:
9b:b2:39:7a:b9:0d:af:cc:04:cf:b7:64:e6:41:39:83:7f:e6:
fc:14:53:8a:25:ea:9f:64:44:b2:10:50:c0:03:d8:85:7e:b1:
ba:9a:90:43:1e:fc:07:00:75:85:9c:08:76:4e:26:d0:22:f4:
04:90:e6:bc:52:84:98:cf:ed:c9:04:f8:0d:35:78:3d:03:91:
9d:1a:0c:95:83:da:a7:fe:52:ec:5f:c2:2d:61:d2:a0:db:d0:
10:89:79:ba:31:8b:73:7f:d9:22:9f:04:b6:c3:8f:7d:74:01:
04:61:1a:47:3b:7a:89:97:3c:07:4a:9d:3d:ef:65:51:1c:87:
e7:dc:42:f8:39:98:e7:e0:ac:44:7c:74:8b:66:69:20:b2:a0:
48:54:e8:be:f4:9a:3d:bc:9f:8a:a1:4e:56:74:a5:7b:a7:aa:
3e:84:77:b3:99:d2:f2:1e:c8:e8:03:b4:2b:6c:e8:54:21:fc:
fc:7d:2c:b3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0UxMzVBRjExMC8GA1UEBRMoMzRFODM3RjlDNDJCNEU2NEQwMjc0RTg2QjdEQTBD
OTI4OTMxNjMwRjAeFw0yNDA5MDMwOTEyMTJaFw0yNTEyMzEwOTEyMTJaMBgxFjAU
BgNVBAMTDTY2ZDZkMmVmLTY0MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPyBrZMbd8d1ojnDEEy4o1Bh93fb+swntY1iola/m4sKRC/g4KHY+Pyezk
uHgaWXqewLgmG9NkIH64o8Z/hmUq8KbOXOM/OUCdPcbpYGhXl8utfCi/UrhPYLiP
02ftnoUrsUXoNO90YSxT7KbOrPwQsjfjJuJrNbFvWtZ/NkBifYmmAQPlvklCMnLI
PjeWG80ukDWuLIy2gvshlxKyewFXtfOAiAqgmFzwE+M4Md3BRQBpYELPCc1QiYzF
BqcB/+l1iBoYY9c3F08fFcyLsZ/AItJPawJNftNbXwcbpnVJ50+bQDBxXV00rU5/
KEkFcvLtZdeqwH/TbVDf5WILYqvDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU1XiQ
kYf2sEDPyyd9Z901pVcjYV8wHwYDVR0jBBgwFoAUNOg3+cQrTmTQJ06Gt9oMkokx
Yw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdFMTM1L0Y2RTgxMjU4MkZBQTExRUU4RDYwOTU2MTRBRDlFNkZDL05PZzMt
Y1FyVG1UUUowNkd0OW9Na29reFl3OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL05PZzMtY1FyVG1UUUowNkd0OW9Na29reFl3OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdFMTM1L0Y2RTgxMjU4MkZBQTExRUU4RDYwOTU2MTRB
RDlFNkZDLzlDNzdDREE4NjlENDExRUY5OEQyNDQ2NDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1NswDQYJKoZIhvcNAQEL
BQADggEBABIqj3lAPWuXAshucPhKCQYvCoqMgIMe47HoTayXW4a3dKW6Ra0NeTe+
x3Pscutz5uCFKe04QkBonvrINtQvgL02jDwalhZMZpuyOXq5Da/MBM+3ZOZBOYN/
5vwUU4ol6p9kRLIQUMAD2IV+sbqakEMe/AcAdYWcCHZOJtAi9ASQ5rxShJjP7ckE
+A01eD0DkZ0aDJWD2qf+Uuxfwi1h0qDb0BCJeboxi3N/2SKfBLbDj310AQRhGkc7
eomXPAdKnT3vZVEch+fcQvg5mOfgrER8dItmaSCyoEhU6L70mj28n4qhTlZ0pXun
qj6Ed7OZ0vIeyOgDtCts6FQh/Px9LLM=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:20:33 2025 by rpki-client