Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368FA6A/6CBAEAEA314111EE966FDA354AD9E6FC/275D99F2EF7211EF8774227E762E951A.roa
File: 275D99F2EF7211EF8774227E762E951A.roa (raw, json)
Hash identifier: M455I8LJZLqnMd1UAu/MDdnNO61RG2WV3cSUTHKWXDM=
Subject key identifier: B7:F3:09:07:95:87:4C:E6:8D:E0:4F:7C:2C:36:EE:86:20:94:7A:B0
Certificate issuer: /CN=F368FA6AAF/serialNumber=47CAE3C1751A50AB7CE16B1D5922AEB92614FAFA
Certificate serial: 0256
Authority key identifier: 47:CA:E3:C1:75:1A:50:AB:7C:E1:6B:1D:59:22:AE:B9:26:14:FA:FA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/R8rjwXUaUKt84WsdWSKuuSYU-vo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368FA6A/6CBAEAEA314111EE966FDA354AD9E6FC/275D99F2EF7211EF8774227E762E951A.roa
Signing time: Thu 20 Feb 2025 10:05:04 +0000
ROA not before: Thu 20 Feb 2025 10:05:00 +0000
ROA not after: Tue 20 Feb 2035 10:05:00 +0000
asID: 37356
IP address blocks: 102.134.80.0/22 maxlen: 22
102.134.80.0/24 maxlen: 24
102.134.81.0/24 maxlen: 24
102.134.82.0/24 maxlen: 24
102.134.83.0/24 maxlen: 24
102.214.196.0/22 maxlen: 22
102.214.196.0/24 maxlen: 24
102.214.197.0/24 maxlen: 24
102.214.198.0/24 maxlen: 24
102.214.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368FA6AAF
Validity
Not Before: Feb 20 10:05:00 2025 GMT
Not After : Feb 20 10:05:00 2035 GMT
Subject: CN=67b6fe50-db14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:e6:79:57:13:a5:48:60:ac:02:5d:b9:5a:
dd:6c:06:43:3e:ce:2a:09:31:a7:de:fa:09:4b:73:
05:7d:11:50:3e:91:c5:42:c1:7e:2f:93:75:c4:0f:
b0:be:e1:1f:bc:e4:0b:a8:8b:9c:dd:5d:1c:0d:29:
06:79:55:8e:7d:90:42:70:fe:ca:bd:45:a0:41:48:
69:74:77:44:db:36:2b:d9:6b:89:ec:b0:bb:96:bb:
ac:52:52:d9:df:cb:9e:19:85:25:d2:78:7a:80:f1:
dd:4d:27:08:95:e4:32:ef:9b:f9:23:80:42:53:55:
f1:51:24:41:9d:5f:76:74:f4:7b:7d:89:73:83:6b:
95:b2:70:c4:25:80:af:86:2b:6c:8a:05:57:bd:72:
74:33:e7:b6:09:41:14:f2:02:8c:25:f5:d9:10:6f:
29:62:70:7b:b1:e9:88:53:01:32:80:42:cd:32:b2:
23:64:fa:97:d9:2b:78:1d:15:dd:4c:71:5e:f8:80:
75:1b:8a:48:6c:d3:90:a6:ae:c9:ed:fe:2c:ed:ad:
49:6b:f9:7d:bd:79:cb:0f:5c:a6:a1:f1:3b:5f:91:
62:f4:2e:12:31:52:c9:72:a2:ba:8b:cc:ab:e4:47:
6d:03:73:2c:8b:17:9b:d6:d6:8f:1a:5b:de:ff:1b:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F3:09:07:95:87:4C:E6:8D:E0:4F:7C:2C:36:EE:86:20:94:7A:B0
X509v3 Authority Key Identifier:
keyid:47:CA:E3:C1:75:1A:50:AB:7C:E1:6B:1D:59:22:AE:B9:26:14:FA:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368FA6A/6CBAEAEA314111EE966FDA354AD9E6FC/R8rjwXUaUKt84WsdWSKuuSYU-vo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/R8rjwXUaUKt84WsdWSKuuSYU-vo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368FA6A/6CBAEAEA314111EE966FDA354AD9E6FC/275D99F2EF7211EF8774227E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.134.80.0/22
102.214.196.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:ea:67:0a:d5:ab:17:33:cc:af:a0:2c:f9:c1:6a:5a:6c:24:
8d:f8:33:33:56:29:a9:86:a3:f7:b2:5e:d2:be:b9:90:01:88:
5c:7c:ba:e5:27:7c:53:13:4d:aa:34:16:40:90:76:5b:33:50:
63:21:62:a9:b8:1f:4e:c0:b1:01:29:eb:6a:8b:b5:39:55:0c:
ee:12:bd:f9:50:31:3a:a9:ee:47:13:c2:88:51:2b:c3:84:27:
65:ed:50:61:30:2a:1e:f1:53:36:6d:b2:81:d0:57:87:cd:b2:
e4:89:cd:f8:3c:ee:fa:ad:35:7e:d1:e4:5b:bf:e5:73:9b:27:
76:90:db:87:0b:cc:5c:70:c5:01:ab:68:9e:78:1d:b1:2d:23:
e2:c6:e0:56:0c:4e:85:99:2e:07:b2:68:2c:cb:8e:72:ec:65:
5f:23:b2:5d:35:d9:ce:47:6a:71:0f:c1:46:1a:3f:d2:1f:92:
93:29:c2:a1:bb:ad:1b:43:6d:df:50:49:12:1f:42:5f:2a:f9:
42:ab:ff:2f:69:83:77:b0:0e:0a:d4:c8:90:2f:68:b7:f6:e4:
a5:1b:d6:b9:95:90:54:0b:9a:ac:44:b9:c8:ec:cd:56:3a:82:
f7:cc:2f:41:74:d2:ee:8b:c8:ff:ca:5a:66:f6:6f:5d:73:4d:
d7:61:26:f4
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEZBNkFBRjExMC8GA1UEBRMoNDdDQUUzQzE3NTFBNTBBQjdDRTE2QjFENTkyMkFF
QjkyNjE0RkFGQTAeFw0yNTAyMjAxMDA1MDBaFw0zNTAyMjAxMDA1MDBaMBgxFjAU
BgNVBAMTDTY3YjZmZTUwLWRiMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUh+Z5VxOlSGCsAl25Wt1sBkM+zioJMafe+glLcwV9EVA+kcVCwX4vk3XE
D7C+4R+85Auoi5zdXRwNKQZ5VY59kEJw/sq9RaBBSGl0d0TbNivZa4nssLuWu6xS
Utnfy54ZhSXSeHqA8d1NJwiV5DLvm/kjgEJTVfFRJEGdX3Z09Ht9iXODa5WycMQl
gK+GK2yKBVe9cnQz57YJQRTyAowl9dkQbylicHux6YhTATKAQs0ysiNk+pfZK3gd
Fd1McV74gHUbikhs05Cmrsnt/iztrUlr+X29ecsPXKah8TtfkWL0LhIxUslyorqL
zKvkR20DcyyLF5vW1o8aW97/G0dDAgMBAAGjggKrMIICpzAdBgNVHQ4EFgQUt/MJ
B5WHTOaN4E98LDbuhiCUerAwHwYDVR0jBBgwFoAUR8rjwXUaUKt84WsdWSKuuSYU
+vowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGQTZBLzZDQkFFQUVBMzE0MTExRUU5NjZGREEzNTRBRDlFNkZDL1I4cmp3
WFVhVUt0ODRXc2RXU0t1dVNZVS12by5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1I4cmp3WFVhVUt0ODRXc2RXU0t1dVNZVS12by5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGQTZBLzZDQkFFQUVBMzE0MTExRUU5NjZGREEzNTRB
RDlFNkZDLzI3NUQ5OUYyRUY3MjExRUY4Nzc0MjI3RTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAJmhlADBAJm1sQwDQYJKoZI
hvcNAQELBQADggEBACrqZwrVqxczzK+gLPnBalpsJI34MzNWKamGo/eyXtK+uZAB
iFx8uuUnfFMTTao0FkCQdlszUGMhYqm4H07AsQEp62qLtTlVDO4SvflQMTqp7kcT
wohRK8OEJ2XtUGEwKh7xUzZtsoHQV4fNsuSJzfg87vqtNX7R5Fu/5XObJ3aQ24cL
zFxwxQGraJ54HbEtI+LG4FYMToWZLgeyaCzLjnLsZV8jsl012c5HanEPwUYaP9If
kpMpwqG7rRtDbd9QSRIfQl8q+UKr/y9pg3ewDgrUyJAvaLf25KUb1rmVkFQLmqxE
ucjszVY6gvfML0F00u6LyP/KWmb2b11zTddhJvQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:14 2025 by rpki-client