Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/14A6B390FC9A11EF8FE37599762E951A.roa
File: 14A6B390FC9A11EF8FE37599762E951A.roa (raw, json)
Hash identifier: 67LtlrMhsgcco16NUisb5awE7VV3vk8bnA8JpWdYl7U=
Subject key identifier: 78:44:8F:F2:D3:55:6F:74:9B:27:76:32:42:D7:46:20:45:C1:BB:03
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 01E1
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/14A6B390FC9A11EF8FE37599762E951A.roa
Signing time: Sun 09 Mar 2025 03:53:37 +0000
ROA not before: Sun 09 Mar 2025 03:53:34 +0000
ROA not after: Mon 09 Mar 2026 03:53:34 +0000
asID: 19905
IP address blocks: 102.213.68.0/24 maxlen: 24
102.213.69.0/24 maxlen: 24
102.213.70.0/24 maxlen: 24
102.213.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF
Validity
Not Before: Mar 9 03:53:34 2025 GMT
Not After : Mar 9 03:53:34 2026 GMT
Subject: CN=67cd10c1-2805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:ec:c7:62:eb:73:7e:c3:07:0d:17:6d:c7:
b0:1f:1f:e1:7f:c0:db:b0:a9:06:b7:b7:f7:1a:ea:
23:28:61:20:43:8a:f0:dc:91:88:25:01:1c:d2:9d:
45:b7:f6:02:b2:a7:e1:84:a7:5e:0a:a3:84:72:99:
f6:2e:b9:02:40:bc:05:a9:4c:13:39:cb:7f:ad:79:
16:55:ad:32:f9:32:a7:e4:f6:5c:6d:b3:18:93:93:
10:63:15:7c:77:39:70:b1:4a:a1:d6:e3:35:03:a6:
88:64:0b:4a:1d:53:2c:eb:21:76:2c:3f:36:9a:c4:
3a:31:e7:bd:d5:e7:ea:38:4e:51:f9:4c:a1:08:de:
e6:b1:8e:a7:a6:c5:69:0a:78:4e:c9:65:87:24:42:
0d:7f:c2:35:71:19:e7:85:7a:bc:40:ba:26:8c:9b:
13:af:59:3c:63:5e:b1:76:9b:2c:34:83:97:f3:24:
e0:77:1b:28:67:72:4c:0c:39:74:9f:ea:d7:67:64:
5c:5f:53:db:13:9c:32:da:65:29:d4:c6:90:f5:ff:
62:cb:5a:72:fa:5b:2e:19:e9:76:8c:07:15:c2:28:
33:dd:46:e0:49:2f:81:6e:7d:49:ec:32:2e:e4:1c:
a3:d8:56:c5:ef:26:ad:f0:99:67:b4:bc:bd:e6:42:
4c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:44:8F:F2:D3:55:6F:74:9B:27:76:32:42:D7:46:20:45:C1:BB:03
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/14A6B390FC9A11EF8FE37599762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.68.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:d1:d4:0a:52:ce:d6:37:cf:e7:a7:76:f7:a9:a5:8d:dc:d3:
9f:6c:e2:f9:38:9d:8c:d7:34:20:6a:eb:e0:03:09:ae:8c:0b:
d9:73:f0:07:30:89:16:e6:05:de:a4:d8:5d:b4:d5:02:37:49:
d6:cd:e4:ed:14:3a:c9:ca:7f:40:ad:48:e7:38:7c:73:66:65:
41:67:01:7c:d8:44:74:4d:09:88:89:8a:7e:6a:c6:89:d6:38:
3b:86:58:be:40:6b:a8:03:6a:a5:73:a6:c7:34:b7:8a:8b:4d:
39:58:6f:de:6d:22:04:e8:cb:c7:4b:3e:16:e1:e4:36:e3:a0:
d2:0e:3c:00:12:13:e8:0f:1a:64:63:ff:18:a3:81:bf:03:f2:
23:a7:24:33:fc:74:6f:d5:6e:e0:ae:8a:7c:ba:ef:05:5b:f6:
fb:5e:60:67:0c:61:ac:d4:7f:51:af:18:8c:3d:1c:f8:0d:c9:
44:9e:7f:d0:5c:ca:5d:6a:71:90:46:60:00:0f:45:56:35:bf:
57:ed:bf:ee:1c:6b:db:69:0d:86:6b:61:3a:72:14:46:f7:09:
cc:34:98:5e:06:8a:61:8f:f4:52:f4:39:c1:3f:f8:f1:05:d1:
a2:66:52:15:5b:28:fb:08:8c:cf:5d:1b:2b:82:1f:fb:e6:d2:
74:a0:2b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:24 2025 by rpki-client