Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/2F836E8AF38311EF90FF2DB0762E951A.roa
File: 2F836E8AF38311EF90FF2DB0762E951A.roa (raw, json)
Hash identifier: eixKhEUxjR01b8Gx9CTBl7SHJjYQhhYoIEC2uUi6dv8=
Subject key identifier: 30:10:30:04:A7:B9:A5:E3:6B:20:56:8E:B0:74:58:3B:75:D2:F4:ED
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 01BC
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/2F836E8AF38311EF90FF2DB0762E951A.roa
Signing time: Tue 25 Feb 2025 14:17:04 +0000
ROA not before: Tue 25 Feb 2025 14:17:00 +0000
ROA not after: Wed 25 Feb 2026 14:17:00 +0000
asID: 328988
IP address blocks: 102.208.96.0/24 maxlen: 24
102.208.97.0/24 maxlen: 24
102.208.98.0/24 maxlen: 24
102.208.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF
Validity
Not Before: Feb 25 14:17:00 2025 GMT
Not After : Feb 25 14:17:00 2026 GMT
Subject: CN=67bdd0df-f63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:f8:7f:eb:c1:1b:4e:2d:8c:55:32:9d:ab:
0e:00:d9:53:d0:7d:f7:fa:ea:78:32:83:af:35:e4:
f3:89:ef:cb:66:33:16:5e:de:45:b4:d9:72:35:78:
98:d3:41:4c:f1:f5:24:7b:3f:c4:66:63:06:f2:cc:
c0:92:1a:77:50:2d:24:7b:99:10:0f:01:8a:28:34:
a0:27:ee:d7:12:15:5a:af:b2:78:9b:77:65:3d:54:
32:f6:aa:b8:58:48:e8:ad:a6:ed:80:f2:3e:12:92:
1e:fb:dc:ed:4e:cb:c9:1f:cc:c0:6b:84:cb:38:a8:
8a:6d:6b:26:15:e5:f6:4a:4e:4e:bb:0d:c9:1d:5c:
93:a4:b7:6f:1b:74:5a:61:51:23:98:58:c6:95:5c:
e2:26:e1:3d:8f:5b:ed:76:eb:b3:6a:5d:4b:14:f2:
09:1f:32:ca:70:d7:3b:f4:96:1b:9d:56:ac:96:ed:
16:9c:f3:51:45:70:fc:9a:82:fd:50:64:5a:0d:55:
2b:6a:e6:a6:a3:67:f3:8d:d7:87:8b:93:88:15:0b:
2a:24:35:3b:68:ac:01:e0:91:01:fb:c7:dc:bb:c9:
59:0c:00:ef:d5:02:39:ab:9f:10:3c:cd:ec:ca:af:
7f:d1:af:87:4a:a9:11:b5:af:b8:ad:48:f1:9a:55:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:10:30:04:A7:B9:A5:E3:6B:20:56:8E:B0:74:58:3B:75:D2:F4:ED
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/2F836E8AF38311EF90FF2DB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.96.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:c8:92:11:fa:98:df:03:61:4d:89:ee:d1:43:7f:8f:68:85:
66:37:76:5d:98:c3:df:4d:93:1b:4c:bb:49:a9:bd:36:a1:47:
9b:2e:1e:f8:06:95:f7:40:af:a3:4a:46:04:b6:a6:c8:09:15:
2e:79:a2:87:a9:7c:02:25:c5:a6:df:62:90:f6:0f:aa:99:5d:
c7:d5:e8:22:6e:92:12:01:e8:01:d5:0a:5d:ca:bd:ad:8f:86:
01:29:b8:73:14:d5:3a:e8:9a:cf:e0:44:0c:7e:56:76:b3:93:
70:68:f1:c6:89:74:a8:05:cd:2d:d4:6f:c6:f2:59:21:ce:04:
b5:57:9d:e4:6f:f6:24:0d:0b:db:31:2d:02:75:bf:0a:b0:14:
b3:19:c6:a7:cc:d4:33:9d:68:c7:d2:cf:ac:e7:cd:9e:ab:7f:
da:42:db:36:e4:54:77:ca:68:ac:a1:83:66:ac:9a:36:27:c7:
1a:b1:31:b6:f8:de:78:94:f0:a1:ef:ef:41:57:1c:b9:31:4d:
aa:ae:30:82:ef:0a:66:dc:40:ce:6b:6d:19:3e:12:2b:f7:ff:
fb:27:d8:15:fd:4d:bb:c5:a7:e6:2f:b4:95:35:74:ce:ac:d7:
a5:d0:6d:07:0f:8e:d3:c8:82:01:2d:15:2a:92:6a:b1:55:eb:
45:73:a2:22
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0EzNTFBRjExMC8GA1UEBRMoNThEQTNCRTMzMUE2MTJBQUFFNEY2QTMwNjM3NzA0
MDYzQUMzREQ0MjAeFw0yNTAyMjUxNDE3MDBaFw0yNjAyMjUxNDE3MDBaMBgxFjAU
BgNVBAMTDTY3YmRkMGRmLWY2M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIcPh/68EbTi2MVTKdqw4A2VPQfff66ngyg6815POJ78tmMxZe3kW02XI1
eJjTQUzx9SR7P8RmYwbyzMCSGndQLSR7mRAPAYooNKAn7tcSFVqvsnibd2U9VDL2
qrhYSOitpu2A8j4Skh773O1Oy8kfzMBrhMs4qIptayYV5fZKTk67DckdXJOkt28b
dFphUSOYWMaVXOIm4T2PW+1267NqXUsU8gkfMspw1zv0lhudVqyW7Rac81FFcPya
gv1QZFoNVStq5qajZ/ON14eLk4gVCyokNTtorAHgkQH7x9y7yVkMAO/VAjmrnxA8
zezKr3/Rr4dKqRG1r7itSPGaVRQnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUMBAw
BKe5peNrIFaOsHRYO3XS9O0wHwYDVR0jBBgwFoAUWNo74zGmEqquT2owY3cEBjrD
3UIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBMzUxL0Q4RTZDNUVBQzJFNjExRUU4QjkwNjk3Qjc3NTQxMkU2L1dObzc0
ekdtRXFxdVQyb3dZM2NFQmpyRDNVSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1dObzc0ekdtRXFxdVQyb3dZM2NFQmpyRDNVSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkNBMzUxL0Q4RTZDNUVBQzJFNjExRUU4QjkwNjk3Qjc3
NTQxMkU2LzJGODM2RThBRjM4MzExRUY5MEZGMkRCMDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm0GAwDQYJKoZIhvcNAQEL
BQADggEBAMXIkhH6mN8DYU2J7tFDf49ohWY3dl2Yw99NkxtMu0mpvTahR5suHvgG
lfdAr6NKRgS2psgJFS55ooepfAIlxabfYpD2D6qZXcfV6CJukhIB6AHVCl3Kva2P
hgEpuHMU1Troms/gRAx+Vnazk3Bo8caJdKgFzS3Ub8byWSHOBLVXneRv9iQNC9sx
LQJ1vwqwFLMZxqfM1DOdaMfSz6znzZ6rf9pC2zbkVHfKaKyhg2asmjYnxxqxMbb4
3niU8KHv70FXHLkxTaquMILvCmbcQM5rbRk+Eiv3//sn2BX9TbvFp+YvtJU1dM6s
16XQbQcPjtPIggEtFSqSarFV60VzoiI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:14 2025 by rpki-client