Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/50FDE6E2067211F0AC6ABF97762E951A.roa
File: 50FDE6E2067211F0AC6ABF97762E951A.roa (raw, json)
Hash identifier: y7Nv+bH3FidSubQa8fRdolbEXF7mYdZZhVh8i0wIYHw=
Subject key identifier: 85:75:06:D7:DC:85:B6:47:A5:FD:FC:C2:B7:70:ED:8D:8A:9A:8D:15
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 0203
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/50FDE6E2067211F0AC6ABF97762E951A.roa
Signing time: Fri 21 Mar 2025 16:34:10 +0000
ROA not before: Fri 21 Mar 2025 16:34:06 +0000
ROA not after: Mon 23 Mar 2026 16:34:06 +0000
asID: 19905
IP address blocks: 102.213.68.0/22 maxlen: 22
102.213.68.0/24 maxlen: 24
102.213.69.0/24 maxlen: 24
102.213.70.0/24 maxlen: 24
102.213.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515 (0x203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF
Validity
Not Before: Mar 21 16:34:06 2025 GMT
Not After : Mar 23 16:34:06 2026 GMT
Subject: CN=67dd9502-7be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:51:15:ec:e4:6a:34:8d:f1:b0:d9:d5:f0:23:
2b:b0:fb:0b:80:a9:df:d0:9d:e2:67:67:af:23:d1:
fd:56:7d:83:ba:d9:81:d0:ef:2f:13:f4:ca:ad:d9:
1f:06:6d:6b:bb:6b:2a:07:69:da:bc:22:36:d0:30:
d3:f6:58:51:26:9a:2c:7e:c0:ae:f4:c6:52:b6:08:
79:82:dc:74:94:ad:65:71:ee:55:28:12:c1:5f:6e:
d7:b1:9e:4a:b8:d3:b5:bf:54:20:f0:b8:86:61:a8:
08:d8:bf:81:5a:6e:88:67:60:04:05:a8:ad:3a:da:
c9:0f:b1:a7:74:5c:10:8c:16:4d:ea:8d:fe:e9:ee:
ac:84:07:5f:70:49:ba:7d:e7:5b:ad:71:f8:63:2a:
90:a9:68:5f:a1:bd:fe:c2:a3:90:81:4a:e9:d6:a9:
69:d9:8b:25:9d:89:d5:2c:67:3f:c0:56:6c:29:e2:
90:9f:63:26:a4:04:d0:03:50:cf:68:32:05:25:80:
c7:05:5e:10:82:31:c4:a5:42:0e:58:67:58:55:5c:
9e:bf:08:32:dc:0c:f0:a5:4a:78:0b:9d:97:67:f0:
95:99:69:98:56:fe:df:88:57:fa:95:0c:1a:18:4a:
9e:7f:02:4f:6e:c8:b1:1f:1d:6f:f0:e1:25:14:80:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:75:06:D7:DC:85:B6:47:A5:FD:FC:C2:B7:70:ED:8D:8A:9A:8D:15
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/50FDE6E2067211F0AC6ABF97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.68.0/22
Signature Algorithm: sha256WithRSAEncryption
30:74:95:7d:28:a8:f4:ec:30:58:67:29:a1:da:50:c3:2a:90:
7a:a9:1d:57:17:e7:89:a6:a2:0a:01:71:d8:e5:50:ac:d8:aa:
c5:4c:0e:c4:24:eb:40:e5:12:ad:d1:58:1b:95:81:98:6f:f3:
a2:b3:50:e6:38:74:18:c3:90:81:c0:a9:1f:6e:ac:c4:fa:60:
f4:94:04:58:6a:f8:40:8d:c1:0f:77:3d:f3:2f:33:34:fc:6b:
47:f3:c8:04:6b:fb:34:16:b7:37:d1:28:72:fb:d7:a6:5b:77:
32:b7:36:f3:93:57:a9:2a:78:37:c5:d1:bc:4d:0d:b4:56:3d:
a1:d1:34:ab:47:4c:7e:97:0d:bf:98:5d:b4:f8:fd:90:d8:4f:
28:2b:44:81:d9:d3:bc:8f:6f:ab:77:a5:34:9b:ee:a4:c1:55:
06:41:79:7e:68:d7:83:3a:5f:cd:98:a8:52:f3:d4:52:03:74:
5e:c2:59:59:ee:10:01:15:98:f7:96:9c:cf:7b:af:19:7b:2c:
dd:2b:b8:c5:13:b4:26:94:b6:35:0c:c0:2f:61:eb:02:62:d6:
e8:3c:8a:61:c6:5a:54:12:c4:3b:3b:36:fc:29:68:ed:e2:dd:
48:0f:64:f4:1b:ac:25:f4:da:5e:c6:ac:be:ba:2e:e9:63:0e:
6d:2a:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:35 2025 by rpki-client