Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/754E26D8065E11F09A2716A2762E951A.roa
File: 754E26D8065E11F09A2716A2762E951A.roa (raw, json)
Hash identifier: zh+pcogH6F4sf0J81SxS9FfDqpi+s0Y7FFeEVA5a1Vs=
Subject key identifier: 4D:77:18:82:81:89:30:B3:A6:3B:DD:D4:64:0C:5E:75:B4:DB:FA:2D
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 01FD
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/754E26D8065E11F09A2716A2762E951A.roa
Signing time: Fri 21 Mar 2025 14:12:01 +0000
ROA not before: Fri 21 Mar 2025 14:11:58 +0000
ROA not after: Mon 20 Apr 2026 14:11:58 +0000
asID: 19905
IP address blocks: 102.218.48.0/22 maxlen: 22
102.218.48.0/24 maxlen: 24
102.218.49.0/24 maxlen: 24
102.218.50.0/24 maxlen: 24
102.218.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF
Validity
Not Before: Mar 21 14:11:58 2025 GMT
Not After : Apr 20 14:11:58 2026 GMT
Subject: CN=67dd73b1-9be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:40:b5:91:fd:31:bd:13:12:f4:06:74:2f:
0b:3d:e6:5b:8d:05:f7:a1:04:9c:d2:ed:89:2a:99:
00:50:15:34:ae:2d:ca:e4:3d:30:58:c3:e5:c0:d2:
92:70:9a:f4:e0:a5:e5:07:ac:18:b8:fc:08:c5:c2:
c6:85:85:6e:dc:a3:73:40:db:17:59:4c:ab:6c:b3:
76:bf:58:8d:dc:d4:91:ed:44:7b:1f:6e:92:25:2b:
99:9e:81:5b:a1:90:e1:05:1a:1a:5c:87:cd:d4:a0:
7c:a6:59:6f:39:82:d9:d8:4e:3e:be:01:78:6f:d1:
b2:40:c5:63:14:70:92:82:ef:df:40:72:e8:cb:8c:
90:73:4d:bd:7b:e0:b4:fb:ae:5f:28:00:fb:20:80:
d2:e1:18:63:bc:c3:d9:ba:1b:27:62:a5:ff:60:13:
31:9f:3a:b4:eb:28:b9:49:e9:7b:ef:df:c6:6b:22:
85:33:d6:a8:8f:75:69:73:e6:4e:15:31:23:86:7a:
a8:fa:80:48:9c:a2:dc:dd:5e:e4:30:31:56:dc:b8:
34:08:32:b9:62:83:66:5a:f2:1e:2e:0a:2a:12:36:
c8:60:50:b5:28:c8:29:5a:d5:d3:74:bc:d6:f2:de:
e3:a9:c0:10:c8:b9:bc:21:4b:b9:e3:58:33:cc:52:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:77:18:82:81:89:30:B3:A6:3B:DD:D4:64:0C:5E:75:B4:DB:FA:2D
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/754E26D8065E11F09A2716A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.48.0/22
Signature Algorithm: sha256WithRSAEncryption
30:4b:2b:01:d9:88:8d:9e:e7:5f:58:c1:32:eb:e1:7c:86:4e:
d6:9d:97:40:f4:88:43:b5:2a:fe:f0:0d:05:7d:e1:5a:6d:9c:
0a:83:ef:51:93:a9:40:3e:47:00:6e:03:02:f5:01:92:aa:ee:
b8:91:25:c1:86:3a:de:1f:ca:2f:e9:60:78:90:a0:6c:88:60:
10:da:ac:52:06:18:8e:5c:d1:1e:31:65:8b:c7:35:21:d3:9f:
eb:99:18:79:ba:42:43:af:36:19:d6:43:d9:3a:36:05:a2:83:
b9:57:c5:ca:0a:2b:30:37:e7:65:de:d6:d4:26:cf:45:e5:a2:
ab:de:8c:4e:76:60:4e:31:7a:9c:53:56:3a:2e:31:2a:da:90:
3a:82:78:99:f0:d1:a9:08:38:bc:f0:36:a3:74:90:18:2f:f1:
81:0f:1b:1a:21:de:ba:01:59:5e:9b:f6:f5:7a:d6:9c:e0:aa:
e3:84:93:12:0b:cd:77:5d:63:43:0a:74:58:60:28:5d:be:b5:
10:33:02:78:cc:a8:52:94:25:83:ce:27:ca:a2:a7:49:24:7a:
5c:ce:48:81:35:3c:96:12:3a:20:74:15:8e:c4:3a:f6:db:fb:
e4:1a:e1:e7:2f:59:42:13:72:04:e2:bd:7c:71:28:d2:45:1e:
7f:c7:28:90
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0EzNTFBRjExMC8GA1UEBRMoNThEQTNCRTMzMUE2MTJBQUFFNEY2QTMwNjM3NzA0
MDYzQUMzREQ0MjAeFw0yNTAzMjExNDExNThaFw0yNjA0MjAxNDExNThaMBgxFjAU
BgNVBAMTDTY3ZGQ3M2IxLTliZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4S0C1kf0xvRMS9AZ0Lws95luNBfehBJzS7YkqmQBQFTSuLcrkPTBYw+XA
0pJwmvTgpeUHrBi4/AjFwsaFhW7co3NA2xdZTKtss3a/WI3c1JHtRHsfbpIlK5me
gVuhkOEFGhpch83UoHymWW85gtnYTj6+AXhv0bJAxWMUcJKC799AcujLjJBzTb17
4LT7rl8oAPsggNLhGGO8w9m6Gydipf9gEzGfOrTrKLlJ6Xvv38ZrIoUz1qiPdWlz
5k4VMSOGeqj6gEicotzdXuQwMVbcuDQIMrlig2Za8h4uCioSNshgULUoyCla1dN0
vNby3uOpwBDIubwhS7njWDPMUrkVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUTXcY
goGJMLOmO93UZAxedbTb+i0wHwYDVR0jBBgwFoAUWNo74zGmEqquT2owY3cEBjrD
3UIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBMzUxL0Q4RTZDNUVBQzJFNjExRUU4QjkwNjk3Qjc3NTQxMkU2L1dObzc0
ekdtRXFxdVQyb3dZM2NFQmpyRDNVSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1dObzc0ekdtRXFxdVQyb3dZM2NFQmpyRDNVSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkNBMzUxL0Q4RTZDNUVBQzJFNjExRUU4QjkwNjk3Qjc3
NTQxMkU2Lzc1NEUyNkQ4MDY1RTExRjA5QTI3MTZBMjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm2jAwDQYJKoZIhvcNAQEL
BQADggEBADBLKwHZiI2e519YwTLr4XyGTtadl0D0iEO1Kv7wDQV94VptnAqD71GT
qUA+RwBuAwL1AZKq7riRJcGGOt4fyi/pYHiQoGyIYBDarFIGGI5c0R4xZYvHNSHT
n+uZGHm6QkOvNhnWQ9k6NgWig7lXxcoKKzA352Xe1tQmz0XloqvejE52YE4xepxT
VjouMSrakDqCeJnw0akIOLzwNqN0kBgv8YEPGxoh3roBWV6b9vV61pzgquOEkxIL
zXddY0MKdFhgKF2+tRAzAnjMqFKUJYPOJ8qip0kkelzOSIE1PJYSOiB0FY7EOvbb
++Qa4ecvWUITcgTivXxxKNJFHn/HKJA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:41 2025 by rpki-client