Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/7D62968EF38411EFBBE68BB7762E951A.roa
File: 7D62968EF38411EFBBE68BB7762E951A.roa (raw, json)
Hash identifier: sQ7RivVCyLhIuVpI05Lmannno3rY40Z+9ufIBt5eEWw=
Subject key identifier: 8D:27:26:74:FF:CD:41:9F:8F:BE:82:00:52:B2:47:56:16:BE:D3:EE
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 01BE
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/7D62968EF38411EFBBE68BB7762E951A.roa
Signing time: Tue 25 Feb 2025 14:26:24 +0000
ROA not before: Tue 25 Feb 2025 14:26:20 +0000
ROA not after: Wed 25 Feb 2026 14:26:20 +0000
asID: 19905
IP address blocks: 102.208.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF
Validity
Not Before: Feb 25 14:26:20 2025 GMT
Not After : Feb 25 14:26:20 2026 GMT
Subject: CN=67bdd310-37cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:69:65:ab:ad:8c:4f:37:95:be:99:fb:5f:9d:
81:02:5b:16:07:25:a8:c5:b6:4f:5c:40:31:cc:ae:
7a:51:85:c5:86:fd:03:3d:d2:5c:10:b7:ed:92:b1:
72:27:45:12:7a:25:a7:72:c9:a8:dc:89:b8:a6:de:
68:b2:67:26:1d:33:78:89:d9:f5:2f:d7:20:d6:65:
4a:9c:95:55:a2:df:45:54:3e:14:67:a4:a7:43:b5:
b0:94:9f:eb:fd:48:8b:04:df:25:20:33:06:d9:3b:
9f:ef:d7:d7:7d:8a:3e:02:49:6d:36:70:7d:71:a5:
9e:73:8d:02:2c:29:d0:1f:69:89:a5:2b:92:41:cc:
4d:ec:31:00:f6:42:c6:47:70:5f:33:d0:36:89:6e:
5e:1e:8e:42:92:98:26:02:c7:c3:08:f9:48:a3:74:
b6:67:d4:d6:e7:57:07:5c:14:da:72:3c:9e:db:65:
72:6d:75:cf:19:b7:5f:15:26:04:28:e1:22:54:83:
c9:c6:c6:e3:2c:24:75:8b:aa:06:99:ab:77:fb:a7:
7a:c1:f4:5a:ff:a7:a3:14:20:e5:d3:7d:79:c9:32:
d2:5c:0e:d6:66:c8:d8:04:3a:a5:6a:58:cb:43:d9:
46:88:1d:e3:20:3f:9b:93:ac:99:6e:20:66:2d:9c:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:27:26:74:FF:CD:41:9F:8F:BE:82:00:52:B2:47:56:16:BE:D3:EE
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/7D62968EF38411EFBBE68BB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.99.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:9c:fa:98:76:d7:27:41:d8:89:e4:e7:51:df:02:c6:1f:7f:
1c:61:16:e8:e0:e4:ef:eb:55:6e:5b:95:a5:29:d1:cb:3e:bd:
af:45:b5:2f:76:e3:38:8d:e7:03:f6:5c:59:79:92:26:2e:0f:
45:37:b9:3d:81:e1:2e:e9:6a:60:40:7e:52:0e:31:43:20:e9:
93:ce:aa:26:8d:98:30:6b:30:34:15:ea:78:49:30:18:52:5f:
ca:16:81:e5:c1:c1:17:f8:ad:84:0f:68:27:48:65:73:64:30:
77:5f:8d:07:ad:0e:78:f6:91:94:ff:9e:ba:b1:41:93:02:aa:
82:cb:5e:04:ce:05:16:84:38:e2:95:05:25:0d:8e:2f:7b:90:
97:ab:4e:13:e5:9c:ab:83:a6:11:71:26:90:d2:31:cd:d1:c6:
3f:5e:78:27:0c:32:76:b3:54:00:42:f8:ed:02:01:25:d8:9b:
d9:49:bb:05:b0:8a:2e:c0:32:f2:41:b6:7b:2e:ad:3c:6a:d7:
aa:81:59:4b:90:27:4e:c9:e8:5f:e5:74:27:ae:2e:6d:e9:12:
96:a1:56:3f:dc:10:42:19:38:9a:aa:53:a7:3d:f1:6e:67:6b:
07:63:af:e3:3e:ee:dd:ac:ef:f6:eb:8a:00:e9:34:6c:18:64:
e1:72:dc:c1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0EzNTFBRjExMC8GA1UEBRMoNThEQTNCRTMzMUE2MTJBQUFFNEY2QTMwNjM3NzA0
MDYzQUMzREQ0MjAeFw0yNTAyMjUxNDI2MjBaFw0yNjAyMjUxNDI2MjBaMBgxFjAU
BgNVBAMTDTY3YmRkMzEwLTM3Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqaWWrrYxPN5W+mftfnYECWxYHJajFtk9cQDHMrnpRhcWG/QM90lwQt+2S
sXInRRJ6Jadyyajcibim3miyZyYdM3iJ2fUv1yDWZUqclVWi30VUPhRnpKdDtbCU
n+v9SIsE3yUgMwbZO5/v19d9ij4CSW02cH1xpZ5zjQIsKdAfaYmlK5JBzE3sMQD2
QsZHcF8z0DaJbl4ejkKSmCYCx8MI+UijdLZn1NbnVwdcFNpyPJ7bZXJtdc8Zt18V
JgQo4SJUg8nGxuMsJHWLqgaZq3f7p3rB9Fr/p6MUIOXTfXnJMtJcDtZmyNgEOqVq
WMtD2UaIHeMgP5uTrJluIGYtnL4nAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUjScm
dP/NQZ+PvoIAUrJHVha+0+4wHwYDVR0jBBgwFoAUWNo74zGmEqquT2owY3cEBjrD
3UIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBMzUxL0Q4RTZDNUVBQzJFNjExRUU4QjkwNjk3Qjc3NTQxMkU2L1dObzc0
ekdtRXFxdVQyb3dZM2NFQmpyRDNVSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1dObzc0ekdtRXFxdVQyb3dZM2NFQmpyRDNVSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkNBMzUxL0Q4RTZDNUVBQzJFNjExRUU4QjkwNjk3Qjc3
NTQxMkU2LzdENjI5NjhFRjM4NDExRUZCQkU2OEJCNzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm0GMwDQYJKoZIhvcNAQEL
BQADggEBANCc+ph21ydB2Ink51HfAsYffxxhFujg5O/rVW5blaUp0cs+va9FtS92
4ziN5wP2XFl5kiYuD0U3uT2B4S7pamBAflIOMUMg6ZPOqiaNmDBrMDQV6nhJMBhS
X8oWgeXBwRf4rYQPaCdIZXNkMHdfjQetDnj2kZT/nrqxQZMCqoLLXgTOBRaEOOKV
BSUNji97kJerThPlnKuDphFxJpDSMc3Rxj9eeCcMMnazVABC+O0CASXYm9lJuwWw
ii7AMvJBtnsurTxq16qBWUuQJ07J6F/ldCeuLm3pEpahVj/cEEIZOJqqU6c98W5n
awdjr+M+7t2s7/brigDpNGwYZOFy3ME=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:34 2025 by rpki-client