Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/F85AF57E067211F09411CC9B762E951A.roa
File: F85AF57E067211F09411CC9B762E951A.roa (raw, json)
Hash identifier: M7iTLJiKvNwSTd9F5Yj4i6rXdd1RJ7bKnAkeW0q5GC8=
Subject key identifier: 6D:56:49:33:67:8C:33:FC:3B:10:E1:1B:01:85:9A:3D:48:EF:C9:32
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 0207
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/F85AF57E067211F09411CC9B762E951A.roa
Signing time: Fri 21 Mar 2025 16:38:51 +0000
ROA not before: Fri 21 Mar 2025 16:38:47 +0000
ROA not after: Mon 20 Mar 2028 16:38:47 +0000
asID: 328988
IP address blocks: 102.218.48.0/22 maxlen: 22
102.218.48.0/24 maxlen: 24
102.218.49.0/24 maxlen: 24
102.218.50.0/24 maxlen: 24
102.218.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF
Validity
Not Before: Mar 21 16:38:47 2025 GMT
Not After : Mar 20 16:38:47 2028 GMT
Subject: CN=67dd961b-f42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:45:65:81:65:a3:ef:48:7c:e1:d3:c6:e3:
84:19:0b:80:ef:51:db:83:f0:3c:10:73:e8:ac:c5:
51:46:2b:4b:24:03:5b:03:40:e5:0e:b7:c8:ce:66:
41:07:e0:c1:36:db:f2:19:97:02:3e:78:f8:b2:72:
3c:44:0f:71:4e:4e:90:2b:96:20:1c:93:78:9c:a3:
60:b7:47:47:a9:19:94:2b:79:05:54:99:af:3a:76:
01:10:aa:71:bc:87:23:9a:4f:d4:d5:50:6c:2c:ea:
e1:11:52:4a:16:5f:15:e7:c6:8b:8d:e2:09:0b:e3:
34:32:14:25:d4:86:fa:0b:95:f1:c3:e6:be:e8:0e:
2f:57:a2:1a:41:d6:a2:ed:d4:fe:eb:8f:57:a9:bb:
a9:e0:18:45:08:08:6e:b5:fc:d6:76:ed:53:42:eb:
f7:78:d0:08:c9:54:79:c4:d7:8d:e2:70:51:97:5b:
36:fa:4f:4c:49:86:c2:97:79:d0:27:e9:18:2b:87:
8d:a3:bb:a2:6a:89:28:38:58:a5:01:90:53:f2:f8:
77:f2:44:7b:f3:05:56:19:82:9a:fc:b1:68:ef:95:
35:2e:ee:5f:3e:8c:0d:93:04:42:07:fb:70:eb:76:
fb:be:95:0e:25:ec:67:18:1d:fc:b5:5e:f4:3b:1d:
5f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:56:49:33:67:8C:33:FC:3B:10:E1:1B:01:85:9A:3D:48:EF:C9:32
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/F85AF57E067211F09411CC9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.48.0/22
Signature Algorithm: sha256WithRSAEncryption
39:43:0d:06:0b:7b:e2:16:ef:7a:10:cd:38:88:d8:1a:00:38:
e9:b2:30:94:95:e7:b1:8b:9a:32:13:e8:f8:2c:6e:84:a7:e9:
f6:eb:53:f0:9e:34:71:a5:70:e7:7a:9e:62:b1:26:43:a5:d5:
df:e1:bf:56:f8:c7:25:9f:08:aa:98:a6:e0:17:cc:d4:3e:e1:
79:5a:8d:d3:50:1b:c2:40:88:0e:64:18:df:97:c3:a7:e8:d1:
f4:00:89:25:10:d2:39:fc:01:c7:74:87:0e:75:d6:c0:1e:0e:
ff:ea:a3:0e:39:5a:d9:4b:36:2b:7c:4b:21:96:ea:18:96:5a:
54:c7:10:33:4d:b0:da:2f:08:5a:f2:27:9e:20:ac:57:a5:4d:
af:24:92:f7:dc:86:24:18:51:3f:f0:63:e5:96:a3:13:4d:05:
04:16:cf:41:84:83:41:50:7a:83:53:59:f2:c3:dc:3e:27:74:
3b:07:3e:c8:b7:9b:9f:f8:d0:72:86:e6:55:b7:d1:17:e9:3c:
7e:5f:07:7b:76:0a:fb:28:a6:22:94:fd:cb:60:fb:2b:70:f8:
b1:a8:b6:64:93:4a:e1:c8:83:fb:ad:3c:68:81:b2:f3:3b:e0:
0a:cb:ac:e5:c8:1a:f1:57:14:25:5a:de:fa:8d:75:9b:81:bf:
9a:ed:50:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:42 2025 by rpki-client