Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/967E592CF1E611EFBCF7DD4F762E951A.roa
File: 967E592CF1E611EFBCF7DD4F762E951A.roa (raw, json)
Hash identifier: OyrLKAFW3d4E09yYEW9wskKKqknjSYiMg4ra/6illO4=
Subject key identifier: 16:35:47:0F:F9:FA:7D:3B:41:61:00:44:11:33:8D:69:AC:4B:21:7A
Certificate issuer: /CN=F36D289CAF/serialNumber=15480AC3E7637CF2A7B6887AFD51A53F03E6AD47
Certificate serial: 0845
Authority key identifier: 15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/967E592CF1E611EFBCF7DD4F762E951A.roa
Signing time: Sun 23 Feb 2025 13:03:34 +0000
ROA not before: Sun 23 Feb 2025 13:03:24 +0000
ROA not after: Thu 28 Feb 2030 13:03:24 +0000
asID: 327754
IP address blocks: 102.217.232.0/22 maxlen: 22
102.217.232.0/24 maxlen: 24
102.217.233.0/24 maxlen: 24
102.217.234.0/24 maxlen: 24
102.217.235.0/24 maxlen: 24
102.223.240.0/23 maxlen: 23
102.223.240.0/24 maxlen: 24
102.223.241.0/24 maxlen: 24
154.73.208.0/21 maxlen: 21
154.73.208.0/24 maxlen: 24
154.73.209.0/24 maxlen: 24
154.73.210.0/24 maxlen: 24
154.73.211.0/24 maxlen: 24
154.73.212.0/24 maxlen: 24
154.73.213.0/24 maxlen: 24
154.73.214.0/24 maxlen: 24
154.73.215.0/24 maxlen: 24
2c0f:f508::/32 maxlen: 32
2c0f:f508::/36 maxlen: 36
2c0f:f508:2::/48 maxlen: 48
2c0f:f508:1000::/36 maxlen: 36
2c0f:f508:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2117 (0x845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D289CAF
Validity
Not Before: Feb 23 13:03:24 2025 GMT
Not After : Feb 28 13:03:24 2030 GMT
Subject: CN=67bb1ca6-7c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5c:a7:3a:38:14:8c:a1:34:ba:e7:a2:6f:40:
28:54:a5:a9:ba:7f:33:83:6d:61:c2:30:5f:07:c1:
9b:25:ab:aa:dc:c1:79:c1:4a:fb:e9:36:ab:99:4a:
75:10:72:8c:65:ab:35:c3:57:2c:b2:4f:7f:9e:b3:
5b:ea:c8:5e:06:c7:f4:4b:21:39:b0:ab:9e:46:dc:
07:36:cb:f3:0f:ad:09:bb:13:42:a3:d3:98:f4:c6:
42:3c:ff:61:7c:a2:8f:61:d5:70:64:59:a3:c2:57:
89:51:2d:97:6c:f2:52:19:7f:a3:0f:81:3e:bb:24:
08:95:df:fb:d7:ad:34:3b:e8:ee:5e:4b:80:d7:ce:
4d:0d:a5:26:ef:1e:ce:f4:b9:7a:8d:75:1f:de:70:
1e:0d:f6:50:47:9c:3d:43:bd:f1:53:b7:f1:fc:3b:
d2:f9:e0:38:f2:7d:f2:b2:29:aa:2f:bc:50:34:ea:
6f:5d:80:4d:40:3a:67:03:94:31:1d:1e:fe:82:c5:
a5:e2:77:af:1a:2a:53:29:67:8f:67:b1:51:5a:c6:
f7:e9:2c:86:20:25:d2:5e:69:f8:bb:0b:a0:0e:30:
c3:eb:d6:c3:24:21:0c:59:15:a4:e1:e4:80:99:28:
40:86:de:2e:5f:4c:b7:07:2e:80:f1:49:fc:94:ea:
a5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:35:47:0F:F9:FA:7D:3B:41:61:00:44:11:33:8D:69:AC:4B:21:7A
X509v3 Authority Key Identifier:
keyid:15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/967E592CF1E611EFBCF7DD4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.232.0/22
102.223.240.0/23
154.73.208.0/21
IPv6:
2c0f:f508::/32
Signature Algorithm: sha256WithRSAEncryption
a2:0f:ba:63:2f:ca:eb:95:3c:ee:b6:20:3c:81:f2:85:52:79:
c0:1b:18:32:c2:81:ad:fd:c4:98:8e:6d:c9:31:f3:e4:bf:c8:
eb:7c:80:5f:69:ed:60:70:f1:5d:56:22:04:db:24:27:cd:b9:
5c:d4:06:de:fb:bb:d1:4c:a7:1a:ee:51:0d:c3:81:91:1c:af:
d9:2a:f7:b1:01:74:14:50:4f:e8:21:87:77:7a:a3:93:68:1c:
39:a5:0f:93:72:5b:bb:ed:51:f8:f7:aa:fb:29:31:9b:22:dd:
f0:04:90:af:bb:7e:bd:ec:44:13:d6:9b:f2:58:74:12:c4:91:
07:56:ad:9c:d7:50:23:9a:00:e9:8b:03:e8:62:53:d4:29:cb:
cc:aa:90:d0:0d:61:65:45:25:5a:ac:cb:47:d3:0a:7b:d7:46:
a7:28:d9:7c:dd:ea:e1:bc:ee:11:e6:76:a1:51:af:fd:33:f0:
9e:74:6d:0d:0a:76:e4:32:4b:00:46:6f:54:57:8e:7f:7d:c0:
1b:32:5b:d5:44:25:d1:45:7c:6e:60:d3:3b:2d:55:6c:d7:f0:
08:a7:d2:4a:bc:69:9c:90:62:a0:a5:0e:2f:f2:51:24:24:6e:
ca:16:97:80:2e:61:d5:24:cf:20:d8:cd:a3:81:42:72:bf:d7:
0a:97:10:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:35:46 2025 by rpki-client