Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/F21148340D1811EF9C229F1C017001B1.roa
File: F21148340D1811EF9C229F1C017001B1.roa (raw, json)
Hash identifier: roamLurmh2kU5AqIZviQZVrYYGAbJuxehOxqAWKDt/U=
Subject key identifier: 5C:45:9F:C3:E2:B9:47:CB:EF:C6:9B:08:EE:11:6E:6B:41:8B:CC:B9
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 018A
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/F21148340D1811EF9C229F1C017001B1.roa
Signing time: Wed 08 May 2024 08:57:06 +0000
ROA not before: Wed 08 May 2024 08:57:03 +0000
ROA not after: Wed 08 May 2030 08:57:03 +0000
asID: 56683
IP address blocks: 102.211.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF
Validity
Not Before: May 8 08:57:03 2024 GMT
Not After : May 8 08:57:03 2030 GMT
Subject: CN=663b3e62-c7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:ef:5e:f9:61:f2:d3:e6:ec:71:85:31:db:
88:e0:1c:46:3b:6d:b1:8c:23:6a:f9:eb:45:d4:71:
67:c0:34:6d:3a:9f:0a:a8:30:c5:e1:54:8e:a5:ee:
66:9e:6c:86:ae:6f:7a:4d:68:79:14:81:5b:b0:c9:
c7:04:a4:d1:cd:f6:a1:79:ed:69:3b:75:07:26:b3:
b2:cb:44:f1:0d:02:e1:62:ff:67:63:78:74:ed:2a:
4b:a0:f8:62:3e:b9:40:a6:ac:b4:92:f4:f0:d7:c9:
54:44:0b:15:63:56:be:e6:4b:31:c8:d1:d8:0d:55:
9e:eb:33:dc:18:00:52:58:ba:24:cd:7e:87:10:5e:
e6:df:2f:f6:76:31:ca:36:30:4a:68:8c:1e:b7:6a:
a1:69:4e:92:9c:7a:62:76:e8:e8:c0:55:4f:3e:77:
36:dc:8a:63:6c:4e:8d:90:cf:5d:f9:2a:14:59:50:
5f:b3:0b:a6:60:fb:3b:74:da:51:fa:b1:1b:7d:7a:
6e:94:b1:70:59:e3:cc:cf:7e:c2:0b:51:b5:43:80:
fa:fb:33:44:ce:46:61:dd:c5:cd:06:08:61:60:ef:
50:b1:96:30:13:9e:b4:69:6f:d4:8f:cc:20:9d:aa:
b2:fb:25:3f:3a:e5:44:9a:13:75:33:66:66:ec:dc:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:45:9F:C3:E2:B9:47:CB:EF:C6:9B:08:EE:11:6E:6B:41:8B:CC:B9
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/F21148340D1811EF9C229F1C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.232.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b5:15:d5:be:30:3c:c0:4d:99:a9:c7:bb:fc:65:7e:43:c5:
33:02:5b:2a:4a:50:a5:60:d2:81:d6:42:b9:34:e4:ea:53:2f:
b6:ae:98:18:62:61:3e:77:5e:be:bc:e6:a4:e3:0d:fd:37:ac:
18:4e:ac:a9:d9:e6:db:d2:f9:6f:ab:06:c1:ca:61:6c:67:ca:
e3:b0:3b:4b:d8:4d:e0:42:16:1b:f7:1e:f3:31:fe:23:00:ed:
22:b9:0d:2d:2b:8b:a9:ed:45:46:52:ad:3f:ef:e1:28:c5:d0:
2e:5e:d5:75:91:7c:32:49:16:ce:56:7a:bc:5b:de:f0:a5:5f:
3c:35:05:1a:f9:08:a8:fe:fa:c5:d1:67:00:d4:1a:89:53:5c:
48:43:13:6d:33:a5:31:e1:b8:07:c7:25:e6:d8:e7:33:0b:4b:
a4:5b:48:9a:0e:63:c0:d4:87:f3:a9:f0:a2:8f:f0:f3:78:ab:
13:08:8e:9e:46:aa:0f:63:b1:82:84:c7:7d:3a:9d:11:76:cb:
70:e6:cf:6a:88:41:c6:a6:bd:5d:59:94:4b:86:d2:cc:44:cd:
c9:35:06:3f:82:63:78:d7:7a:d1:4d:79:55:df:60:7d:cc:b8:
74:d4:7c:0b:ee:0f:6e:36:35:5a:82:e3:c1:90:d3:21:37:d8:
b8:39:a7:46
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAYowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUY3RDBBRjExMC8GA1UEBRMoM0E1NTNCNkVGODBCRjkyMjMxMkY5NkI4RERDMUYy
MTlBOEM0MTIxQjAeFw0yNDA1MDgwODU3MDNaFw0zMDA1MDgwODU3MDNaMBgxFjAU
BgNVBAMTDTY2M2IzZTYyLWM3YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCumO9e+WHy0+bscYUx24jgHEY7bbGMI2r560XUcWfANG06nwqoMMXhVI6l
7maebIaub3pNaHkUgVuwyccEpNHN9qF57Wk7dQcms7LLRPENAuFi/2djeHTtKkug
+GI+uUCmrLSS9PDXyVRECxVjVr7mSzHI0dgNVZ7rM9wYAFJYuiTNfocQXubfL/Z2
Mco2MEpojB63aqFpTpKcemJ26OjAVU8+dzbcimNsTo2Qz135KhRZUF+zC6Zg+zt0
2lH6sRt9em6UsXBZ48zPfsILUbVDgPr7M0TORmHdxc0GCGFg71CxljATnrRpb9SP
zCCdqrL7JT865USaE3UzZmbs3G3HAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXEWf
w+K5R8vvxpsI7hFua0GLzLkwHwYDVR0jBBgwFoAUOlU7bvgL+SIxL5a43cHyGajE
EhswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRBRDlFNkZDL09sVTdi
dmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09sVTdidmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRB
RDlFNkZDL0YyMTE0ODM0MEQxODExRUY5QzIyOUYxQzAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm0+gwDQYJKoZIhvcNAQEL
BQADggEBAES1FdW+MDzATZmpx7v8ZX5DxTMCWypKUKVg0oHWQrk05OpTL7aumBhi
YT53Xr685qTjDf03rBhOrKnZ5tvS+W+rBsHKYWxnyuOwO0vYTeBCFhv3HvMx/iMA
7SK5DS0ri6ntRUZSrT/v4SjF0C5e1XWRfDJJFs5Werxb3vClXzw1BRr5CKj++sXR
ZwDUGolTXEhDE20zpTHhuAfHJebY5zMLS6RbSJoOY8DUh/Op8KKP8PN4qxMIjp5G
qg9jsYKEx306nRF2y3Dmz2qIQcamvV1ZlEuG0sxEzck1Bj+CY3jXetFNeVXfYH3M
uHTUfAvuD242NVqC48GQ0yE32Lg5p0Y=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:31:48 2025 by rpki-client