Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/378108EEB87E11EF81427D5B762E951A.roa
File: 378108EEB87E11EF81427D5B762E951A.roa (raw, json)
Hash identifier: pvxHcsYPa0Lv9jDaQ8hW3DYwerAD0pRgtEnW8FTTQOg=
Subject key identifier: EB:B9:99:B7:B0:12:C9:D5:33:73:6F:60:DB:EC:2B:23:7C:35:E2:96
Certificate issuer: /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial: 47
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/378108EEB87E11EF81427D5B762E951A.roa
Signing time: Thu 12 Dec 2024 11:42:51 +0000
ROA not before: Thu 12 Dec 2024 11:42:45 +0000
ROA not after: Fri 01 Dec 2034 11:42:45 +0000
asID: 328467
IP address blocks: 102.67.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362793FAF
Validity
Not Before: Dec 12 11:42:45 2024 GMT
Not After : Dec 1 11:42:45 2034 GMT
Subject: CN=675acc3b-cf02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9a:7b:e5:91:ed:b7:4a:8c:03:1c:d0:83:55:
8b:cb:8b:c6:e0:27:28:61:bb:98:14:bc:39:17:f1:
6b:65:89:fa:0b:ab:f8:b7:e2:93:48:bd:48:8e:d3:
26:c9:e0:3c:a5:45:1d:fa:f3:fd:eb:2d:dd:5a:fc:
94:ae:45:77:25:03:e8:3a:af:de:5c:32:4f:05:6c:
fe:c7:e8:de:e9:35:1d:a3:07:00:f8:08:c1:ec:c6:
21:00:61:22:3d:49:85:6b:e4:4d:7e:ef:24:0b:2d:
3e:94:da:f5:a6:b0:ee:bb:97:8d:f4:3e:2f:a1:f6:
a5:56:0a:b5:54:ee:60:c9:a6:cc:5c:eb:2c:98:67:
f4:44:83:e5:d6:56:aa:c3:b7:05:f5:ce:32:eb:f7:
7a:1f:66:b4:16:8e:4c:bc:98:4a:dc:f3:ec:6a:ae:
56:a3:31:b2:a8:d6:24:5f:c1:71:58:c0:bf:de:96:
d7:cb:e8:6b:1f:35:08:e0:c3:94:68:d5:23:d1:74:
6a:13:7b:c6:d8:bb:8d:da:0a:de:a2:73:a8:86:35:
3c:90:3d:23:35:d1:c7:a6:a4:45:c5:20:c6:c0:69:
05:04:ae:16:34:5c:df:e1:51:c9:27:62:6f:8f:01:
8b:7d:1e:bf:ab:34:7f:79:9e:1c:ea:e3:4a:a1:d6:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B9:99:B7:B0:12:C9:D5:33:73:6F:60:DB:EC:2B:23:7C:35:E2:96
X509v3 Authority Key Identifier:
keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/378108EEB87E11EF81427D5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:17:c7:c0:4a:1a:02:cc:d8:42:f8:61:f3:bb:f4:d1:78:45:
b3:aa:db:48:65:69:cf:ac:f3:e3:a4:d4:1a:95:2f:e8:59:d7:
74:ff:0c:08:49:aa:03:bf:3d:42:20:77:59:43:51:51:a5:ab:
49:bb:a9:8b:44:42:e1:d6:ea:b4:5a:12:5a:f4:9c:74:d9:d6:
89:95:d9:59:a9:76:ec:d6:97:a8:47:91:89:ee:cf:bf:9a:70:
6c:8a:21:38:84:b9:5c:2a:69:a2:5d:1d:d0:58:fb:6a:1d:79:
c3:6e:68:73:8b:75:e4:64:d7:cb:19:08:1e:4d:59:8c:f7:1b:
63:6c:23:a9:f6:02:58:3e:e5:c5:cd:12:28:05:7c:78:5c:82:
93:10:e8:fc:1e:fa:97:5b:34:b2:91:3e:d2:74:13:0b:d2:56:
08:05:89:20:97:32:04:b4:c5:95:fc:c5:96:92:c0:37:67:70:
c7:dc:24:89:4d:3b:3a:92:62:75:11:6f:6a:8c:23:f3:79:5a:
ee:99:bd:cb:eb:35:35:55:28:17:d0:1d:a1:74:6f:04:f1:56:
1a:dd:a1:4c:45:f9:f2:31:90:60:f5:7a:d6:92:ef:72:98:b4:
1e:3d:16:88:8c:11:2c:79:3e:4d:fa:3f:b5:7a:16:05:90:37:
e8:9d:41:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:28 2025 by rpki-client