Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/55FE8644B7BF11EF8ABB23AB762E951A.roa
File: 55FE8644B7BF11EF8ABB23AB762E951A.roa (raw, json)
Hash identifier: e/TaxfrWjii2x03KcMnFaunPKEvRG8PQlRCPze3QB34=
Subject key identifier: 8E:3F:51:41:AD:AA:48:ED:4F:81:03:12:2A:E6:49:18:59:1A:BB:67
Certificate issuer: /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial: 27
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/55FE8644B7BF11EF8ABB23AB762E951A.roa
Signing time: Wed 11 Dec 2024 12:56:28 +0000
ROA not before: Wed 11 Dec 2024 12:56:24 +0000
ROA not after: Fri 01 Dec 2034 12:56:24 +0000
asID: 328467
IP address blocks: 102.67.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362793FAF
Validity
Not Before: Dec 11 12:56:24 2024 GMT
Not After : Dec 1 12:56:24 2034 GMT
Subject: CN=67598bfc-945c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:55:d4:ff:73:71:18:b0:45:e2:29:5a:c3:ec:
d8:97:94:1a:64:be:c2:c9:21:84:0d:ea:9c:69:a3:
0d:d8:f0:35:45:1c:26:4e:12:29:d7:f9:07:4a:2a:
9c:b8:07:b5:b5:fa:bf:e9:c6:09:53:e7:44:c2:20:
01:fd:bf:f2:f7:fd:ca:33:b1:11:57:42:22:65:5a:
58:2c:ce:64:b0:f4:44:b4:5c:72:93:0f:7a:57:59:
c7:d9:55:6e:44:f9:e7:f9:93:31:cc:7d:91:9f:39:
1f:2e:f5:20:9b:7b:94:3d:01:60:15:0b:01:e7:42:
66:6f:e1:1e:6e:15:3b:12:02:71:94:fa:19:50:5d:
52:39:f8:e9:53:b4:99:eb:3d:71:1e:7e:ae:9c:00:
43:4e:06:9d:9a:a0:2d:d5:a9:cc:6b:fa:ae:a2:b5:
85:b6:64:df:d0:b3:8c:82:85:2b:f0:c8:d2:01:9e:
2e:27:a7:e0:e0:8b:f0:8b:db:b6:b7:ef:d3:c2:b3:
45:6b:d6:40:f1:cf:5d:7a:08:0e:98:9b:4f:2b:b5:
8f:5e:58:c7:25:ef:04:b0:63:20:8f:f2:22:c7:34:
83:25:5f:14:2c:88:12:0d:63:d7:a6:e3:3a:83:14:
0d:2c:6e:13:02:f4:b7:ad:1d:33:47:e3:6c:0d:ea:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3F:51:41:AD:AA:48:ED:4F:81:03:12:2A:E6:49:18:59:1A:BB:67
X509v3 Authority Key Identifier:
keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/55FE8644B7BF11EF8ABB23AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:55:31:d9:75:53:c7:3d:22:03:13:8b:29:53:f6:2e:0c:38:
a4:6a:1d:b7:78:e1:45:75:6b:73:b7:db:aa:83:f1:0e:57:47:
8b:69:7c:b5:52:fe:14:0c:55:14:34:8e:4a:e6:96:e7:27:7e:
91:1b:24:76:ce:5d:45:ad:ca:72:cb:0c:28:ef:c4:14:cb:83:
3d:09:48:3d:da:5b:9f:70:d8:0c:41:94:64:dd:73:a7:e9:d6:
ee:4f:80:bf:97:03:12:26:8f:0e:72:e2:b8:53:80:2e:1b:0c:
bf:24:f2:5a:17:55:58:98:d8:e9:9e:ba:c0:ce:b6:ba:c7:64:
a2:a0:f9:3a:73:0f:9e:79:ae:39:31:8f:a5:05:2d:b2:28:f1:
9e:2d:d1:5f:8f:2b:7c:08:e1:2e:c0:f2:31:2e:46:57:db:6f:
b2:ef:81:fa:9d:3b:59:c1:59:82:93:2a:67:5e:9f:0c:d9:2a:
63:8f:6d:a1:2b:d5:29:37:ed:a2:7b:40:7e:8f:77:63:24:ec:
95:bb:5a:3e:77:bd:a0:a6:68:cf:75:1c:59:bb:39:e4:fa:80:
08:42:6a:7c:0c:15:b6:80:62:72:ee:1b:97:a8:e7:08:19:02:
93:ea:7d:f5:64:6b:60:54:ff:4f:c4:61:a4:9b:3c:a8:58:40:
f8:c8:a9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:53:21 2025 by rpki-client