Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/98F59802B87D11EFBDAE0659762E951A.roa
File: 98F59802B87D11EFBDAE0659762E951A.roa (raw, json)
Hash identifier: McIOupeXZ3ZuHvVifTjAnpDUlUDytTyutBT9QiQDcHw=
Subject key identifier: 51:10:5D:1E:FA:84:74:87:6B:B4:DD:EA:50:D8:86:80:17:88:B2:34
Certificate issuer: /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial: 41
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/98F59802B87D11EFBDAE0659762E951A.roa
Signing time: Thu 12 Dec 2024 11:38:25 +0000
ROA not before: Thu 12 Dec 2024 11:38:21 +0000
ROA not after: Fri 01 Dec 2034 11:38:21 +0000
asID: 328467
IP address blocks: 102.67.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362793FAF
Validity
Not Before: Dec 12 11:38:21 2024 GMT
Not After : Dec 1 11:38:21 2034 GMT
Subject: CN=675acb31-c8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:6e:cf:08:b4:f1:29:7a:ca:a8:7b:17:06:
69:d9:66:98:5d:b8:d7:76:47:b0:18:63:a2:b5:72:
29:f0:cb:bf:1d:9f:c1:06:ec:2e:e7:20:59:da:52:
f9:6c:6a:b1:d5:d4:47:86:1f:ce:d4:66:64:28:11:
50:34:34:42:96:d4:46:8b:84:a1:65:e7:db:d4:57:
91:49:2c:62:65:dc:53:cd:94:d2:38:fc:b5:19:77:
de:5d:4a:a7:f3:32:67:72:4c:5b:cc:11:45:d0:cd:
cb:9e:7f:b4:5e:bd:0e:fd:63:f5:32:00:c5:5a:d7:
0d:5e:70:96:ac:cd:c4:50:11:5e:95:1d:24:57:a2:
32:e5:94:d3:1c:1e:1a:6d:49:39:99:80:2b:58:a8:
ed:d7:b6:78:15:85:5f:4e:aa:0c:10:be:a6:dd:8e:
40:f1:47:f9:97:6c:b6:f3:f6:3d:69:4e:dd:ed:0c:
57:66:6d:45:32:21:4e:13:3c:9d:39:9f:da:bd:e2:
33:4f:f8:ab:4b:3a:9a:81:56:73:68:5e:68:21:17:
98:01:82:30:fe:ad:b8:89:f9:7d:64:84:8f:50:2c:
b2:a5:fc:58:6c:3a:83:e2:73:04:1e:85:d4:df:46:
93:d4:5e:8b:c4:fe:21:9c:03:e7:82:ca:7d:61:71:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:10:5D:1E:FA:84:74:87:6B:B4:DD:EA:50:D8:86:80:17:88:B2:34
X509v3 Authority Key Identifier:
keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/98F59802B87D11EFBDAE0659762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.131.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a5:9f:f0:fc:22:b1:fe:38:57:d0:81:0c:b8:04:04:3a:8c:
90:b3:a9:67:bf:b4:b3:78:58:85:b9:3e:de:15:14:fb:f3:c6:
96:43:c5:46:ec:03:5f:26:07:9a:22:ab:2d:55:30:1c:80:d9:
05:59:f0:7e:54:32:75:4f:94:4b:93:85:0c:15:8e:2c:b0:74:
5a:fe:c8:50:e7:44:52:35:ef:20:48:17:89:c7:a1:36:79:62:
6a:ef:2d:7a:d9:4e:ee:35:b2:da:84:be:57:57:e8:7b:60:05:
d7:c3:95:5b:4f:9c:56:61:3e:b8:2d:a4:a5:a9:3a:fa:32:b7:
69:0f:10:94:f6:d8:b8:be:ef:7f:a6:26:a4:78:a1:4b:4d:34:
90:e4:18:ac:a3:dd:f1:f9:17:0b:42:52:e5:5c:f0:4a:84:9f:
c9:2c:b5:62:81:b0:65:58:12:c2:56:e1:78:36:c5:ab:88:eb:
21:ce:a5:2b:e0:2f:fe:d9:aa:b0:b3:89:2f:b6:cd:82:5c:02:
75:46:81:fc:83:de:bb:81:e2:0a:16:86:42:b4:b2:70:e8:82:
7d:e7:ce:ad:b4:e8:ca:e5:44:de:24:34:25:9c:33:b1:cc:79:
1a:e8:ab:9b:43:79:d1:89:a5:7f:13:ea:4a:8d:04:20:4f:f2:
04:23:93:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:49 2025 by rpki-client