Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/EA582346B7BE11EFB80EBCA8762E951A.roa
File: EA582346B7BE11EFB80EBCA8762E951A.roa (raw, json)
Hash identifier: KQ5w6UI93ctX3LQCNvsD4OfARuPAzRkAFCe3++qRqK8=
Subject key identifier: 46:45:83:82:83:10:5E:4A:C2:2E:31:44:4B:AC:78:5D:3A:5E:B3:B6
Certificate issuer: /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial: 21
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/EA582346B7BE11EFB80EBCA8762E951A.roa
Signing time: Wed 11 Dec 2024 12:53:27 +0000
ROA not before: Wed 11 Dec 2024 12:53:24 +0000
ROA not after: Fri 01 Dec 2034 12:53:24 +0000
asID: 328467
IP address blocks: 102.67.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362793FAF
Validity
Not Before: Dec 11 12:53:24 2024 GMT
Not After : Dec 1 12:53:24 2034 GMT
Subject: CN=67598b47-f0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:9c:c2:2b:a8:8c:da:f6:ca:dd:f5:b5:53:
ae:40:18:e3:f3:ef:f4:86:96:88:84:60:cd:49:7f:
84:2a:89:ae:8b:52:86:a3:7f:b2:c6:09:97:2b:b9:
b4:92:89:a8:22:ef:92:21:7d:ff:6b:f9:13:35:7b:
89:8b:9d:2d:d3:5e:f8:de:4a:cc:b4:f0:ed:86:12:
82:6a:ce:47:61:6d:84:29:01:fb:95:0d:68:d9:fe:
07:92:36:fc:ad:7d:1f:22:ff:1b:f8:86:1f:d8:f5:
49:11:04:4c:25:fb:2b:07:43:73:7c:ad:69:a4:11:
fd:41:f5:18:d3:22:4c:e1:e1:e5:9c:6d:4e:88:48:
fe:79:86:6a:60:15:29:fe:5f:69:77:93:b8:74:14:
1c:85:88:9b:de:5a:90:05:90:ab:1e:b5:89:dd:b0:
dd:d6:8d:bb:58:53:a3:5b:73:97:81:56:6b:36:a4:
75:66:45:a1:26:62:e4:d0:5d:99:96:04:7e:66:05:
1f:18:48:2b:4d:18:80:62:fb:6d:7b:30:e3:d4:9a:
f0:29:a2:c2:f3:b0:b6:47:6f:bf:0b:90:c6:50:99:
b9:94:0c:dc:1d:d0:5a:60:bc:42:05:35:95:be:6b:
e0:48:ce:9b:5b:28:a2:7f:85:e2:36:f8:4e:f6:98:
cd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:45:83:82:83:10:5E:4A:C2:2E:31:44:4B:AC:78:5D:3A:5E:B3:B6
X509v3 Authority Key Identifier:
keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/EA582346B7BE11EFB80EBCA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ae:13:e0:c0:f0:e5:2b:3d:f3:74:b3:62:01:66:8f:1f:19:
8f:44:32:ce:75:a8:05:5b:db:7f:31:eb:05:5f:4e:79:30:02:
a2:4d:0b:53:3a:09:9f:6b:2f:e2:87:0d:9b:f6:6b:a7:f6:c5:
10:b4:a3:e5:2d:ce:27:b5:5a:70:1e:e7:f5:9e:a5:53:e2:47:
66:9d:c4:31:f7:a9:e4:88:f8:3d:fc:1f:8e:f4:42:83:0c:b3:
0e:b3:02:d9:d2:ea:75:c1:d9:85:12:70:c5:a7:e3:01:da:79:
1a:97:a7:b3:68:24:40:63:3e:a1:49:45:75:28:41:ba:09:57:
f2:85:7f:63:de:bf:82:39:a1:a3:47:d2:eb:0d:97:5e:eb:89:
73:8b:24:90:7b:34:52:41:13:24:f2:d1:0a:49:b4:b0:a1:56:
55:ad:1c:e7:51:d1:e5:ec:5b:e5:f9:c8:27:5c:1e:e3:97:19:
89:df:cc:0b:42:bf:84:80:bb:6d:dd:e8:24:65:0a:7e:d1:be:
38:a7:14:b4:db:9b:3d:21:60:da:4b:eb:a3:83:06:85:a5:60:
a1:8e:a8:8d:bd:c3:56:28:fa:b5:5b:f5:8c:6a:75:28:d0:20:
d1:0e:c0:a4:37:25:8d:a4:fe:65:e5:b6:30:2e:eb:4b:c5:b0:
a5:ac:04:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:50 2025 by rpki-client