Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/07581364CDCE11EFB76BEE51762E951A.roa
File: 07581364CDCE11EFB76BEE51762E951A.roa (raw, json)
Hash identifier: NGrHYvJHxmeqfhzr8RZyAZYi8eIoZ2FO2YZlFJ0+PTg=
Subject key identifier: 8D:59:85:25:9C:20:CE:92:89:33:45:7B:F4:59:B9:D2:89:84:16:CB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1357
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/07581364CDCE11EFB76BEE51762E951A.roa
Signing time: Wed 08 Jan 2025 14:37:04 +0000
ROA not before: Wed 08 Jan 2025 14:37:00 +0000
ROA not after: Fri 08 Jan 2027 14:37:00 +0000
asID: 20648
IP address blocks: 102.129.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4951 (0x1357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Jan 8 14:37:00 2025 GMT
Not After : Jan 8 14:37:00 2027 GMT
Subject: CN=677e8d90-42f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:05:a1:49:03:af:47:21:7c:a4:ab:85:05:
fc:9e:37:f5:f4:dc:be:a1:8f:00:d6:fa:ee:31:20:
b5:08:fb:12:5c:82:16:14:8e:25:1a:de:44:69:59:
ad:5d:96:06:4f:9d:b2:2c:87:1a:01:37:ac:55:37:
e2:c2:c2:3a:5c:9b:d3:b3:d4:57:ab:38:b0:1f:ea:
aa:2d:7f:0a:10:80:df:92:80:7c:8a:ba:43:2a:ea:
35:47:0b:34:c5:90:b4:1f:f4:ca:85:df:72:78:16:
e4:b3:8e:14:29:3a:37:57:68:92:ae:f4:ec:3c:2f:
71:f5:87:a2:de:8b:9c:e1:70:7e:d5:1f:02:86:50:
62:84:20:c1:d8:2d:88:93:a0:91:21:e9:bc:cb:c4:
d7:28:75:8b:15:64:1d:ad:38:9f:05:9e:2d:46:0c:
13:a7:b0:eb:86:cf:9c:70:bc:1a:7f:07:0d:7b:a7:
bf:dc:31:d0:f8:0c:94:3b:b4:68:99:02:c2:cc:0c:
ff:7d:bf:9e:f8:0b:e6:c2:c7:46:88:2f:71:36:a9:
bb:50:d7:fa:43:f4:25:95:54:11:c1:4a:66:b7:a2:
0e:7a:01:74:0f:67:0d:fe:dc:75:bb:ab:f8:3d:b6:
75:91:be:cc:69:f3:8c:d5:b0:8e:9f:90:88:96:b1:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:59:85:25:9C:20:CE:92:89:33:45:7B:F4:59:B9:D2:89:84:16:CB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/07581364CDCE11EFB76BEE51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.226.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:cf:87:b3:27:e0:f2:f0:f7:54:7c:f8:ff:4c:b0:c1:ae:43:
b4:12:15:b4:16:63:84:ef:14:61:f4:d5:45:4e:88:63:8a:08:
60:40:c6:64:70:23:05:62:9c:e7:ff:23:c9:d0:9b:82:dd:f6:
af:81:ce:61:79:df:ac:f3:9a:c5:c2:c1:9e:e3:66:e2:15:e7:
e2:fb:94:02:3a:94:98:7e:1b:4e:f5:e3:92:15:e7:c6:c9:be:
fc:e7:ba:22:91:b3:db:b9:79:cc:a6:67:18:24:86:16:c4:83:
22:21:e9:53:1a:47:a3:4b:82:2b:1f:1e:72:73:cf:ec:73:03:
51:94:48:a5:a8:da:00:bc:9c:de:57:72:c6:4e:90:59:e9:6a:
62:98:3c:18:19:ee:d2:d5:5b:51:c9:ea:3d:21:39:41:c4:53:
f7:f9:4d:9c:db:6c:d3:7f:80:7b:c6:59:dc:ee:3a:43:0f:18:
33:17:f5:56:da:05:c3:ba:bc:7f:d5:c9:40:eb:88:d5:ca:7e:
4c:d8:06:72:c3:71:0f:40:58:6b:06:d1:c8:fa:54:69:3f:d7:
58:02:6c:10:b6:d8:60:f3:06:8b:14:58:db:20:5b:c3:5e:00:
4c:dc:e9:ed:00:3f:95:66:74:c2:46:bf:12:8f:e0:dd:20:88:
9c:ad:6c:1f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE1cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNTAxMDgxNDM3MDBaFw0yNzAxMDgxNDM3MDBaMBgxFjAU
BgNVBAMTDTY3N2U4ZDkwLTQyZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHMgWhSQOvRyF8pKuFBfyeN/X03L6hjwDW+u4xILUI+xJcghYUjiUa3kRp
Wa1dlgZPnbIshxoBN6xVN+LCwjpcm9Oz1FerOLAf6qotfwoQgN+SgHyKukMq6jVH
CzTFkLQf9MqF33J4FuSzjhQpOjdXaJKu9Ow8L3H1h6Lei5zhcH7VHwKGUGKEIMHY
LYiToJEh6bzLxNcodYsVZB2tOJ8Fni1GDBOnsOuGz5xwvBp/Bw17p7/cMdD4DJQ7
tGiZAsLMDP99v574C+bCx0aIL3E2qbtQ1/pD9CWVVBHBSma3og56AXQPZw3+3HW7
q/g9tnWRvsxp84zVsI6fkIiWsYv1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUjVmF
JZwgzpKJM0V79Fm50omEFsswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzA3NTgxMzY0Q0RDRTExRUZCNzZCRUU1MTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgeIwDQYJKoZIhvcNAQEL
BQADggEBAFrPh7Mn4PLw91R8+P9MsMGuQ7QSFbQWY4TvFGH01UVOiGOKCGBAxmRw
IwVinOf/I8nQm4Ld9q+BzmF536zzmsXCwZ7jZuIV5+L7lAI6lJh+G07145IV58bJ
vvznuiKRs9u5ecymZxgkhhbEgyIh6VMaR6NLgisfHnJzz+xzA1GUSKWo2gC8nN5X
csZOkFnpamKYPBgZ7tLVW1HJ6j0hOUHEU/f5TZzbbNN/gHvGWdzuOkMPGDMX9Vba
BcO6vH/VyUDriNXKfkzYBnLDcQ9AWGsG0cj6VGk/11gCbBC22GDzBosUWNsgW8Ne
AEzc6e0AP5VmdMJGvxKP4N0giJytbB8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:34:41 2025 by rpki-client