Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/15D33FEEBE0711EF89EB53A6762E951A.roa
File: 15D33FEEBE0711EF89EB53A6762E951A.roa (raw, json)
Hash identifier: fJezMoMtCzdTx6FO2YwFWh+Y99ZeEskss4PgGn8RSkI=
Subject key identifier: 92:25:AA:34:E9:5F:6F:91:81:8A:43:00:AD:36:C0:1A:91:2B:D2:64
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 132B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/15D33FEEBE0711EF89EB53A6762E951A.roa
Signing time: Thu 19 Dec 2024 12:45:11 +0000
ROA not before: Thu 19 Dec 2024 12:45:07 +0000
ROA not after: Sat 19 Dec 2026 12:45:07 +0000
asID: 834
IP address blocks: 102.165.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4907 (0x132b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Dec 19 12:45:07 2024 GMT
Not After : Dec 19 12:45:07 2026 GMT
Subject: CN=67641557-e470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:29:5b:ff:41:2b:07:2d:5f:a7:36:de:d2:1e:
39:8d:5c:5f:54:81:e3:76:03:37:04:55:9f:2e:50:
e3:a5:dd:e9:f4:c3:8f:c4:55:52:24:e6:00:07:a9:
a3:fb:62:29:76:1a:dc:b8:37:d6:3a:6e:98:08:cb:
bc:53:f0:a6:2e:3b:c3:cf:ef:65:72:8a:de:03:ed:
e3:78:ba:ce:49:e5:52:93:3b:d7:09:5a:0f:ad:f6:
d9:f7:89:92:a3:c8:33:57:55:73:0c:5f:fb:9a:65:
63:55:d5:05:76:d4:14:1a:0d:4c:0f:44:b8:ac:82:
2f:3a:66:fd:c5:6d:e5:e5:79:2d:95:3e:6b:62:80:
37:a7:7e:f9:76:61:c6:1a:fe:cc:99:88:0c:2a:3f:
80:db:56:53:8b:52:13:e3:17:df:ca:f2:00:c6:94:
67:55:37:33:44:5a:a8:d5:76:01:80:75:ae:ec:2f:
07:05:b8:a3:86:5e:de:f1:57:99:fd:47:bd:51:c3:
4a:8f:09:37:d5:04:b8:dd:59:43:3d:5e:2f:a8:c7:
87:94:1c:0f:b3:f0:84:26:41:77:42:e6:9b:84:1d:
61:64:76:e1:e2:60:d2:a3:d0:a9:7a:2a:66:75:34:
35:aa:51:10:0b:98:f8:a2:48:d3:2b:b1:6f:73:9f:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:25:AA:34:E9:5F:6F:91:81:8A:43:00:AD:36:C0:1A:91:2B:D2:64
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/15D33FEEBE0711EF89EB53A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.45.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:2b:f6:f5:10:1b:38:d4:3b:6c:d0:1d:08:2c:92:2a:51:db:
de:7f:e2:0f:d1:88:ce:46:80:c2:d7:63:07:38:9b:e0:bc:9f:
ee:8d:69:48:61:a1:34:47:4a:99:7e:4c:b6:90:15:b6:89:75:
32:4c:4f:4e:6c:2c:79:78:e1:7b:e9:a5:c1:67:f0:fa:82:65:
6e:da:24:65:33:61:1d:70:58:3c:a2:01:5b:24:53:c1:95:30:
fa:75:bd:33:f8:c7:e9:65:2d:7a:96:f2:4e:f6:1e:71:d3:f9:
c8:53:4b:78:80:d1:05:d2:41:e0:16:b2:be:3e:db:53:16:26:
fc:3c:6f:e1:88:bd:e0:e6:8f:fb:7b:2f:99:c6:58:df:f6:31:
eb:32:ec:91:63:31:24:b7:cb:5c:f4:09:79:e5:1e:6e:86:c1:
6e:bb:c8:32:ec:55:e2:45:d9:ef:dc:17:6f:4a:94:22:4e:b5:
17:9f:14:77:42:30:93:ac:b1:46:d5:5b:97:22:da:2b:14:c1:
8e:cf:0f:37:4f:13:48:f0:46:4f:aa:39:94:95:71:10:84:fb:
09:7b:44:09:1c:73:1c:17:04:06:77:06:ab:ec:c2:24:4d:e3:
2e:ca:6f:b0:bc:26:c2:c1:1e:2b:2c:45:8b:6c:49:04:61:ff:
7b:ea:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:44 2025 by rpki-client