Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/223E1A10E85F11EFA88BB075762E951A.roa
File: 223E1A10E85F11EFA88BB075762E951A.roa (raw, json)
Hash identifier: 7k2CQfkPiBxLR+M+t5La+nEwwy8xTtcgW5fCcSPmn1I=
Subject key identifier: 7B:E6:FD:5D:6B:61:7E:CA:40:F8:F4:13:83:CF:2C:6A:3A:5F:18:8D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13B8
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/223E1A10E85F11EFA88BB075762E951A.roa
Signing time: Tue 11 Feb 2025 10:01:17 +0000
ROA not before: Tue 11 Feb 2025 10:01:13 +0000
ROA not after: Sat 13 Feb 2027 10:01:13 +0000
asID: 64267
IP address blocks: 102.129.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5048 (0x13b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Feb 11 10:01:13 2025 GMT
Not After : Feb 13 10:01:13 2027 GMT
Subject: CN=67ab1fed-e364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3c:f7:9f:b3:5d:2a:2e:e1:c3:94:94:8b:c0:
6b:1c:e0:ad:3b:70:84:7b:a7:c5:f0:68:ac:57:6b:
9c:e1:15:c9:77:64:19:e8:2a:19:1a:f6:fd:fa:e6:
cf:ed:1d:f9:49:2c:2c:f5:01:2e:04:1c:49:1e:40:
8e:64:5f:a5:a8:f1:aa:eb:3f:ac:42:a6:94:c9:4a:
d1:da:cc:21:08:6c:a1:40:08:14:7d:67:8e:2b:25:
d9:8b:9e:4b:f1:71:34:1f:8b:25:78:c4:ac:12:48:
5f:e4:70:6b:48:c2:be:85:45:99:f0:77:e8:3d:cf:
d5:dc:64:db:1b:cd:a1:f7:be:b7:50:f4:85:87:00:
d2:46:f9:f7:a4:9d:1f:1c:80:fc:2b:68:8e:41:b1:
67:63:0e:08:47:d8:6f:20:33:fd:4e:45:c3:b0:14:
fb:be:c1:82:ac:a8:6a:77:b6:68:e6:f7:48:ae:12:
4a:ff:c8:b3:25:2c:99:19:28:b0:cf:51:51:a4:d9:
29:29:9c:f4:dc:f5:1e:92:31:5a:6d:87:db:4f:d9:
2e:a2:d9:2a:b9:c9:c1:21:a1:75:6a:d3:2b:44:ee:
39:a7:4b:3b:bf:c9:b3:71:9f:e8:ae:df:c7:af:4a:
89:13:41:b6:83:3d:d6:09:da:fe:12:28:82:53:46:
6b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E6:FD:5D:6B:61:7E:CA:40:F8:F4:13:83:CF:2C:6A:3A:5F:18:8D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/223E1A10E85F11EFA88BB075762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.191.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b7:68:81:57:01:fd:bc:72:25:26:0a:12:c7:bb:07:c6:a4:
64:20:84:53:48:91:84:a4:1d:2a:3a:b4:62:cf:09:e2:c6:93:
00:1d:75:30:8d:51:16:12:2a:11:fd:11:a6:b5:49:32:66:23:
67:76:29:ff:b3:fb:b3:d8:60:ee:31:3b:7b:1b:5a:cc:e1:55:
47:47:c3:50:62:dc:17:3a:75:9a:38:0f:44:f7:38:30:bb:29:
64:81:18:e4:63:96:23:25:c4:b5:79:96:33:02:35:06:bc:5d:
c8:4f:a4:5c:e3:ec:62:8b:6d:d6:33:13:ba:98:33:fa:b5:29:
19:75:b8:25:40:64:f0:28:fe:58:dc:2f:7a:4c:d9:27:30:8b:
6e:9b:66:15:4a:68:dc:a3:ca:df:86:b5:7b:dc:6d:39:f6:67:
dc:a3:1f:6a:f2:d2:69:e8:a2:9a:fc:0e:f0:0b:e4:ba:08:cb:
57:19:1a:1c:f1:4a:a6:fb:04:0f:55:49:24:06:00:bd:da:88:
8f:c5:aa:72:c0:5a:bc:d2:ee:eb:68:48:a3:01:ad:99:69:e4:
b7:0c:b3:86:a6:ef:bb:80:4d:f2:82:51:f8:e1:ff:16:a2:15:
6b:b4:89:9b:50:72:12:15:6a:31:69:13:a9:ba:ef:0a:63:0a:
65:2d:b0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:14 2025 by rpki-client