Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2308B9369DE211EFA6BAE3A6762E951A.roa
File: 2308B9369DE211EFA6BAE3A6762E951A.roa (raw, json)
Hash identifier: Ju/Hq78Vli8yQ0BHaLVrLo/BMQ7HqVR+efvTXZUyfug=
Subject key identifier: CC:E8:2F:66:CD:43:57:73:7A:81:93:6F:DD:A6:7D:50:A6:3E:F5:56
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1299
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2308B9369DE211EFA6BAE3A6762E951A.roa
Signing time: Fri 08 Nov 2024 15:00:05 +0000
ROA not before: Fri 08 Nov 2024 15:00:01 +0000
ROA not after: Sat 07 Nov 2026 15:00:01 +0000
asID: 53340
IP address blocks: 102.165.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4761 (0x1299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Nov 8 15:00:01 2024 GMT
Not After : Nov 7 15:00:01 2026 GMT
Subject: CN=672e2775-8557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:29:ec:00:67:4d:f2:01:0b:f7:6b:31:e2:
f1:c7:e0:46:82:d8:bb:c4:2a:71:84:05:3b:c7:d8:
2f:51:98:24:8e:7c:98:a9:51:80:d1:d8:7e:d1:7c:
5d:21:5c:5b:52:44:58:4f:f1:85:a4:e5:6b:7f:d6:
01:c0:60:54:9a:18:d7:a6:fc:19:b7:92:0b:65:06:
6c:ab:3f:b5:e7:4c:20:12:7b:ec:a3:0d:24:e0:8a:
6d:b9:39:5b:3d:2e:22:d6:9e:f5:4f:73:cc:aa:c7:
ff:a7:a7:42:67:1b:c9:56:37:b6:1d:cb:64:10:4f:
a3:b3:b3:dd:4b:83:2a:ec:06:9b:35:7e:81:ac:96:
52:a7:f3:8b:1b:4a:67:c6:70:3f:76:66:02:95:c5:
23:e3:98:68:65:af:a1:1b:e7:0a:f3:5c:07:9e:04:
26:52:de:3d:45:89:96:7e:d9:a4:3d:1b:26:dd:1a:
0a:f0:f2:62:e9:e8:ae:1a:38:bd:a6:5e:bd:79:67:
dc:04:1e:5b:89:46:89:b0:d8:30:4d:19:98:e6:55:
a1:3e:f3:f0:72:59:95:f8:41:6c:2d:a0:2c:ef:d9:
62:21:7c:2d:66:ed:98:6e:7c:55:9e:18:6e:38:cd:
94:f6:40:48:5d:0c:c2:bd:7c:9c:10:04:4e:69:a8:
6b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E8:2F:66:CD:43:57:73:7A:81:93:6F:DD:A6:7D:50:A6:3E:F5:56
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2308B9369DE211EFA6BAE3A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.18.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:48:9c:7c:54:f9:00:b7:c8:66:5c:80:b9:61:4e:c2:0c:d9:
24:96:09:26:7a:be:2e:41:f9:3a:95:cb:a4:b2:61:4f:ca:b8:
84:c6:7e:88:79:a8:0c:ef:47:64:c8:e2:84:b3:fb:f4:84:88:
81:1c:89:22:0f:4b:44:56:a8:57:cf:26:59:bd:52:c9:fd:5b:
ae:de:3c:6d:56:fe:52:fc:5f:3b:93:af:3f:12:15:de:e1:2d:
21:ea:20:2a:b2:2d:d1:c3:e7:74:c6:ec:2e:64:78:82:03:4f:
96:cb:0b:2c:a1:1a:60:6d:37:f2:03:86:ad:5f:75:03:7b:48:
90:8d:ef:87:54:71:3b:59:fe:80:07:df:1b:b8:42:78:f7:15:
d8:77:bb:89:49:ca:30:20:6a:87:c2:67:bd:0c:aa:fd:86:72:
a0:f1:4a:07:9e:d7:53:b7:00:88:38:9c:96:32:e6:48:e6:1c:
34:8b:f7:6e:e2:5c:ea:09:b6:a1:4e:20:ff:51:d6:25:87:31:
02:1d:97:19:46:49:bb:50:df:db:dc:31:e2:a1:c5:dc:b9:7b:
5f:30:89:cd:b6:27:c7:9b:a5:f8:f9:a0:9a:43:ba:1f:7a:a0:
99:01:ee:81:45:42:ef:92:87:f6:34:59:d9:ad:94:8d:10:8d:
95:e1:66:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:05:48 2025 by rpki-client