Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/415C1A8CD7E811EFBA1D7EBC762E951A.roa
File: 415C1A8CD7E811EFBA1D7EBC762E951A.roa (raw, json)
Hash identifier: blOpMku6xpzp3bEqbK2wawy8KEORUNkQnlZ4aerdh0g=
Subject key identifier: B1:CD:38:F1:43:B9:D6:58:BB:E2:35:D1:1A:C2:7D:2D:F4:8B:CF:93
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 137D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/415C1A8CD7E811EFBA1D7EBC762E951A.roa
Signing time: Tue 21 Jan 2025 11:10:00 +0000
ROA not before: Tue 21 Jan 2025 11:09:56 +0000
ROA not after: Thu 21 Jan 2027 11:09:56 +0000
asID: 397373
IP address blocks: 102.165.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4989 (0x137d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Jan 21 11:09:56 2025 GMT
Not After : Jan 21 11:09:56 2027 GMT
Subject: CN=678f8088-376f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b0:1f:39:d1:9b:97:3a:20:bc:28:dd:40:ae:
4c:03:98:b1:e3:2f:34:93:d6:96:5c:8d:6b:72:af:
fb:25:ee:db:87:93:53:98:fb:c7:45:0b:e2:6e:78:
50:f1:70:d2:6a:8c:4e:f3:da:cf:fc:8d:7d:68:91:
39:00:4e:b6:e2:2f:c1:5c:a8:4f:4b:7c:38:61:2b:
a5:45:df:cc:0b:1d:49:3e:c8:5d:95:8e:e2:37:0c:
ad:f8:04:a2:e8:b2:8b:b4:9f:a2:c3:ba:6c:75:ce:
63:cd:db:3b:02:08:9d:45:bc:b3:99:e5:e1:fb:48:
dd:d6:f7:07:c1:45:6e:db:6c:df:66:ef:57:53:16:
fe:7d:54:12:2f:d2:84:02:cd:93:41:d7:f8:b5:50:
8f:d6:fc:a6:69:2b:99:cb:6c:7c:68:b8:da:ac:9b:
7f:6f:7a:b4:f6:b0:39:61:ad:78:5d:ff:8e:91:53:
c1:3c:5d:05:78:6c:f5:b9:50:d4:ea:a4:c5:5e:77:
7c:02:b2:fb:5e:43:c2:92:03:8c:90:bf:6b:7a:af:
f0:62:de:d9:f9:ec:04:f7:88:1f:46:a1:71:d2:4d:
32:dd:49:ca:a2:76:13:63:f2:dd:68:f9:14:e3:62:
3e:02:a5:c9:15:60:38:52:ff:6a:17:99:98:65:a9:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CD:38:F1:43:B9:D6:58:BB:E2:35:D1:1A:C2:7D:2D:F4:8B:CF:93
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/415C1A8CD7E811EFBA1D7EBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.26.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:a9:9f:07:e6:59:d5:b5:b3:8e:37:f8:36:52:fb:0b:39:7c:
0c:30:70:ed:76:f8:c6:2c:95:9f:18:60:34:e0:40:8e:22:e2:
62:f8:55:c1:b8:80:37:5a:06:49:f9:43:45:44:44:7f:57:d6:
cd:23:41:3e:22:7d:47:6d:ef:25:23:93:d6:5d:8c:c4:5f:ec:
7d:ae:81:ff:68:5b:c7:13:1e:23:61:53:b1:3b:5e:d2:95:36:
f3:c9:67:bb:72:6c:21:34:b1:5a:15:0f:05:06:40:50:80:2f:
a9:8e:c8:e5:66:fd:07:9b:a0:be:05:ec:87:f5:f0:59:d6:e2:
22:24:4a:bf:eb:8f:e7:45:1d:22:20:f3:f8:af:dd:d2:24:08:
3a:f8:fb:55:b3:06:e2:6a:53:8d:e3:bc:77:d5:66:51:13:e1:
e2:17:40:da:09:d1:db:69:64:55:72:88:5f:6d:40:73:f4:17:
1b:e2:62:c7:6c:f9:e8:64:96:27:6f:85:92:26:ed:a1:68:e0:
3d:3e:7c:38:8e:30:fa:7b:5c:f1:af:ec:5e:91:27:38:7d:02:
0f:5e:f2:93:0b:24:5c:20:ad:51:4c:a7:60:bf:32:33:cc:f3:
61:8f:12:1e:89:d7:75:36:35:c9:fa:87:eb:eb:c6:b4:ca:e5:
cc:5f:97:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:06:59 2025 by rpki-client