Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5BE6381AF66F11EFBE944A58762E951A.roa
File: 5BE6381AF66F11EFBE944A58762E951A.roa (raw, json)
Hash identifier: gYedGFZq4dJYOzFkiAHpOJkXW9CgOVT7SxZ3JPAoQeI=
Subject key identifier: BB:57:CE:6A:6F:6A:FA:1B:56:2B:27:3A:5F:F2:B2:15:C7:8B:8A:24
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13F9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5BE6381AF66F11EFBE944A58762E951A.roa
Signing time: Sat 01 Mar 2025 07:32:42 +0000
ROA not before: Sat 01 Mar 2025 07:32:38 +0000
ROA not after: Mon 01 Mar 2027 07:32:38 +0000
asID: 834
IP address blocks: 102.129.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5113 (0x13f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Mar 1 07:32:38 2025 GMT
Not After : Mar 1 07:32:38 2027 GMT
Subject: CN=67c2b819-1158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:0f:76:ba:b5:79:0a:c2:38:ba:b5:4e:b5:
76:94:55:95:82:93:19:0e:31:2d:bd:b0:06:85:ca:
21:5e:e2:b0:0f:12:fd:47:81:6d:a0:31:34:4a:d6:
8c:7a:0b:23:66:53:00:87:75:52:35:cd:79:86:b6:
22:7a:84:0a:ba:b9:89:52:ba:b7:d3:3a:5e:e3:9e:
67:a3:38:98:dc:96:7d:8a:6d:ad:b8:ca:c5:ef:2d:
28:b6:8f:cb:59:5c:aa:d2:23:89:31:a9:62:9e:07:
2b:a5:48:09:4c:df:41:4a:ab:e4:15:ca:ba:e8:3e:
ac:4b:4e:d3:1e:7f:f0:f8:13:23:ad:00:96:9d:90:
d3:17:c3:c2:49:45:61:03:01:ba:37:8d:a0:f3:c4:
41:eb:4c:06:ba:d6:5c:85:8d:2b:b9:65:05:a9:5a:
46:79:a9:eb:30:b6:6e:36:8b:46:28:c6:ec:61:82:
83:02:7b:72:d7:81:fc:ad:19:dc:22:09:3f:0b:96:
e1:62:34:c3:4c:f2:e3:c3:68:e2:aa:af:8e:e5:06:
5b:c7:0d:44:24:8d:79:67:71:5d:65:f1:9e:26:f6:
2a:60:1f:cf:2f:81:8f:cd:2c:4b:84:31:8f:c8:1a:
6c:9f:9e:8a:4e:51:ab:b0:cf:a4:ab:1b:2b:40:e9:
9b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:57:CE:6A:6F:6A:FA:1B:56:2B:27:3A:5F:F2:B2:15:C7:8B:8A:24
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5BE6381AF66F11EFBE944A58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.128.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6c:4a:f7:97:78:ab:45:cd:6e:10:db:6c:7a:53:e0:78:5c:
75:c9:9e:d2:c4:bb:35:7a:bd:90:09:ca:4d:d8:c6:5d:8b:f2:
3e:91:95:c0:d9:eb:c7:66:3f:a1:59:06:20:fb:05:47:3e:83:
3b:e1:11:ef:cf:e5:36:03:74:04:10:0e:22:45:39:f8:df:ad:
e5:61:49:63:6f:8e:53:1b:b4:df:df:03:fb:d8:6c:5f:cc:c7:
c8:3e:94:e2:61:c2:46:cd:74:bf:14:8d:03:9c:07:8f:15:aa:
7d:29:6c:bf:f5:61:15:22:4e:5a:5a:92:af:42:fd:dd:ee:96:
e9:07:da:53:01:8d:24:b9:f3:ae:d8:e4:b1:98:1a:81:15:2c:
cf:b8:a2:38:c9:c6:74:52:78:c4:63:94:83:47:3c:08:32:9c:
0d:c5:f4:02:f7:f4:01:c9:50:df:d9:af:4b:5c:4c:31:8c:d5:
57:ed:d9:9c:f8:1a:c4:79:60:50:d3:3e:67:b0:81:e5:ed:f7:
c7:f8:3d:88:32:95:c0:13:76:69:48:6e:a3:84:7b:b7:a7:0e:
1c:fb:f6:da:2e:c7:ce:e7:a5:c7:1d:ec:10:7d:2a:8d:a6:32:
e5:12:49:65:ac:0b:65:c6:68:19:08:2c:de:d1:5b:45:1a:20:
2e:59:b1:f8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE/kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNTAzMDEwNzMyMzhaFw0yNzAzMDEwNzMyMzhaMBgxFjAU
BgNVBAMTDTY3YzJiODE5LTExNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWWw92urV5CsI4urVOtXaUVZWCkxkOMS29sAaFyiFe4rAPEv1HgW2gMTRK
1ox6CyNmUwCHdVI1zXmGtiJ6hAq6uYlSurfTOl7jnmejOJjcln2Kba24ysXvLSi2
j8tZXKrSI4kxqWKeByulSAlM30FKq+QVyrroPqxLTtMef/D4EyOtAJadkNMXw8JJ
RWEDAbo3jaDzxEHrTAa61lyFjSu5ZQWpWkZ5qeswtm42i0YoxuxhgoMCe3LXgfyt
GdwiCT8LluFiNMNM8uPDaOKqr47lBlvHDUQkjXlncV1l8Z4m9ipgH88vgY/NLEuE
MY/IGmyfnopOUauwz6SrGytA6ZvnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUu1fO
am9q+htWKyc6X/KyFceLiiQwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzVCRTYzODFBRjY2RjExRUZCRTk0NEE1ODc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgYAwDQYJKoZIhvcNAQEL
BQADggEBADZsSveXeKtFzW4Q22x6U+B4XHXJntLEuzV6vZAJyk3Yxl2L8j6RlcDZ
68dmP6FZBiD7BUc+gzvhEe/P5TYDdAQQDiJFOfjfreVhSWNvjlMbtN/fA/vYbF/M
x8g+lOJhwkbNdL8UjQOcB48Vqn0pbL/1YRUiTlpakq9C/d3ulukH2lMBjSS5867Y
5LGYGoEVLM+4ojjJxnRSeMRjlINHPAgynA3F9AL39AHJUN/Zr0tcTDGM1Vft2Zz4
GsR5YFDTPmewgeXt98f4PYgylcATdmlIbqOEe7enDhz79toux87npccd7BB9Ko2m
MuUSSWWsC2XGaBkILN7RW0UaIC5Zsfg=
-----END CERTIFICATE-----
Generated at Thu Apr 10 13:56:53 2025 by rpki-client