Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/72519DFAD27111EF9F586FB6762E951A.roa
File: 72519DFAD27111EF9F586FB6762E951A.roa (raw, json)
Hash identifier: 7etSPBu1ME/QszfEXSnSbH7RtND++QzOEFuXKY8DQzM=
Subject key identifier: B8:F4:95:9F:75:70:E2:87:6B:6E:1E:E0:BF:16:0E:71:71:35:52:74
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1366
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/72519DFAD27111EF9F586FB6762E951A.roa
Signing time: Tue 14 Jan 2025 12:16:56 +0000
ROA not before: Tue 14 Jan 2025 12:16:52 +0000
ROA not after: Sat 16 Jan 2027 12:16:52 +0000
asID: 138156
IP address blocks: 102.129.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4966 (0x1366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Jan 14 12:16:52 2025 GMT
Not After : Jan 16 12:16:52 2027 GMT
Subject: CN=678655b8-456b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:0f:e5:42:64:37:3a:00:e1:bb:38:66:0e:
dc:df:4e:90:af:63:05:d9:53:8a:82:91:b1:ec:2f:
76:c7:cd:61:76:cc:02:3c:90:68:35:10:8e:c2:85:
25:19:2f:86:22:3e:c7:e2:b8:16:d8:23:d2:0a:df:
a6:41:fa:52:b3:34:75:a5:05:78:93:27:93:43:7e:
17:35:7e:41:de:77:3d:c2:a5:f4:6c:d8:7c:29:31:
c9:17:8c:4f:2a:ca:f7:d7:28:5a:7c:b7:81:98:17:
e4:3c:24:9b:7a:30:c4:d5:e6:81:f7:eb:37:91:3b:
e0:c4:9d:18:9d:5b:c8:3f:61:29:62:52:f1:78:79:
9f:dc:22:6c:a0:58:81:25:7c:69:e4:67:19:07:8a:
f4:13:7b:25:e6:eb:a2:d1:b4:fe:2c:ed:d2:49:5a:
2e:9f:90:4a:a4:c3:63:9b:a8:53:cf:ab:ac:eb:49:
4c:9f:7a:23:7b:bf:68:c3:9f:6f:c8:42:df:18:06:
1f:a4:c5:fe:fb:f2:9c:47:65:ff:68:18:40:30:d8:
ab:db:da:ca:54:a5:20:16:f1:c6:d7:80:43:96:7d:
d9:cf:c1:0f:2d:54:c1:0a:41:77:dc:dd:06:32:de:
b2:7a:ff:1f:5a:e5:33:4f:10:51:0e:a1:f7:3f:bf:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F4:95:9F:75:70:E2:87:6B:6E:1E:E0:BF:16:0E:71:71:35:52:74
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/72519DFAD27111EF9F586FB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.229.0/24
Signature Algorithm: sha256WithRSAEncryption
46:dd:11:01:25:23:36:ed:e4:9f:c3:b5:6c:28:f7:30:23:fb:
c8:ac:ec:1b:ef:4c:72:1e:35:4c:d6:d4:50:51:9c:aa:b4:b2:
bf:26:65:58:50:b5:38:c7:78:3e:e8:35:f6:b8:68:53:25:ad:
c6:f7:a3:f4:34:0e:df:54:6e:fd:3a:56:f2:11:39:bf:f5:1c:
46:e5:e0:e2:0e:9b:b0:c1:ec:77:39:a0:a5:08:b9:c8:40:7e:
6c:ed:97:16:6c:2f:e1:8e:0a:66:18:fe:d4:45:00:05:61:e6:
cc:9f:5d:9e:bb:3a:c0:8d:63:d2:04:9f:bd:08:75:ba:5e:f6:
4f:63:c7:7b:8f:69:f0:ff:29:33:d3:1b:4d:00:3a:73:4e:6c:
fb:83:76:fc:19:01:13:9d:6d:41:b8:6f:10:09:cc:19:b6:1d:
01:91:2d:81:d1:fc:5d:b9:73:b8:25:fe:86:20:08:46:45:d8:
10:1d:7e:dc:25:f2:aa:07:03:db:e6:f3:22:43:f8:39:8a:c6:
24:33:fc:14:b2:d3:82:ce:b8:62:a0:4a:e3:1f:eb:d4:44:ab:
12:63:1c:ab:f6:c8:00:5f:e2:36:f1:a6:67:f9:a9:62:35:c9:
5b:8a:11:e9:23:9f:21:29:82:f4:4a:28:d3:25:92:68:31:fc:
c8:fc:e1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:15 2025 by rpki-client