Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7D55E01CE86011EFAFD1737E762E951A.roa
File: 7D55E01CE86011EFAFD1737E762E951A.roa (raw, json)
Hash identifier: 1yovizP1NCKkL8VyMkzLKKwbp6FBk5iGleENO6NoD2o=
Subject key identifier: 70:66:27:55:BA:0F:22:65:74:BB:E6:8A:E2:0E:46:84:8A:17:56:F3
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13C2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7D55E01CE86011EFAFD1737E762E951A.roa
Signing time: Tue 11 Feb 2025 10:10:59 +0000
ROA not before: Tue 11 Feb 2025 10:10:55 +0000
ROA not after: Sat 13 Feb 2027 10:10:55 +0000
asID: 61317
IP address blocks: 102.129.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5058 (0x13c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Feb 11 10:10:55 2025 GMT
Not After : Feb 13 10:10:55 2027 GMT
Subject: CN=67ab2233-b978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:23:c8:aa:53:10:ad:a7:18:f6:b6:34:ed:86:
db:96:53:d8:5a:bb:a6:e3:c5:01:5c:ba:00:75:70:
e0:a2:a9:62:02:30:41:88:d6:ec:df:fb:c3:d9:77:
95:ab:11:55:f8:c2:93:78:17:b3:5d:1c:2a:f2:f9:
76:ad:6f:ae:9b:6d:58:e1:fd:e6:ec:e3:7d:3c:02:
5f:d7:bf:30:29:77:ee:e0:32:51:91:61:ab:fb:f2:
d2:db:ab:17:5d:cb:03:ca:fc:f1:27:b3:45:20:2e:
77:71:2b:25:4e:23:0e:bf:37:c2:32:32:65:fd:34:
75:19:54:58:bf:a8:a4:63:98:8a:8e:92:5b:82:8c:
1d:f3:49:f0:42:d3:fb:71:89:83:2f:c7:0e:5c:a6:
d3:0a:a8:2d:c5:60:61:c3:ee:4c:72:0c:3e:5b:df:
ad:67:f9:cb:69:d7:55:d1:bb:43:1a:44:7d:81:be:
91:1b:55:e8:16:88:8a:ee:e6:3b:04:54:1f:74:dd:
3a:4f:52:3c:e3:9a:c0:cf:97:cd:40:85:02:15:8c:
61:c7:1b:bb:31:b1:d2:82:e5:22:41:e9:9d:4d:32:
86:04:36:a5:ea:20:d3:df:8c:84:74:55:55:d4:60:
a5:7d:90:56:d3:17:3c:47:a2:44:a5:20:4d:3f:95:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:27:55:BA:0F:22:65:74:BB:E6:8A:E2:0E:46:84:8A:17:56:F3
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7D55E01CE86011EFAFD1737E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.224.0/24
Signature Algorithm: sha256WithRSAEncryption
43:90:7e:b6:48:ee:a0:ea:7a:ab:85:e1:89:c5:cd:91:6c:e9:
71:67:47:a6:10:b5:cb:a8:5f:26:73:09:58:42:63:f9:ce:f0:
5c:d0:11:e9:22:f4:2a:37:f2:bd:7d:be:b7:66:67:87:58:54:
97:8e:1c:df:b6:58:e5:23:1e:0f:fb:4c:6c:1e:c6:63:43:63:
a7:39:8a:00:e6:41:ff:c6:63:2e:f1:b5:72:30:26:0b:a1:e6:
07:cc:f7:ce:06:06:3e:d0:44:2b:53:35:dc:b5:de:ad:29:91:
7a:c5:c8:92:34:cd:04:ff:2d:cc:a5:bb:aa:2e:81:34:e3:57:
03:7d:18:f5:05:bb:03:b3:d4:68:db:78:ab:c3:5d:21:f4:56:
b6:d8:b0:c6:ac:52:c1:87:5b:8e:85:27:9a:f4:b8:d0:9d:b6:
7d:47:c6:66:95:76:83:91:5d:0f:a7:59:c4:c0:37:2b:f2:b3:
24:2b:ef:c4:37:44:e9:f2:be:9c:ea:92:51:94:95:c5:e7:11:
82:3f:fb:68:65:f7:cc:85:95:e0:39:36:0d:48:3c:05:d6:e8:
ae:8f:c0:75:89:8b:69:00:f4:8e:34:8b:37:9f:9b:d4:4a:0f:
f0:ae:91:4e:c8:3d:fb:39:a7:12:bd:1c:d6:9e:79:d5:54:87:
c0:e3:5e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:48:43 2025 by rpki-client