Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8807CB1AE86011EFBF02787E762E951A.roa
File: 8807CB1AE86011EFBF02787E762E951A.roa (raw, json)
Hash identifier: 5AXggSvPqMatpyeoKjO3qqxyTx7BGoMMDOzUCgnSlOc=
Subject key identifier: 53:65:40:EB:5F:23:AD:DD:A3:2E:71:C0:1F:8A:D1:24:C0:30:77:44
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13C4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8807CB1AE86011EFBF02787E762E951A.roa
Signing time: Tue 11 Feb 2025 10:11:17 +0000
ROA not before: Tue 11 Feb 2025 10:11:13 +0000
ROA not after: Sat 13 Feb 2027 10:11:13 +0000
asID: 64267
IP address blocks: 102.129.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5060 (0x13c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Feb 11 10:11:13 2025 GMT
Not After : Feb 13 10:11:13 2027 GMT
Subject: CN=67ab2245-7935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9b:e3:28:46:6f:58:3e:49:da:7d:50:43:98:
2a:37:73:3a:4a:f1:8b:57:c5:0e:03:8e:bb:b0:57:
15:cc:02:b5:19:42:61:4b:ea:06:12:7d:2a:81:55:
c2:5e:8d:da:35:4f:8d:11:15:77:f3:d2:b0:b8:56:
b1:b6:ab:58:20:30:4a:d0:43:ac:c6:9f:48:48:3e:
90:3f:5f:f3:f7:67:53:74:ff:bc:5b:97:18:46:48:
d3:a3:cc:5f:7a:4e:8c:d5:be:bd:18:1c:dc:1e:b9:
7b:10:7f:dd:f7:51:bd:f4:82:7d:9e:f7:2f:f1:ee:
95:6f:9d:20:f2:07:86:76:60:ee:1e:5f:f5:7f:e4:
52:e7:f0:ac:04:3c:23:2a:6c:ad:57:e6:d0:f5:c0:
63:81:09:ce:ca:f8:7b:53:fd:1a:f4:bb:4c:a0:41:
58:8f:2d:b9:c7:6d:4a:f0:da:c0:31:45:97:31:eb:
e5:c4:5d:1c:ee:34:d0:7a:62:3b:63:69:f5:f5:b6:
a3:0c:9b:b7:46:eb:61:ff:b8:b0:46:3a:70:f8:6b:
33:17:be:b9:5f:cf:b7:78:24:b1:a9:94:06:77:eb:
8c:91:34:2f:e2:5f:61:3d:33:55:29:63:51:99:1c:
bd:f1:91:46:16:e2:76:75:8f:14:47:f9:ce:58:58:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:65:40:EB:5F:23:AD:DD:A3:2E:71:C0:1F:8A:D1:24:C0:30:77:44
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8807CB1AE86011EFBF02787E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.244.0/24
Signature Algorithm: sha256WithRSAEncryption
56:47:66:4c:6e:f2:44:95:12:3a:e2:6b:6f:ed:db:9c:ef:63:
7d:41:46:32:75:5d:13:89:eb:93:2f:7a:83:ce:b4:eb:3f:c1:
24:b6:ab:85:d4:18:3c:59:47:26:4d:bc:62:eb:98:d0:72:2a:
61:7a:e5:8e:e9:7e:d9:3e:10:f2:bf:e7:c7:3e:75:83:87:a6:
cc:33:31:57:8d:d6:38:fc:b8:a0:1d:f6:13:37:94:6f:6c:d5:
85:32:f2:33:fe:91:e5:37:88:1c:76:26:c7:8c:40:c5:4c:ba:
6b:85:bd:59:b8:e9:0f:2a:7f:5f:3a:aa:e3:56:7e:6f:3b:d9:
44:2f:9a:46:07:ea:66:36:0f:fc:cf:a4:d0:23:e4:72:76:61:
81:2e:ba:d7:aa:1e:2f:97:9e:c7:f0:cd:c8:c3:f2:f3:db:ab:
75:2b:60:e8:ad:d7:b0:40:84:44:e4:7c:3b:e3:48:11:45:1d:
9f:88:60:66:6d:c1:41:97:a2:8e:1d:f5:25:08:d2:e2:76:95:
4b:d6:ae:50:3d:a4:10:d9:ba:c0:f6:e3:85:38:8a:22:bf:f5:
7b:3c:12:d8:32:43:56:cf:16:a1:8d:44:83:a5:8e:4f:3f:f9:
95:c6:db:82:dc:8d:bd:13:06:1f:f2:1f:98:da:e1:a5:5b:56:
bd:ca:e8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:28:47 2025 by rpki-client