Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/929FA90AE85E11EF9CD6CD74762E951A.roa
File: 929FA90AE85E11EF9CD6CD74762E951A.roa (raw, json)
Hash identifier: CBBez4OI4FeEPl9A4oDoZtN8ra7sEALEg3Ijt2cf0bA=
Subject key identifier: 16:18:70:84:22:BF:D1:83:B3:2F:73:03:02:9E:77:33:D8:48:B5:70
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13B4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/929FA90AE85E11EF9CD6CD74762E951A.roa
Signing time: Tue 11 Feb 2025 09:57:16 +0000
ROA not before: Tue 11 Feb 2025 09:57:12 +0000
ROA not after: Sat 13 Feb 2027 09:57:12 +0000
asID: 61317
IP address blocks: 102.129.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5044 (0x13b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Feb 11 09:57:12 2025 GMT
Not After : Feb 13 09:57:12 2027 GMT
Subject: CN=67ab1efb-5f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fa:6a:3f:70:2e:61:2c:6d:a6:63:32:4e:07:
7e:8f:51:75:1e:f6:d2:31:d7:e8:41:4d:d4:ab:60:
6f:4a:d3:a7:4d:df:33:63:6d:47:52:86:0f:34:02:
ba:fe:40:8d:09:c1:41:8d:72:3f:84:16:1f:e5:00:
c6:e9:d4:c4:96:4c:66:15:fb:c0:a1:73:07:2e:86:
79:d0:f0:d1:51:6f:43:d5:f3:e7:75:3a:e2:9c:e9:
38:e8:18:9c:26:58:cc:a6:79:0f:15:75:97:36:2b:
48:7f:24:c5:64:a3:21:c0:11:05:83:f8:f9:12:fc:
3e:11:8d:40:3d:69:57:35:b3:ca:b4:f0:93:4e:c9:
de:e0:3c:a7:cc:68:c5:11:ed:63:ab:0a:87:ab:83:
fe:a3:87:7f:5a:e2:81:92:c1:19:20:a8:a7:b0:20:
4d:1c:bd:63:55:2b:66:14:42:02:cc:9f:51:67:ca:
84:f8:89:dd:a1:03:f0:26:b5:56:ff:f1:3e:bf:d6:
f7:b6:5f:22:dc:45:a0:8a:5d:40:91:1d:0c:51:99:
ed:1c:2c:55:c8:af:3f:0d:26:fa:4a:ad:9d:09:58:
55:c9:9e:8b:2e:ca:c5:2f:95:03:9f:70:f2:a8:19:
6f:3e:bf:33:36:54:f4:0b:57:18:5a:9f:78:25:47:
e9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:18:70:84:22:BF:D1:83:B3:2F:73:03:02:9E:77:33:D8:48:B5:70
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/929FA90AE85E11EF9CD6CD74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.144.0/24
Signature Algorithm: sha256WithRSAEncryption
25:0f:8f:b2:f5:5d:1f:a1:53:39:98:de:17:d7:8c:b0:41:d5:
d2:0d:07:74:21:a2:92:89:8d:a6:e9:da:37:b1:0d:db:57:de:
3d:da:7c:2a:19:f4:e1:2d:e5:cb:7e:47:d5:28:9c:78:dd:4e:
ad:5e:66:f5:11:88:92:ba:06:68:16:f2:66:21:08:a3:66:3d:
11:33:85:26:df:af:20:94:19:5c:d6:e8:70:33:55:3a:14:3d:
9a:04:ab:d6:0d:b0:e3:99:aa:bd:53:ed:d2:03:56:45:5e:01:
26:87:9f:48:b5:4e:a3:05:b2:e0:fb:da:df:7b:2f:bf:1c:a4:
51:04:58:5d:88:96:81:e1:03:33:fb:53:40:14:08:81:01:e2:
9b:78:18:6b:a0:1f:f5:f6:06:11:ff:a5:a6:f5:5c:33:9a:6b:
77:fa:30:0c:2c:bb:ea:61:76:01:13:93:43:a5:e9:7b:56:57:
de:c7:a9:d8:24:47:71:bc:65:50:75:42:ad:f1:96:33:c3:02:
3e:64:53:8d:94:e7:47:29:34:40:13:54:c7:a4:32:c4:b4:33:
4f:1b:bb:d0:55:12:79:56:a2:1f:6e:48:1a:68:09:62:df:c9:
32:b5:e1:26:0e:be:6b:f3:39:c6:4b:3c:55:60:b4:39:58:79:
14:5b:cb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:35 2025 by rpki-client