Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/942DC6AAC44411EF9C2F48B1762E951A.roa
File: 942DC6AAC44411EF9C2F48B1762E951A.roa (raw, json)
Hash identifier: 0vDbHHYZ+dhcksuiWBSj+v23OvUTzfKJjQpEzgokPPk=
Subject key identifier: 6E:D5:14:F3:50:BA:3A:8A:A1:71:08:DB:99:38:F6:4A:89:92:03:85
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1342
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/942DC6AAC44411EF9C2F48B1762E951A.roa
Signing time: Fri 27 Dec 2024 11:20:30 +0000
ROA not before: Fri 27 Dec 2024 11:20:26 +0000
ROA not after: Sun 27 Dec 2026 11:20:26 +0000
asID: 212238
IP address blocks: 102.165.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4930 (0x1342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Dec 27 11:20:26 2024 GMT
Not After : Dec 27 11:20:26 2026 GMT
Subject: CN=676e8d7d-58c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:4d:5d:80:22:cb:e8:14:48:a7:08:da:e5:
6c:b7:8f:00:dd:10:11:9b:3c:8d:9c:22:84:b8:33:
48:6c:8a:95:08:76:e3:99:29:f9:bc:9a:fb:af:c0:
13:92:fc:aa:af:a1:9f:f0:cc:9a:d3:02:4a:ba:c8:
9b:53:21:67:52:62:d0:09:78:37:01:1d:c5:ca:9f:
b4:46:0c:7c:92:c0:0b:43:d3:b8:11:f5:68:2c:4e:
71:d3:92:6c:0a:16:7c:54:f4:be:d1:34:a8:6b:67:
cf:1f:e7:ad:1b:4f:c3:6a:de:3c:d4:8a:a8:9c:45:
b1:ff:4e:4d:a5:ec:98:fd:fe:74:21:41:90:fd:99:
4e:00:f1:c5:d4:e4:48:54:0f:7f:76:ab:86:93:45:
f7:09:aa:26:7c:7a:e1:60:44:6d:b4:7d:11:ce:1c:
ca:3e:aa:aa:b6:dc:09:57:06:2a:e6:6c:3e:63:9e:
1b:c6:e8:b7:0d:37:7e:b1:ff:9c:e7:81:62:e6:7f:
1d:5a:38:60:cb:51:04:53:29:b2:05:50:1d:43:19:
7a:28:01:f7:d0:34:6b:95:7f:4f:d6:d0:91:bd:29:
e1:31:ee:13:35:70:e3:59:c0:44:d1:ac:ba:24:e5:
89:3d:0e:ed:34:3d:0f:30:61:38:33:6b:88:10:50:
cc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D5:14:F3:50:BA:3A:8A:A1:71:08:DB:99:38:F6:4A:89:92:03:85
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/942DC6AAC44411EF9C2F48B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.36.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:4a:a9:2a:38:36:60:42:3c:d9:6c:70:5f:81:e2:83:9a:fe:
fe:72:b9:99:cd:ce:aa:6b:72:40:43:91:08:f4:ec:2a:ce:0f:
57:26:dd:95:cb:18:be:a8:e4:33:3e:97:c1:55:29:0a:7b:37:
fc:56:15:54:b5:38:d6:c1:ba:ae:12:ce:05:10:dd:4c:10:c3:
b4:6f:aa:d0:8a:b0:65:70:25:d2:41:90:5e:7e:a9:b6:86:4f:
4c:93:11:cb:c4:40:b4:17:ea:3b:67:ba:d4:fc:cf:29:e4:75:
8f:41:a9:8d:ac:3f:15:94:fa:a9:89:5b:33:b3:11:b1:f9:59:
6e:cf:16:a1:bc:cf:99:08:13:42:39:ec:1c:8b:25:28:47:9b:
17:26:d1:c7:db:c9:f7:10:57:7b:6f:f5:ff:a5:6e:0b:64:6c:
95:5b:74:75:f3:89:22:b0:a1:3d:39:39:97:39:ac:c3:a7:a8:
86:81:d0:fe:4d:f8:cf:e6:6f:f4:ec:97:2a:4a:cc:ff:36:dc:
00:5c:6d:3c:e9:eb:fc:85:c7:78:cc:16:ab:ea:0e:0a:80:d4:
49:12:6b:da:b9:3c:8f:4a:95:06:77:4d:df:24:72:78:e6:ec:
31:ed:c3:4e:aa:9a:2c:40:f8:bc:bd:d8:22:c2:c5:aa:4a:d3:
f2:af:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:46:52 2025 by rpki-client