Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9515A494E86011EFA8294380762E951A.roa
File: 9515A494E86011EFA8294380762E951A.roa (raw, json)
Hash identifier: D9W6G9187RrUMIZ0zIpMSzr9R2/T/xg+KFAbO9HHpRY=
Subject key identifier: 93:F1:18:97:0F:22:4B:99:C9:57:5D:60:93:CE:BD:27:95:5A:2E:DB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13C6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9515A494E86011EFA8294380762E951A.roa
Signing time: Tue 11 Feb 2025 10:11:39 +0000
ROA not before: Tue 11 Feb 2025 10:11:35 +0000
ROA not after: Sat 13 Feb 2027 10:11:35 +0000
asID: 64267
IP address blocks: 102.129.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5062 (0x13c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Feb 11 10:11:35 2025 GMT
Not After : Feb 13 10:11:35 2027 GMT
Subject: CN=67ab225b-f957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4a:8e:8e:a1:ef:e4:fc:8a:c6:1b:1e:71:41:
4d:dc:07:6e:21:79:cb:7a:70:01:c8:02:67:ab:18:
af:db:87:75:8b:6e:3c:3b:a7:72:7b:dc:78:f5:f7:
67:0a:a2:62:15:c8:69:89:b1:08:86:92:27:57:e4:
70:34:ad:75:a7:7e:9a:ec:c1:ff:5c:9c:8c:7e:84:
f8:11:a4:92:ea:2c:82:cd:e9:84:4a:e2:ce:2f:72:
5f:dd:72:1d:b8:8c:38:64:91:7c:24:cf:8b:73:a5:
82:14:e3:e9:0a:17:16:01:25:2a:2f:b4:da:5f:3f:
53:4f:d3:88:f0:f1:9d:b4:f6:8e:0f:9b:bf:1f:46:
68:52:42:31:3b:65:f5:1e:57:b2:af:2d:e8:26:0d:
89:24:1d:28:38:af:fe:d6:a9:52:15:b1:50:ed:21:
89:be:4b:b9:cf:23:b4:b3:eb:18:43:d5:c2:48:38:
9f:92:ed:db:55:55:ec:20:1f:74:19:69:15:9d:32:
a5:83:a7:36:b8:32:9e:17:d3:51:ff:38:50:57:0e:
98:e6:2f:c5:2d:c3:e1:b0:2c:3d:21:d3:07:c0:f1:
76:3b:b9:65:c2:a0:d9:0b:db:2d:9e:9c:52:1a:27:
db:e5:20:8e:b6:f3:75:46:d1:40:4e:a3:8a:8d:bb:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F1:18:97:0F:22:4B:99:C9:57:5D:60:93:CE:BD:27:95:5A:2E:DB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9515A494E86011EFA8294380762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.244.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ff:a8:03:c1:d8:ca:97:ce:da:28:e7:26:15:57:fb:bb:43:
26:7d:49:1b:fe:81:14:0b:d3:85:e2:6f:7e:b5:a5:db:2c:f2:
08:a2:4f:6f:b6:86:4c:6a:66:a6:60:5e:0a:32:b5:fa:04:7c:
69:3f:e8:f6:27:a9:68:3f:50:51:59:1d:80:8d:e2:b4:e1:ec:
c9:98:78:2c:5e:17:5f:ca:b0:85:7b:fe:87:42:1f:b1:52:e2:
33:96:de:62:44:6f:3f:09:d0:9f:75:03:5a:eb:bd:d2:02:dd:
61:80:6a:bd:2b:0a:6c:77:b0:b3:4b:c4:75:28:9f:79:11:48:
fd:85:65:fb:10:de:00:78:00:e2:25:b2:c6:04:94:4d:41:88:
65:e4:4c:27:26:be:4d:97:4a:0c:4e:2e:9d:d5:a9:62:5f:5a:
a4:b8:8d:24:2f:c7:9e:b4:64:6b:da:56:d7:48:2c:74:6c:43:
5a:6d:ad:df:83:e4:0c:6c:63:ab:63:34:8f:8e:67:82:33:2e:
7b:65:48:08:08:5a:14:42:e3:93:e7:39:d4:1a:fc:a2:c8:13:
87:6a:53:f6:04:4e:e6:59:4d:d4:4e:4f:46:9a:2d:0f:84:6b:
c6:d3:cf:96:70:55:8b:51:14:84:95:91:92:08:ed:b9:30:13:
ad:02:e1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:00 2025 by rpki-client