Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A36AC27EEE0311EFBDAD26AA762E951A.roa
File: A36AC27EEE0311EFBDAD26AA762E951A.roa (raw, json)
Hash identifier: EWjiLYP8w3cCTRKUL67bxczyxjS34QoAl1h3A3Of3kg=
Subject key identifier: 98:2C:19:34:A4:1B:E4:78:BB:FD:4A:7A:25:DA:DA:9A:1A:82:26:2A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13DB
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A36AC27EEE0311EFBDAD26AA762E951A.roa
Signing time: Tue 18 Feb 2025 14:21:27 +0000
ROA not before: Tue 18 Feb 2025 14:21:23 +0000
ROA not after: Sat 20 Feb 2027 14:21:23 +0000
asID: 7018
IP address blocks: 102.129.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5083 (0x13db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Feb 18 14:21:23 2025 GMT
Not After : Feb 20 14:21:23 2027 GMT
Subject: CN=67b49766-c1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:fd:ba:3b:33:c7:a2:da:52:e4:f9:e5:6b:
45:e9:d2:45:cb:78:1f:d6:4d:b7:8b:f0:ae:94:49:
64:2a:1a:07:39:30:9d:09:c5:16:98:f2:eb:39:95:
94:6e:c9:0a:7d:15:91:5e:d2:0d:f9:81:8c:10:ea:
b7:99:5e:7f:0b:1e:d5:51:40:c1:bd:ed:de:64:92:
ad:32:a1:96:59:7e:df:ea:48:b0:8d:2b:cd:f1:41:
d5:53:33:27:25:7b:4c:45:e1:66:a3:11:f7:10:ec:
c4:92:47:ff:af:3d:eb:69:e9:3a:f1:07:34:5c:4c:
33:27:8e:ed:80:bd:73:fc:54:b9:1d:f8:ac:70:b6:
2c:24:c3:81:16:bf:52:74:88:42:6f:bf:dd:73:07:
d5:6a:09:f0:36:04:59:84:50:d0:5c:84:5d:74:53:
72:93:1a:e2:f0:d6:ca:67:3f:9d:57:ba:59:17:6d:
7a:25:bf:a9:c8:cc:ba:08:91:1b:41:40:4c:f9:36:
88:24:bf:8a:4c:b5:4d:b4:00:51:0a:cd:bc:76:72:
8f:d1:59:e3:79:55:b1:85:5a:d4:cc:80:18:bb:58:
56:8a:44:61:d7:b9:68:29:c6:e8:00:f6:86:97:9c:
b5:c7:93:5b:c6:d3:13:e6:15:92:aa:09:bf:12:f8:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2C:19:34:A4:1B:E4:78:BB:FD:4A:7A:25:DA:DA:9A:1A:82:26:2A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A36AC27EEE0311EFBDAD26AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.244.0/24
Signature Algorithm: sha256WithRSAEncryption
97:9b:10:b4:57:18:4e:53:5e:30:1d:fe:79:7d:25:c9:ea:3e:
00:31:fb:e7:a3:a3:71:cc:65:a2:5e:ec:12:58:a6:99:c9:9d:
7b:51:d1:36:be:ac:63:f5:93:90:c0:2e:14:f4:ff:6a:3a:9f:
00:7d:40:0e:19:09:65:f5:b2:e4:b4:cd:18:6e:2b:6b:de:a3:
2c:72:d0:75:86:62:cd:b3:3a:7b:01:be:22:ab:f8:0c:88:13:
8e:a5:a4:4a:2c:cb:5a:fc:2d:19:42:13:a7:56:9a:45:66:8a:
5a:b3:a5:d0:77:a6:6e:e2:87:1b:57:d5:c5:98:5a:92:7e:b9:
22:ca:2f:c7:7e:47:6a:c7:50:4f:51:e1:3e:9f:5f:09:29:c9:
86:34:a1:30:fb:fc:c9:66:f4:91:79:9e:02:f4:df:f7:7b:b5:
b5:33:a2:f6:21:ba:b3:2e:20:55:ba:7c:d9:fa:84:08:2b:bc:
27:26:88:bf:aa:f9:3b:e4:38:04:04:74:ec:47:0a:89:e7:32:
e0:e1:c6:d4:1f:8f:40:42:74:80:ec:c0:7e:64:14:50:07:50:
62:c2:78:05:45:6c:2a:61:bd:de:41:7e:56:d2:80:99:2d:61:
06:38:c5:70:07:6c:27:d3:5f:4d:d5:e6:62:63:8c:c2:97:6a:
be:aa:6d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:48 2025 by rpki-client