Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B49D4C2CD24E11EF8A57295F762E951A.roa
File: B49D4C2CD24E11EF8A57295F762E951A.roa (raw, json)
Hash identifier: E1jW6MJMjHQ+HLakmZMMePe9rFGAZT5zyhXLnz5XQnU=
Subject key identifier: EF:EE:C3:96:36:9B:D5:A0:9A:4F:87:85:87:BA:63:07:E5:30:85:DE
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1363
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B49D4C2CD24E11EF8A57295F762E951A.roa
Signing time: Tue 14 Jan 2025 08:08:15 +0000
ROA not before: Tue 14 Jan 2025 08:08:11 +0000
ROA not after: Sat 16 Jan 2027 08:08:11 +0000
asID: 834
IP address blocks: 102.129.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4963 (0x1363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Jan 14 08:08:11 2025 GMT
Not After : Jan 16 08:08:11 2027 GMT
Subject: CN=67861b6f-e719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:1b:32:9e:13:69:d8:d6:d8:a8:5a:81:b8:
ca:ba:91:a4:58:bc:3a:41:da:15:17:0a:d8:cb:3c:
16:29:c5:97:45:3d:95:07:74:61:ca:57:93:a7:ca:
d2:d6:6b:88:c2:a2:fb:d3:2c:7a:f9:e6:e1:24:89:
a7:17:c2:a2:83:59:b4:0b:5c:15:2b:5c:5f:46:b8:
b7:38:ed:51:f5:26:ae:8f:7f:6a:b3:8e:57:f9:3d:
db:5d:e5:ef:12:3e:66:a2:94:87:5f:18:5a:6c:bb:
de:bb:04:f5:b9:e3:a7:6e:ea:65:e8:e6:38:fe:37:
28:e8:2d:b0:00:e4:fe:5c:b8:3e:08:b8:b5:8e:cb:
f7:78:9f:9d:f7:25:0f:d7:ae:73:96:94:b8:58:11:
cd:05:57:13:d3:93:81:eb:2c:4a:7a:71:f8:f2:51:
f1:a2:05:f9:cb:34:47:4b:34:11:11:60:25:eb:47:
78:28:58:d5:e8:c1:ab:ae:bc:17:bf:ae:e5:de:80:
f6:d1:77:4f:8b:66:60:77:91:79:0b:0d:4e:99:57:
f7:a2:14:aa:51:ab:8d:e6:fd:d6:99:07:6d:34:84:
a3:f1:dc:61:da:4b:e3:7f:dc:10:be:e6:1e:07:05:
5b:0d:32:26:1a:ac:f6:be:00:b0:95:2b:b6:8d:ea:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EE:C3:96:36:9B:D5:A0:9A:4F:87:85:87:BA:63:07:E5:30:85:DE
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B49D4C2CD24E11EF8A57295F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.215.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:47:4e:98:30:50:02:4f:bd:2c:0e:3e:1e:cd:ce:b3:1d:bb:
ec:c3:36:29:86:9f:ea:9a:ba:d2:12:a0:ed:21:7e:ce:fd:d6:
85:e0:e2:00:ad:8f:9a:5b:52:cb:e3:11:fe:3a:f8:a3:a4:cc:
a3:55:e7:44:87:aa:83:27:b8:ca:14:54:3c:3a:a8:a8:b8:b8:
22:2c:72:ee:be:0d:f0:92:c1:11:be:d2:02:b3:9a:a6:a3:27:
05:f5:11:76:fa:30:fa:ac:ef:55:a3:67:5b:27:7b:e6:f3:0a:
c7:b9:02:85:e0:2d:a0:51:65:d3:d5:4d:d7:7b:d9:b5:95:a1:
3c:73:d0:99:98:ad:e1:ee:81:5e:ed:d7:da:1c:3e:7e:14:64:
76:1a:e0:f6:6a:61:8f:40:e7:8d:d1:7d:2a:87:13:4a:56:b0:
96:4f:c5:f7:09:fa:56:a5:2f:36:ca:c3:8c:70:bc:9b:d5:f9:
15:cb:a7:0d:f5:06:b6:54:cb:4e:e0:c0:2a:41:bc:8d:4c:26:
3d:92:26:d3:7d:22:53:5d:f1:06:4f:49:40:22:af:12:c6:67:
1d:0d:6d:6d:6a:31:1f:cc:b1:7d:8e:89:27:50:e2:61:99:05:
0f:70:83:c9:b9:df:4d:35:4d:02:ec:cc:72:38:31:5b:75:03:
de:c6:02:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:43 2025 by rpki-client