Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B6B17D80B16A11EF8FE4B542762E951A.roa
File: B6B17D80B16A11EF8FE4B542762E951A.roa (raw, json)
Hash identifier: xU2KtqPoGOtGVqO7U5hF/J6ddcDbWJX52zWggJYPqIA=
Subject key identifier: 19:F2:DB:D2:CC:FF:A0:0A:87:EB:66:FA:10:A5:9F:82:C2:9B:A0:1E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1301
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B6B17D80B16A11EF8FE4B542762E951A.roa
Signing time: Tue 03 Dec 2024 11:35:36 +0000
ROA not before: Tue 03 Dec 2024 11:35:32 +0000
ROA not after: Thu 03 Dec 2026 11:35:32 +0000
asID: 397423
IP address blocks: 102.165.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4865 (0x1301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Dec 3 11:35:32 2024 GMT
Not After : Dec 3 11:35:32 2026 GMT
Subject: CN=674eed08-d6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:eb:50:e6:c1:19:bd:b9:90:31:78:03:2c:5c:
fd:d1:2b:55:06:2a:c2:b5:2a:86:7e:a3:6a:b1:d3:
cb:1f:22:03:cb:2e:03:51:5b:02:a3:c6:a9:92:9c:
b7:1e:41:02:d8:5a:f6:8f:92:9f:62:27:e9:04:d5:
e0:ea:b1:39:f8:0f:35:e9:4f:2b:ea:8a:f7:9a:32:
d8:64:a4:79:72:fc:19:e8:f3:ae:b9:32:35:b8:a5:
62:c6:47:01:6d:56:38:7a:cc:ce:ef:fd:38:90:1c:
a7:48:c1:a8:02:cf:d1:7b:66:b1:82:de:bd:b8:24:
af:fb:3a:8f:08:32:e6:1a:a3:ea:78:e7:7e:c4:4c:
24:54:ca:59:4f:09:5a:7a:76:e8:ca:c1:7c:be:e9:
e6:95:a9:c4:7e:8b:ed:75:f2:96:8e:74:fb:19:56:
9b:1f:1b:03:22:84:87:36:8a:32:9d:49:09:cb:59:
45:9e:89:1d:a0:ec:31:e0:7a:c2:c9:f2:05:68:69:
11:d4:d3:f7:71:e6:49:8e:cc:29:63:19:3e:7d:31:
e5:6c:45:7d:e1:3f:89:1c:b4:c0:5f:30:79:82:8a:
7e:8a:5d:04:62:da:97:30:55:9b:bd:cb:84:1e:3a:
ca:65:1d:a4:88:d4:09:42:3f:5e:4e:9f:5a:7b:c5:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F2:DB:D2:CC:FF:A0:0A:87:EB:66:FA:10:A5:9F:82:C2:9B:A0:1E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B6B17D80B16A11EF8FE4B542762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.13.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d2:0d:33:18:84:c0:46:d7:d8:fb:52:3b:87:a2:50:c7:09:
77:5f:1b:0a:2f:db:e6:53:97:6b:04:1f:11:2b:bb:41:c1:c3:
0a:92:9e:35:07:61:d2:16:20:54:2e:e4:bb:b3:47:a1:17:cc:
5d:1a:c6:60:fc:f7:57:0b:07:5d:ed:6d:7a:b3:b7:79:8b:c7:
82:63:ed:ad:c0:50:43:da:ed:09:9e:98:0b:4b:12:6f:56:bd:
b9:bf:9d:ed:1b:84:e4:bb:bd:df:ad:67:6f:1b:ce:81:e3:df:
59:b4:72:b3:00:5c:1e:6e:5e:d2:10:24:19:3e:f6:70:4b:f5:
90:f7:f7:ce:f0:29:ee:05:4e:fc:b3:e6:0c:2d:be:6b:2e:28:
4b:51:65:3a:bc:6a:55:4b:d1:2f:85:8d:3d:33:e1:16:98:82:
14:8a:7a:68:7f:f0:ff:62:f4:a1:9b:8c:df:db:ea:6f:0c:72:
b4:e6:83:38:4b:5c:2c:46:24:5e:77:32:e4:18:ef:40:8a:ff:
a9:76:8d:6b:b2:f4:f3:7a:24:43:16:3e:d7:7c:f1:ce:b7:45:
e8:91:64:78:a9:a8:f7:26:10:1a:3b:9c:00:3a:76:48:2c:bd:
1b:af:c3:b8:7d:09:86:3c:e9:c0:6c:07:a4:f2:8c:64:e4:46:
c3:ea:a4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:09:14 2025 by rpki-client