Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C423E04AD7E711EF8D2B37BA762E951A.roa
File: C423E04AD7E711EF8D2B37BA762E951A.roa (raw, json)
Hash identifier: y120LbXv1PoejeyV+VDtR3PHKLptjbgeSTydn/E8e6M=
Subject key identifier: F3:66:5D:B7:63:28:BB:C8:A7:49:1D:A4:69:17:1A:5E:03:B7:A3:5F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1379
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C423E04AD7E711EF8D2B37BA762E951A.roa
Signing time: Tue 21 Jan 2025 11:06:30 +0000
ROA not before: Tue 21 Jan 2025 11:06:26 +0000
ROA not after: Thu 21 Jan 2027 11:06:26 +0000
asID: 834
IP address blocks: 102.129.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4985 (0x1379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Jan 21 11:06:26 2025 GMT
Not After : Jan 21 11:06:26 2027 GMT
Subject: CN=678f7fb6-a260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:db:d6:5a:f9:6e:ae:10:40:52:c0:21:1a:59:
bf:c2:f2:54:d0:50:f1:1c:cf:4f:cf:69:37:61:5a:
cb:e8:71:5f:81:42:de:b7:5e:f7:3c:59:37:ee:e8:
af:02:37:93:9a:5e:50:07:7e:2e:12:7d:fe:bc:62:
4f:92:67:fc:53:eb:9d:6d:c4:91:60:22:b6:59:6b:
c3:6e:4e:c0:e4:94:18:1d:60:56:29:5f:bb:b6:5f:
c1:5e:e5:8f:cc:f1:71:3b:40:84:ea:ed:86:91:65:
43:88:75:8a:c7:b6:74:89:15:4f:de:72:34:78:8d:
ec:a3:70:5c:51:9c:49:9c:0b:a7:f8:95:63:93:74:
02:c5:63:f2:68:8a:17:d3:4f:72:b4:ca:f1:46:ee:
fd:d6:ba:a9:59:6f:5e:b1:7c:c1:9b:8b:0b:74:08:
2c:77:72:2d:67:09:4a:a5:e0:ab:ac:d9:3d:95:27:
49:70:78:df:5a:87:6b:b9:36:e4:bf:b2:39:d0:69:
4d:31:79:f3:cb:2f:03:7e:73:d9:c8:18:0c:69:62:
16:cb:7e:6b:b4:c5:6a:06:3d:d7:62:d5:df:b2:c1:
de:bd:7c:f7:6f:e3:98:30:f6:f8:ad:9c:44:4f:b8:
3f:11:b1:aa:38:48:87:0a:ec:96:93:ee:36:31:d0:
ea:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:66:5D:B7:63:28:BB:C8:A7:49:1D:A4:69:17:1A:5E:03:B7:A3:5F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C423E04AD7E711EF8D2B37BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.173.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:12:df:9b:08:f9:65:fc:bc:c0:24:3a:79:76:96:08:9a:cd:
94:d1:b8:88:bb:83:9e:7a:5c:46:31:07:26:94:6c:11:67:80:
d1:87:b1:a5:71:e0:42:2f:5a:74:f5:43:95:67:f7:3e:51:f3:
86:0d:fb:e7:37:9a:f3:56:99:73:7a:fa:ca:75:05:13:15:e3:
4f:d4:88:d6:3c:fd:b8:bd:d7:b5:0f:2f:f3:60:d6:c8:7c:74:
ec:df:e1:85:95:1d:f6:01:ef:d5:69:76:52:5e:2c:95:5a:3d:
80:e2:9e:c1:5e:e9:77:48:5d:ef:36:5b:9f:de:3e:41:cc:ff:
9a:a5:54:7b:8d:e5:97:db:9a:6f:df:89:a6:bc:74:1e:c4:93:
54:18:f6:a5:cd:74:13:e4:d4:34:8c:6e:7a:14:37:52:58:c4:
27:b5:fd:5b:fd:98:8d:cf:6e:a1:a9:d6:a8:0b:90:4d:aa:f4:
2f:67:38:59:57:7d:09:67:93:9c:ef:66:6f:a8:8e:1e:43:9c:
f1:65:eb:56:72:7f:67:8e:73:83:45:1a:98:83:d9:e0:9f:92:
90:48:ec:23:1c:6b:ae:80:61:e2:07:e4:64:39:e4:c3:4f:f5:
4f:38:05:e6:53:08:50:51:cc:49:78:85:69:11:21:00:b7:9c:
90:ce:f0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:48 2025 by rpki-client