Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E20BB6ECD7E611EF8D11C6B3762E951A.roa
File: E20BB6ECD7E611EF8D11C6B3762E951A.roa (raw, json)
Hash identifier: dgSaJ9W6OcYrhsDuxdhq16xMlsYkX7P02yHWbsr4Pfs=
Subject key identifier: EA:63:6A:3A:97:D2:A0:6B:E4:D7:9B:26:8A:17:DE:59:8C:0F:23:DD
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1370
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E20BB6ECD7E611EF8D11C6B3762E951A.roa
Signing time: Tue 21 Jan 2025 11:00:11 +0000
ROA not before: Tue 21 Jan 2025 11:00:07 +0000
ROA not after: Thu 21 Jan 2027 11:00:07 +0000
asID: 834
IP address blocks: 102.129.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4976 (0x1370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Jan 21 11:00:07 2025 GMT
Not After : Jan 21 11:00:07 2027 GMT
Subject: CN=678f7e3b-57f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:2e:6c:7a:fe:4f:b8:2d:bf:ab:59:6b:79:
6b:b6:21:3d:99:2a:99:fd:14:02:ed:44:77:5c:ed:
aa:b4:2a:89:b4:ee:09:64:af:03:ca:a9:5c:e0:59:
e4:44:ff:15:1a:ba:15:8b:44:f0:25:eb:37:db:86:
5d:ea:db:2e:a9:2c:ba:f3:1b:f8:0c:1a:ab:ed:eb:
f5:f3:99:fd:ff:8c:c1:db:a4:53:5c:88:72:eb:f4:
cd:82:68:bc:5d:2d:9f:6a:66:9f:a6:ce:76:d5:0b:
12:7f:c7:82:5f:a8:97:66:24:c5:32:b9:c4:85:d3:
af:91:83:8b:6f:8e:ac:00:03:6e:0a:5a:da:f9:0b:
fd:02:b8:2b:a1:a0:07:19:0c:59:97:89:b5:f4:70:
62:bf:86:04:06:ae:b9:06:12:aa:78:dc:93:25:c2:
f7:98:4a:f1:e3:2e:11:fa:e0:dc:f4:0f:93:37:46:
27:5a:6c:9e:9e:99:97:f0:b4:bc:24:c7:53:3d:fb:
43:ad:3d:91:6f:92:04:c1:23:21:46:78:aa:a3:be:
44:07:13:f4:87:d5:26:e9:db:1a:e6:2f:21:8f:55:
e5:57:da:ab:9d:83:e3:0f:86:b7:82:5c:10:d3:56:
14:23:4c:c9:99:6f:68:91:0f:9b:42:f8:86:0e:91:
b6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:63:6A:3A:97:D2:A0:6B:E4:D7:9B:26:8A:17:DE:59:8C:0F:23:DD
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E20BB6ECD7E611EF8D11C6B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.199.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7a:86:68:58:ec:3f:09:d4:13:bd:e8:2f:47:e1:65:91:36:
50:cb:47:da:6a:2a:04:19:6c:c1:93:fa:88:96:b2:a7:09:ef:
58:a7:b4:12:7e:b8:06:18:e3:b9:fd:6e:00:fa:92:8f:13:a4:
d0:0b:8e:21:0a:87:4f:c9:fb:ef:fd:31:7a:ac:45:93:4a:4c:
2a:fb:ba:a9:1d:69:27:35:96:06:65:8f:f5:2f:15:9e:87:22:
97:2b:e6:df:7b:7a:8d:c3:02:55:20:e1:73:27:a4:fc:e5:a1:
21:65:08:2a:a9:13:f3:09:6c:84:fa:78:5a:fb:a3:5d:88:5a:
b6:8e:31:36:0a:8e:64:1b:8f:7c:9f:25:b3:76:14:4a:de:28:
7d:f9:79:e1:66:b1:fb:83:4d:37:07:4a:3f:80:6a:db:f2:1b:
96:2d:14:c7:16:59:d4:88:43:21:ad:40:c1:29:e6:23:f9:95:
f6:d7:6b:8f:f3:e6:1d:23:a7:15:30:52:1b:78:16:1d:23:6a:
7f:f7:fa:d6:bc:a1:07:55:65:5b:2d:50:8d:48:a3:28:d2:7d:
58:05:81:37:ae:e0:5f:44:f1:4d:65:3c:66:0d:3f:c3:32:a7:
3f:d6:bc:24:ac:02:15:99:dd:4e:8a:34:02:98:43:5c:c7:25:
68:51:7c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:58 2025 by rpki-client