Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E90F2702E85E11EFAE902E75762E951A.roa
File: E90F2702E85E11EFAE902E75762E951A.roa (raw, json)
Hash identifier: 6Om05r49ciNGnB4Gi3tZ1svDKP3GEgx/RgfkTG/FBoQ=
Subject key identifier: A5:9B:F3:5F:32:59:EE:30:04:8D:A1:E1:E9:71:95:46:85:87:CD:FD
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13B6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E90F2702E85E11EFAE902E75762E951A.roa
Signing time: Tue 11 Feb 2025 09:59:41 +0000
ROA not before: Tue 11 Feb 2025 09:59:37 +0000
ROA not after: Sat 13 Feb 2027 09:59:37 +0000
asID: 7018
IP address blocks: 102.129.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5046 (0x13b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Feb 11 09:59:37 2025 GMT
Not After : Feb 13 09:59:37 2027 GMT
Subject: CN=67ab1f8d-5904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:20:45:06:69:04:06:ee:8e:18:7b:c4:b6:
2a:cc:aa:8b:8e:dd:02:2c:33:b3:56:c2:66:12:22:
e4:72:fe:78:aa:df:78:83:cf:c5:2d:ce:fb:62:fe:
f7:9d:30:88:e5:3d:0d:fa:20:46:e6:71:c8:8f:b7:
56:fd:05:2c:54:bd:f8:a6:00:8b:13:2f:2c:3f:aa:
14:6a:7c:51:b6:f2:36:d9:4b:75:d4:69:05:23:1c:
9f:c0:eb:63:bd:82:79:d3:cf:12:ef:5f:a5:8b:44:
6d:3f:9e:96:83:ec:e6:ea:1e:c8:92:dc:b2:5a:b7:
2d:e5:c1:75:6e:a6:d7:94:f2:49:61:0a:15:3a:d6:
27:cc:79:ff:62:4a:8f:30:9f:eb:e5:ca:cf:3c:79:
2f:6c:bc:15:03:07:41:43:c5:d0:67:92:ea:0b:ff:
75:24:17:71:b5:35:e8:41:4e:20:b0:30:13:3b:15:
e6:51:f5:3e:b7:81:ce:36:70:54:16:ad:93:ef:cd:
55:18:19:8c:59:26:fb:15:3f:f4:18:20:4a:c7:12:
e8:c3:4a:e1:48:5b:3c:c5:97:5a:3d:9e:60:24:b0:
f0:6a:6c:80:e4:68:0f:f7:e1:ed:6d:c2:ff:cf:91:
1d:99:a3:9c:b8:b1:e8:e1:ce:7f:65:51:4e:95:0d:
20:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9B:F3:5F:32:59:EE:30:04:8D:A1:E1:E9:71:95:46:85:87:CD:FD
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E90F2702E85E11EFAE902E75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:0b:14:3a:69:87:e8:81:26:b1:ee:a5:9d:ad:c9:68:ac:af:
c9:9f:e6:ff:be:48:ff:8e:03:1c:02:f8:92:62:33:18:32:7d:
f8:1d:97:11:48:dd:1c:60:0d:fd:4d:14:8f:18:43:00:58:3e:
ce:df:e0:87:1e:02:63:ae:72:f4:ef:01:8b:95:be:29:2e:de:
99:4c:77:e2:4b:ec:cb:5c:04:9c:69:9c:5e:df:68:4d:7e:29:
43:e9:40:46:9b:a6:61:c2:9d:b7:74:a8:49:f1:1f:79:63:60:
48:ec:10:46:c8:01:4e:b6:72:1f:c4:d4:2d:7b:09:65:80:1b:
b6:80:09:a4:7b:1c:77:62:02:ae:86:88:89:75:77:d1:cc:a5:
6a:69:9a:11:55:5b:71:3e:a6:c8:7c:7d:d8:4d:19:0c:f0:04:
3d:a3:2e:55:c0:1f:7f:da:b0:f6:1b:e5:a0:a2:a6:12:dc:d5:
c2:2f:b9:1c:55:4d:25:cc:4e:b4:7c:37:75:fe:cb:ed:32:75:
79:6d:60:2e:fa:56:1f:5d:a1:6d:4f:ad:1b:38:30:1b:6b:5d:
fb:a4:57:4c:fc:68:35:eb:13:ae:38:28:a6:dd:d4:82:52:f8:
f5:f1:1d:89:94:f1:23:34:a9:72:d4:94:53:7f:74:16:40:e8:
41:fd:94:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:39 2025 by rpki-client