Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E9D4F9A8440511EFB93CF85F762E951A.roa
File: E9D4F9A8440511EFB93CF85F762E951A.roa (raw, json)
Hash identifier: jLZIyna5iaUk1sEvPMcpwhmxsEgBE52aHylLiRE8Pfo=
Subject key identifier: A0:92:81:9C:E8:30:0D:4F:AA:7B:12:C1:AC:6B:44:F2:6B:23:E8:EF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1162
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E9D4F9A8440511EFB93CF85F762E951A.roa
Signing time: Wed 17 Jul 2024 06:29:26 +0000
ROA not before: Wed 17 Jul 2024 06:29:21 +0000
ROA not after: Fri 17 Jul 2026 06:29:21 +0000
asID: 10753
IP address blocks: 102.129.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4450 (0x1162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Jul 17 06:29:21 2024 GMT
Not After : Jul 17 06:29:21 2026 GMT
Subject: CN=669764c6-cc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:0b:d3:58:ac:11:48:a3:29:23:9f:42:fd:
d6:32:9f:64:56:4f:f0:6a:34:10:69:cd:a4:58:14:
7f:c7:4b:94:ca:7b:a9:50:8b:65:cd:af:a8:93:28:
0c:88:27:b7:66:38:1a:91:d2:82:e8:f1:92:8f:c1:
41:12:1d:7f:4f:90:e8:67:5c:f1:5f:a7:cf:b9:70:
b4:fd:b0:ac:10:08:06:ba:21:8e:2f:7b:ed:9e:c5:
52:da:f6:cb:5d:67:da:38:6f:b2:d8:ef:81:fc:3b:
49:1b:47:30:62:27:67:d1:64:79:60:cc:e2:50:90:
66:aa:80:79:dc:a6:4e:cf:ea:57:ed:81:b7:23:b9:
41:28:19:7e:0a:00:c9:14:1e:e8:d1:53:ff:41:1c:
c2:a2:b4:19:c7:ab:b3:f9:5a:6b:9d:d3:77:11:91:
20:d1:5b:e3:ae:a0:e0:bd:be:29:5e:40:a8:a7:c3:
f9:6f:7e:17:6c:d1:36:a5:9a:7b:9a:de:72:4c:f8:
54:86:80:c7:db:b9:5a:80:34:e0:f7:60:91:01:59:
1e:e4:87:ad:24:48:94:4b:85:36:50:d3:4a:01:4e:
6c:9b:8a:5f:ec:8d:a2:9a:e4:35:90:2c:3d:6e:0a:
fe:a1:80:28:30:a2:ee:69:a5:63:80:da:ba:f7:de:
0b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:92:81:9C:E8:30:0D:4F:AA:7B:12:C1:AC:6B:44:F2:6B:23:E8:EF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E9D4F9A8440511EFB93CF85F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.166.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:1d:5a:7f:8b:55:6c:e0:7e:cb:29:2d:41:6f:83:8d:9b:cf:
28:66:d5:6a:6d:2b:51:62:7c:1d:1f:4f:de:72:5b:d9:9b:9c:
fe:7b:8d:8d:7a:1d:78:bf:4f:02:28:e2:28:9f:02:c7:b8:d9:
f6:a3:20:71:27:ab:2a:7d:dd:8c:28:0f:be:72:12:02:94:5e:
e8:5d:cf:21:54:e0:e2:94:85:b4:99:5c:2d:3b:f1:81:73:68:
5c:e1:aa:48:a0:5a:a7:9e:2c:4c:97:0b:32:a2:40:5c:9e:fa:
1c:37:fb:5a:3a:31:a3:52:9e:d1:6a:e4:b7:fc:75:79:18:71:
88:b5:82:4e:2e:c0:0c:29:1e:45:3e:92:d7:b3:12:94:13:60:
8a:d4:16:7b:4c:1a:0b:9f:c4:af:d4:7b:82:ff:40:6e:22:35:
03:60:44:04:b5:d9:df:f9:eb:51:3e:c0:a8:3b:ce:fe:96:75:
fa:9a:d4:4d:25:84:db:17:28:f8:66:de:66:0f:09:73:1e:b9:
44:f5:e2:18:38:70:19:f7:45:bc:20:76:18:34:eb:fd:9b:ba:
8f:1b:d0:36:ac:57:b7:d8:0e:eb:2b:8b:4c:25:52:a4:a7:35:
4a:7c:23:d1:fe:18:62:31:e3:9b:b5:19:dd:01:e9:e9:bc:db:
b6:c3:e1:00
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEWIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDA3MTcwNjI5MjFaFw0yNjA3MTcwNjI5MjFaMBgxFjAU
BgNVBAMTDTY2OTc2NGM2LWNjODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxwAvTWKwRSKMpI59C/dYyn2RWT/BqNBBpzaRYFH/HS5TKe6lQi2XNr6iT
KAyIJ7dmOBqR0oLo8ZKPwUESHX9PkOhnXPFfp8+5cLT9sKwQCAa6IY4ve+2exVLa
9stdZ9o4b7LY74H8O0kbRzBiJ2fRZHlgzOJQkGaqgHncpk7P6lftgbcjuUEoGX4K
AMkUHujRU/9BHMKitBnHq7P5Wmud03cRkSDRW+OuoOC9vileQKinw/lvfhds0Tal
mnua3nJM+FSGgMfbuVqANOD3YJEBWR7kh60kSJRLhTZQ00oBTmybil/sjaKa5DWQ
LD1uCv6hgCgwou5ppWOA2rr33gsxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUoJKB
nOgwDU+qexLBrGtE8msj6O8wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0U5RDRGOUE4NDQwNTExRUZCOTNDRjg1Rjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgaYwDQYJKoZIhvcNAQEL
BQADggEBAJ4dWn+LVWzgfsspLUFvg42bzyhm1WptK1FifB0fT95yW9mbnP57jY16
HXi/TwIo4iifAse42fajIHEnqyp93YwoD75yEgKUXuhdzyFU4OKUhbSZXC078YFz
aFzhqkigWqeeLEyXCzKiQFye+hw3+1o6MaNSntFq5Lf8dXkYcYi1gk4uwAwpHkU+
ktezEpQTYIrUFntMGgufxK/Ue4L/QG4iNQNgRAS12d/561E+wKg7zv6Wdfqa1E0l
hNsXKPhm3mYPCXMeuUT14hg4cBn3Rbwgdhg06/2buo8b0DasV7fYDusri0wlUqSn
NUp8I9H+GGIx45u1Gd0B6em827bD4QA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:42 2025 by rpki-client