Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EE388398C44311EFA2EA0FAD762E951A.roa
File: EE388398C44311EFA2EA0FAD762E951A.roa (raw, json)
Hash identifier: 0gxmXJOwuKGKU0Mdmpw3Ofr8EXWeglx53x3L1o5p88g=
Subject key identifier: 0E:25:93:DB:7B:3B:F0:02:62:9D:6F:7E:60:14:C1:56:E5:E1:81:68
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 133F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EE388398C44311EFA2EA0FAD762E951A.roa
Signing time: Fri 27 Dec 2024 11:15:51 +0000
ROA not before: Fri 27 Dec 2024 11:15:47 +0000
ROA not after: Sun 27 Dec 2026 11:15:47 +0000
asID: 397423
IP address blocks: 102.129.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4927 (0x133f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Dec 27 11:15:47 2024 GMT
Not After : Dec 27 11:15:47 2026 GMT
Subject: CN=676e8c67-9177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:8c:62:08:47:d8:3b:60:2d:02:d4:2a:59:
a8:c3:1e:b0:44:35:fa:c9:cd:34:a9:a0:3b:6e:1c:
c3:7f:bf:a7:72:73:7a:3f:4b:81:ac:1d:66:40:ac:
d1:3e:21:5b:f0:c5:2b:d2:f8:31:20:82:6f:21:b8:
48:c4:a8:b1:3f:5a:d6:2e:8a:80:45:ec:d1:dd:af:
8f:48:99:66:67:7a:57:e3:63:b7:ef:6b:ff:50:60:
e4:94:b3:46:97:33:96:1e:09:36:52:04:65:d8:e6:
4d:c4:d4:58:f7:80:c8:cb:14:6c:7e:f9:18:c1:2d:
b4:ad:97:07:49:1a:1c:d1:52:f3:f8:7a:3f:fc:b7:
ba:13:32:1f:23:8f:66:f2:99:7b:9a:5a:ee:59:9e:
71:cf:77:31:23:e9:f5:93:ae:4a:b6:6a:91:9d:f1:
61:c2:6b:d8:b7:da:d5:d1:05:c5:73:b0:7b:6c:95:
92:3d:a5:86:5f:7b:17:22:5a:db:84:a0:8a:e0:12:
dd:cf:67:16:5f:80:d5:b8:1b:7f:30:e8:8b:ea:15:
96:54:25:5d:1c:42:c6:68:9f:77:0b:4f:18:70:48:
7c:4b:01:d4:77:02:be:6d:9b:b6:cc:7a:40:9a:dc:
e0:91:8b:ba:4c:c4:96:0e:2d:e3:c1:2a:77:3f:36:
9a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:25:93:DB:7B:3B:F0:02:62:9D:6F:7E:60:14:C1:56:E5:E1:81:68
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EE388398C44311EFA2EA0FAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.148.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:69:af:47:d9:a6:61:7d:dd:e2:08:bb:f2:8d:d7:98:af:d2:
6f:6b:95:10:94:1f:0b:dc:86:6f:05:9b:21:78:9b:8c:9c:13:
0e:62:3d:a3:50:53:96:e9:4d:b4:cc:17:ed:2b:d3:2b:fb:87:
70:c6:a0:7c:0c:29:d7:25:cc:65:f1:cb:49:8f:66:e8:55:c9:
91:f7:e7:d5:82:e7:6f:03:5b:93:f9:ca:6d:4b:be:bb:3a:31:
77:c3:13:c6:69:37:86:96:2c:af:19:86:f0:3e:23:8c:dc:9b:
5b:ca:a9:2f:24:91:d0:50:c6:ac:8b:73:d2:c4:58:51:91:7c:
c2:ff:2b:60:23:68:df:53:1a:64:a0:46:81:f0:4d:62:7c:03:
95:62:0d:8d:b6:82:94:59:36:9e:6c:85:b2:6c:e8:bf:8a:41:
8c:ea:77:bb:47:f4:d2:ae:ba:13:11:23:c3:22:2a:bc:cd:09:
5d:da:75:4a:49:05:33:d0:70:99:5a:63:1c:9a:05:2a:37:c8:
d9:ab:38:1e:fb:92:e6:07:5e:55:6b:ee:b0:5d:ab:52:94:09:
8f:aa:04:e0:d3:7b:5f:48:78:1b:39:03:15:52:1c:3c:7b:47:
34:b6:89:18:49:fa:5d:ca:bd:03:0f:71:75:16:f6:62:f2:8c:
1d:d9:f9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:49:56 2025 by rpki-client