Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F25AE180BE0511EFA771339E762E951A.roa
File: F25AE180BE0511EFA771339E762E951A.roa (raw, json)
Hash identifier: rDZul0q58llB4zqwmrEDR0+f7W9IKG469OQAfskzYZA=
Subject key identifier: 7D:A7:22:D9:1E:FB:07:08:9F:F6:E4:85:85:46:06:D2:30:DA:9A:39
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1328
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F25AE180BE0511EFA771339E762E951A.roa
Signing time: Thu 19 Dec 2024 12:37:02 +0000
ROA not before: Thu 19 Dec 2024 12:36:58 +0000
ROA not after: Sat 19 Dec 2026 12:36:58 +0000
asID: 834
IP address blocks: 102.129.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4904 (0x1328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Dec 19 12:36:58 2024 GMT
Not After : Dec 19 12:36:58 2026 GMT
Subject: CN=6764136e-269c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:7c:36:6a:5d:62:f8:4b:3f:46:75:7a:8d:
c5:75:cb:1f:ab:fc:5b:43:98:a5:8a:a4:64:be:35:
60:21:42:9f:ee:89:b9:04:ef:41:c6:66:38:ff:16:
97:2c:4c:e5:6b:20:3c:2c:26:71:dc:f2:f9:3a:1f:
a4:2f:d2:a1:a1:62:e3:06:69:f9:92:c5:76:a0:d0:
6d:6e:d6:88:2c:76:6a:ed:ce:86:90:1e:c2:66:71:
b0:d8:92:a6:37:c0:f8:9d:bf:e7:66:3a:e8:47:a4:
5d:a1:83:b4:a3:49:f5:68:c6:d5:0d:48:86:cc:46:
e0:f7:ca:12:1e:ad:c4:47:e1:3c:fd:d9:23:ed:5e:
51:19:a9:bc:fa:c5:47:3c:5a:45:c1:f2:f4:0d:b9:
78:5e:08:3d:07:83:5b:83:df:e8:3b:75:bf:af:e1:
69:53:e9:92:4b:db:83:f9:3b:3f:f4:b1:3d:85:a1:
b3:f6:77:2e:d8:3c:7b:91:cb:1f:3c:2a:9a:ca:c0:
9e:5e:80:bf:7e:4e:7a:75:73:bc:ef:f0:93:88:c0:
a9:77:d8:b7:9a:02:35:94:c2:71:b5:c7:5b:0c:25:
04:07:9a:44:06:94:6f:d4:07:9a:c4:65:8f:b7:e8:
d6:e0:03:c0:d6:dd:ec:df:1b:a1:c6:b6:62:6e:f0:
f1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A7:22:D9:1E:FB:07:08:9F:F6:E4:85:85:46:06:D2:30:DA:9A:39
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F25AE180BE0511EFA771339E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1e:36:e4:10:da:9f:74:e8:1b:61:9f:55:f2:2b:9d:a1:51:
cb:9d:04:ba:33:75:1c:d5:2d:d3:38:ac:ae:fc:00:fc:f5:d4:
8d:68:95:e2:86:42:7d:c6:e8:a0:a0:a1:fa:e8:3d:f1:54:7c:
6f:63:25:4d:3d:6d:51:24:f4:75:ff:d3:25:ca:2d:03:35:5f:
76:e9:a5:6e:ec:1b:cb:d0:f9:0d:3c:2a:ea:7b:5e:26:60:88:
6b:e2:bc:a3:88:fd:30:06:55:07:b5:3b:23:1a:a4:44:33:23:
98:98:6b:e4:da:28:b6:2c:f8:b8:47:94:90:aa:be:60:ae:c6:
b8:bb:8f:4d:a7:dc:ed:db:f7:44:83:43:53:ff:ec:b8:e0:6f:
d3:9f:6a:2a:e1:d1:87:81:39:92:85:17:93:24:3d:de:4f:0d:
01:03:39:58:12:4f:95:08:26:46:f3:52:cf:49:51:67:de:0d:
bc:08:48:09:9f:43:5a:af:e3:9c:21:1d:27:20:95:3d:49:67:
5b:26:46:58:07:6f:c9:66:94:3e:57:c6:1b:59:ba:41:57:4b:
fb:c9:7c:d4:50:9b:f3:84:19:83:c7:13:a2:d9:4a:fd:84:d2:
9e:13:de:01:c0:63:17:84:a0:08:9d:f2:e9:06:64:1d:a0:35:
d0:38:8b:a4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEygwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDEyMTkxMjM2NThaFw0yNjEyMTkxMjM2NThaMBgxFjAU
BgNVBAMTDTY3NjQxMzZlLTI2OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCVo3w2al1i+Es/RnV6jcV1yx+r/FtDmKWKpGS+NWAhQp/uibkE70HGZjj/
FpcsTOVrIDwsJnHc8vk6H6Qv0qGhYuMGafmSxXag0G1u1ogsdmrtzoaQHsJmcbDY
kqY3wPidv+dmOuhHpF2hg7SjSfVoxtUNSIbMRuD3yhIercRH4Tz92SPtXlEZqbz6
xUc8WkXB8vQNuXheCD0Hg1uD3+g7db+v4WlT6ZJL24P5Oz/0sT2FobP2dy7YPHuR
yx88KprKwJ5egL9+Tnp1c7zv8JOIwKl32LeaAjWUwnG1x1sMJQQHmkQGlG/UB5rE
ZY+36NbgA8DW3ezfG6HGtmJu8PF3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfaci
2R77Bwif9uSFhUYG0jDamjkwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0YyNUFFMTgwQkUwNTExRUZBNzcxMzM5RTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgaYwDQYJKoZIhvcNAQEL
BQADggEBAFseNuQQ2p906Bthn1XyK52hUcudBLozdRzVLdM4rK78APz11I1oleKG
Qn3G6KCgofroPfFUfG9jJU09bVEk9HX/0yXKLQM1X3bppW7sG8vQ+Q08Kup7XiZg
iGvivKOI/TAGVQe1OyMapEQzI5iYa+TaKLYs+LhHlJCqvmCuxri7j02n3O3b90SD
Q1P/7Ljgb9Ofairh0YeBOZKFF5MkPd5PDQEDOVgST5UIJkbzUs9JUWfeDbwISAmf
Q1qv45whHScglT1JZ1smRlgHb8lmlD5XxhtZukFXS/vJfNRQm/OEGYPHE6LZSv2E
0p4T3gHAYxeEoAid8ukGZB2gNdA4i6Q=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:46 2025 by rpki-client