Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FE1882E0E86011EFB5A96D82762E951A.roa
File: FE1882E0E86011EFB5A96D82762E951A.roa (raw, json)
Hash identifier: GgR99XK8xvMN67jTGSzNKjVuV0SolL9QTsokPBEJpNU=
Subject key identifier: F5:EF:B3:0B:BE:7A:C3:E3:92:2B:2C:ED:62:D0:59:94:B1:2C:1C:91
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 13CA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FE1882E0E86011EFB5A96D82762E951A.roa
Signing time: Tue 11 Feb 2025 10:14:35 +0000
ROA not before: Tue 11 Feb 2025 10:14:31 +0000
ROA not after: Sat 13 Feb 2027 10:14:31 +0000
asID: 61317
IP address blocks: 102.129.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5066 (0x13ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Feb 11 10:14:31 2025 GMT
Not After : Feb 13 10:14:31 2027 GMT
Subject: CN=67ab230b-4848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e3:b3:52:2c:4c:5e:c0:05:bf:2b:d6:d4:7c:
7f:fb:89:85:14:cf:ea:5b:47:df:92:da:6b:d4:85:
f5:07:bb:42:cb:36:fd:9c:50:6f:07:09:b7:72:61:
23:55:94:46:37:d9:f5:a5:ad:35:fa:a2:cd:c0:eb:
9d:53:42:7e:b7:04:7f:64:7e:02:f2:6b:42:97:8f:
9b:a4:6f:5c:2d:5b:ad:f8:b4:07:c8:87:a7:fb:23:
89:50:54:2d:1e:45:cc:10:83:b8:2e:2e:76:8c:36:
9f:5a:de:55:bb:57:b3:40:0c:f9:03:59:82:c5:c8:
5a:7b:5a:bc:6e:45:b4:a0:80:ff:e8:f2:67:40:8e:
bf:ab:5a:73:98:59:b0:ae:9b:53:76:1e:a5:ce:7e:
8e:ae:69:d2:45:be:6f:bc:ed:07:05:d6:61:07:0d:
67:18:cc:97:f6:ed:0e:d1:56:66:cf:13:34:e3:ee:
b5:b9:1c:5e:ba:39:fe:70:1c:6f:d0:5a:06:30:60:
64:4d:7d:d8:e5:82:00:9c:2a:c8:fd:5b:7a:a6:d9:
26:27:29:6d:4f:3b:d4:c4:22:ab:e8:b5:6b:9e:53:
4a:be:4c:c1:0b:f0:c2:3f:b6:ba:4a:0c:80:ec:c0:
41:34:15:a2:8f:7f:d6:e0:29:71:b1:cf:35:69:e2:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EF:B3:0B:BE:7A:C3:E3:92:2B:2C:ED:62:D0:59:94:B1:2C:1C:91
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FE1882E0E86011EFB5A96D82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.254.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a3:a3:cf:05:72:6c:01:fa:c2:ba:6a:4c:8e:63:be:75:43:
43:a9:7d:28:3f:66:dd:58:18:bf:66:01:18:b4:68:29:54:24:
18:61:64:9c:37:0c:da:d9:ee:f1:a4:e9:20:fe:2d:45:d7:8a:
30:9a:aa:1a:dd:2f:61:c1:ae:af:53:cf:94:4e:65:3f:0e:84:
79:b9:7f:c1:e1:3a:4a:7f:1b:93:1d:1b:13:3f:d2:be:f7:51:
04:9c:b4:eb:43:3e:12:d8:c6:2a:78:83:21:e4:49:56:20:5f:
be:d3:cb:67:4d:7b:bc:77:87:7f:f5:bb:3a:1f:f0:75:93:05:
c2:63:11:0f:c9:af:63:f5:4c:55:09:1c:ff:c2:3b:0f:ff:c4:
c6:eb:53:13:f9:95:70:3a:5c:76:cb:8f:3d:71:07:fe:fe:01:
d9:70:ea:4c:b2:e9:b6:0c:65:29:c2:c5:67:34:45:c5:a1:30:
5f:5a:e4:36:d2:71:dd:50:7d:02:f9:d1:4a:0b:b2:65:48:37:
de:5f:24:da:6e:f2:96:d1:ca:10:1c:a9:3a:29:52:84:ae:45:
87:3a:9a:5b:f3:58:77:5d:63:1b:e0:1e:de:75:ff:3e:bc:9d:
67:64:72:c4:19:0e:da:76:e1:a7:4e:44:64:1c:60:27:3e:5e:
1b:64:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:29:40 2025 by rpki-client