Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/25446056ABF711EFA5BE276F762E951A.roa
File: 25446056ABF711EFA5BE276F762E951A.roa (raw, json)
Hash identifier: iljiyK5RbJraa2JUb3gm2wrIQ/7n/PcStGqRRGQslUY=
Subject key identifier: 51:03:36:C6:68:8A:AF:73:2B:1C:32:96:38:B7:F2:94:FE:79:C1:43
Certificate issuer: /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial: 0261
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/25446056ABF711EFA5BE276F762E951A.roa
Signing time: Tue 26 Nov 2024 13:05:44 +0000
ROA not before: Tue 26 Nov 2024 13:05:41 +0000
ROA not after: Tue 01 Jan 2030 13:05:41 +0000
asID: 37684
IP address blocks: 102.207.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CAF
Validity
Not Before: Nov 26 13:05:41 2024 GMT
Not After : Jan 1 13:05:41 2030 GMT
Subject: CN=6745c7a8-1561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:42:7e:ef:14:f2:1f:f0:a2:fd:4b:41:6f:
13:49:4a:da:9f:9f:1e:b7:aa:34:71:e1:71:13:c8:
43:59:1f:96:7f:c7:33:52:f5:fc:ab:be:f7:42:c9:
4b:1d:7f:f3:80:63:2c:2a:42:2f:49:c9:46:06:a7:
1a:68:f4:18:c2:3a:bd:d7:86:f5:81:b7:7b:d6:26:
a2:ac:38:e7:72:d3:3d:b0:2d:9c:e4:57:42:6b:92:
aa:71:30:2d:ef:5e:80:59:a1:10:21:8a:06:cc:5d:
ee:42:4e:2e:e3:e5:4d:51:9f:b4:61:6f:35:78:30:
ab:43:28:fb:cd:40:0e:8a:f5:a9:31:5d:c0:95:ae:
f0:6b:dd:27:1f:ad:0f:4e:1e:a5:5b:70:b2:cc:91:
42:af:cf:df:73:08:dc:bc:3f:02:2d:57:8e:a6:bd:
9f:ad:99:89:d3:82:fb:d6:f3:ae:d1:d6:a5:82:c9:
d8:27:5e:04:72:f7:c7:0d:b2:35:b9:a4:1a:d5:fc:
26:06:47:49:ee:36:87:ee:8b:80:5b:cd:d1:a6:f3:
28:f8:1a:b3:31:4a:b9:46:fe:46:5e:7b:3e:80:54:
fe:63:ee:89:1e:7b:78:46:eb:89:7e:f0:c8:f8:0a:
18:c3:8a:47:ab:f3:24:e2:a2:16:65:70:6b:dc:6f:
4a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:03:36:C6:68:8A:AF:73:2B:1C:32:96:38:B7:F2:94:FE:79:C1:43
X509v3 Authority Key Identifier:
keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/25446056ABF711EFA5BE276F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.151.0/24
Signature Algorithm: sha256WithRSAEncryption
36:09:ae:8f:76:e7:69:ee:5f:29:ea:00:8f:48:60:a9:d7:5b:
49:86:bb:27:c9:45:b3:24:36:ec:01:a8:c6:6d:fc:7d:7d:b7:
47:f7:e9:8e:4c:7c:73:bb:91:d0:16:5d:89:65:92:90:e1:6e:
9b:1e:e1:09:85:54:17:22:1b:e1:c1:b4:14:5b:51:31:27:3d:
78:f9:de:1e:bd:fd:4e:16:ea:76:7c:4e:52:09:fb:9f:4c:2a:
d2:fb:83:ea:1a:29:1e:af:4d:8f:cd:09:ab:08:08:35:34:72:
d7:b0:b6:9f:f0:d3:a2:e2:19:b0:21:a2:4f:33:fb:28:f9:7a:
df:67:f5:a8:b0:e3:a3:71:7e:f9:8c:f7:21:74:dc:c1:a3:95:
81:65:d1:7d:03:8e:dd:47:35:25:b4:21:0d:07:2e:64:56:29:
b8:8b:c6:2c:0d:23:6f:2b:44:01:81:58:37:56:f6:1d:e2:4c:
77:f7:17:1b:d3:4a:b9:7c:f1:ca:81:45:b9:a1:1e:d8:5c:3f:
ad:56:9c:f1:da:26:b5:11:98:4d:b9:6b:54:04:0b:20:f8:91:
ba:9f:ec:c3:8b:a6:bd:ff:42:eb:20:d6:36:42:87:4a:48:3f:
01:cf:c0:60:b5:26:13:b3:fb:d0:ca:fc:3f:a8:44:88:7a:ab:
1d:a1:c0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:54 2025 by rpki-client