Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/C0A39C84ABF611EF811BC96C762E951A.roa
File: C0A39C84ABF611EF811BC96C762E951A.roa (raw, json)
Hash identifier: jNvssZb4MW5AzsDrnJ2ltfmd0tnSlweuzx6hP5AWVJw=
Subject key identifier: 26:43:6F:D1:26:BE:D2:88:82:BF:30:53:FF:53:E5:1E:2E:E1:37:02
Certificate issuer: /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial: 025F
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/C0A39C84ABF611EF811BC96C762E951A.roa
Signing time: Tue 26 Nov 2024 13:02:56 +0000
ROA not before: Tue 26 Nov 2024 13:02:52 +0000
ROA not after: Tue 01 Jan 2030 13:02:52 +0000
asID: 37684
IP address blocks: 102.207.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CAF
Validity
Not Before: Nov 26 13:02:52 2024 GMT
Not After : Jan 1 13:02:52 2030 GMT
Subject: CN=6745c6ff-5d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:7d:df:99:7e:92:2f:13:24:d6:8e:17:7f:
a0:91:e4:fa:f5:6c:be:fa:95:d3:5d:1f:43:7f:29:
cf:05:20:c9:a1:6a:76:4b:ee:f3:a1:e7:75:af:8e:
e4:55:59:dc:b3:bd:7a:0f:de:5d:9f:ab:28:9e:20:
43:a5:9e:b7:cc:8b:09:54:b8:d3:7a:48:80:3f:43:
c5:c6:57:89:06:0a:1f:1e:43:1d:f6:f0:22:52:48:
3d:d6:0b:0d:6d:1d:e7:66:06:be:78:7d:3d:96:96:
1c:70:89:b1:71:07:07:27:53:c2:f8:98:bb:81:cc:
b0:35:32:d1:c1:cf:8b:a2:02:df:54:ba:33:75:29:
fd:d1:b6:23:9d:29:2b:76:1b:f5:27:33:91:7a:a4:
6f:13:25:0b:18:a9:36:7c:ab:bd:c4:fe:1a:be:3d:
52:49:fc:9c:89:a0:41:d2:1b:0a:57:7a:be:9d:ee:
3c:7f:9f:73:7e:03:7a:e2:d7:95:a6:c4:42:ab:c6:
13:91:14:82:a9:e6:e3:21:47:d6:20:e2:4a:1e:6d:
cc:23:e1:18:c4:10:2c:d2:68:2d:a4:af:dd:28:92:
58:cd:a9:00:9e:8a:c7:6f:47:1c:48:b1:42:6f:e7:
64:c4:bb:01:67:60:62:6b:73:60:17:d0:4c:73:40:
dd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:43:6F:D1:26:BE:D2:88:82:BF:30:53:FF:53:E5:1E:2E:E1:37:02
X509v3 Authority Key Identifier:
keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/C0A39C84ABF611EF811BC96C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.150.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:48:b2:26:d4:28:9e:84:5d:5b:f7:bf:75:16:a2:17:8f:6c:
92:ba:c4:8d:31:5e:f6:fd:45:24:29:49:2d:b4:d9:12:b8:b2:
8f:6b:af:00:09:74:f6:07:50:e6:1b:94:26:0e:4b:7e:35:ce:
67:90:3c:f2:96:ab:35:b9:f0:36:38:f4:79:81:57:f9:91:4a:
14:7c:ed:a8:9f:5c:f4:0e:4f:ab:f8:20:53:a3:6e:20:4c:a5:
2c:cd:d5:27:2c:1d:f3:5c:fd:65:ce:a2:0d:bd:78:18:72:93:
a4:92:21:50:d5:14:6f:3d:b6:03:71:bb:83:68:70:6a:f2:6e:
bc:3f:12:39:60:00:8a:e7:6f:16:39:01:c9:e1:5f:99:68:5f:
74:29:98:15:c2:88:c3:8a:d2:fd:16:67:f8:85:6a:4c:38:41:
d0:2e:07:38:fb:d4:31:5b:86:e5:7a:4d:5f:a9:ed:1e:82:d2:
cf:54:f2:6e:e1:03:5f:3a:c0:d1:b7:bc:90:c4:c5:af:79:3e:
64:94:e0:6c:8a:0a:88:95:11:c6:86:34:6d:85:a8:c0:4b:25:
bb:6f:b3:34:2c:be:ae:b5:0b:6b:40:a9:96:db:33:40:f5:d1:
c8:de:d5:06:38:ae:79:8c:ca:fb:9b:19:6c:91:13:08:54:b1:
f4:9c:e7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:03:51 2025 by rpki-client