Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/098B6D52ED2C11EFACC8ECB3762E951A.roa
File: 098B6D52ED2C11EFACC8ECB3762E951A.roa (raw, json)
Hash identifier: uNXmsdpZgLvKLaUtOJ0BIPSNgvK5pZSY8+XGm/W3oZs=
Subject key identifier: 6A:99:36:89:DB:BC:3E:69:AB:A3:76:E9:24:9F:DB:FF:E1:B8:82:76
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 067C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/098B6D52ED2C11EFACC8ECB3762E951A.roa
Signing time: Mon 17 Feb 2025 12:38:07 +0000
ROA not before: Mon 17 Feb 2025 12:38:03 +0000
ROA not after: Tue 17 Feb 2026 12:38:03 +0000
asID: 208485
IP address blocks: 102.135.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1660 (0x67c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 17 12:38:03 2025 GMT
Not After : Feb 17 12:38:03 2026 GMT
Subject: CN=67b32dae-13a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bd:27:f5:34:00:4f:2f:4c:32:2d:dd:87:ac:
c4:5c:ea:e2:6c:3d:b1:36:fc:a5:75:a0:e8:9e:fe:
1f:2a:4b:89:cd:1e:61:c3:9d:5b:72:a5:38:1f:8e:
aa:3a:d4:b5:5c:32:d1:55:20:26:fa:01:91:c1:95:
4b:ba:bc:b7:75:6d:ba:91:76:1f:ea:52:37:fa:49:
69:b9:1c:9e:5d:12:56:78:11:f5:2b:20:3b:02:e2:
b7:3f:42:47:1d:e1:e5:70:3e:5c:3d:97:9a:61:92:
b7:18:ce:cc:64:66:9b:fb:44:99:5f:02:46:b1:dc:
7c:e4:a1:44:c9:7c:eb:38:09:c3:37:d0:78:50:2e:
d3:5a:c2:d7:22:a5:d9:91:98:3d:4b:fe:60:88:ef:
6a:f4:29:be:51:69:3d:d8:aa:a1:96:81:a9:e0:04:
07:bf:e3:2a:d1:be:1c:b1:2d:0f:49:00:44:5b:fa:
35:3b:92:bd:92:71:30:6a:87:c9:bb:a8:2a:d8:65:
03:aa:0e:c0:bd:79:26:85:c0:2c:a6:40:34:b3:ce:
e1:9f:4d:bd:54:bb:41:b2:54:ed:04:2b:fd:03:e4:
de:29:f6:03:a1:46:78:3c:60:99:fd:c0:cf:97:b0:
f0:b0:ab:1f:63:21:0f:87:90:7b:36:02:26:63:50:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:99:36:89:DB:BC:3E:69:AB:A3:76:E9:24:9F:DB:FF:E1:B8:82:76
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/098B6D52ED2C11EFACC8ECB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:5d:ff:67:2c:04:94:6b:3a:05:05:f8:8e:45:d8:55:93:c7:
0c:1c:df:0a:c5:06:a9:c9:b0:07:d2:8e:32:e7:74:17:aa:1e:
13:55:4a:59:4f:da:39:d5:0f:87:26:c4:a0:45:5d:d0:95:25:
8f:92:0c:9f:6b:19:76:27:b0:74:b5:c3:08:bf:85:1f:64:97:
60:61:e7:54:bc:bd:36:3b:28:f1:ac:8f:20:6e:55:61:f5:73:
c9:17:95:5e:8b:08:cf:8b:4e:72:b1:30:51:dd:3f:37:4a:71:
e7:ac:34:e8:99:45:20:24:9c:de:0d:ff:90:bb:57:f1:80:fd:
35:c1:9f:37:52:17:1e:c8:56:39:c3:bb:80:88:83:45:9e:85:
93:6e:45:6a:76:d4:1f:5c:39:ba:d6:e6:83:f7:97:a3:4e:d3:
1f:ca:4a:cd:52:4c:fe:ee:8e:ce:c5:7f:30:c0:7a:53:bf:7f:
db:6b:19:e0:ed:89:6f:8c:39:72:55:43:45:8c:36:0a:dd:a3:
32:09:a1:94:c8:4d:2a:d9:c8:48:4e:55:57:40:bc:c3:4f:b1:
71:57:38:b7:89:09:1d:65:7d:c8:0b:c4:12:c1:fd:51:6a:fd:
5d:56:3c:51:28:5f:22:9c:3a:bf:92:25:fe:e7:26:14:db:d3:
0d:90:b9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:47 2025 by rpki-client