Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0C703E54031011F0A4C3E4A3762E951A.roa
File: 0C703E54031011F0A4C3E4A3762E951A.roa (raw, json)
Hash identifier: VNgQogAQ3l14ijpkTCqVJ9M0UVoxYdyg7Q4w0YL1/UA=
Subject key identifier: 7D:38:0D:5C:CC:00:E0:85:89:10:74:79:FB:05:59:D2:2E:B2:8C:42
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0724
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0C703E54031011F0A4C3E4A3762E951A.roa
Signing time: Mon 17 Mar 2025 09:13:11 +0000
ROA not before: Mon 17 Mar 2025 09:13:07 +0000
ROA not after: Tue 17 Mar 2026 09:13:07 +0000
asID: 9009
IP address blocks: 102.135.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1828 (0x724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 17 09:13:07 2025 GMT
Not After : Mar 17 09:13:07 2026 GMT
Subject: CN=67d7e7a7-1bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:bd:be:43:9c:c7:17:f4:9b:fc:66:1c:99:
b4:2b:a1:24:1d:99:af:e3:c9:d9:a5:f5:ec:74:62:
52:69:c1:5e:bb:a0:15:d6:be:67:dd:ae:67:bb:7f:
f0:48:90:c7:b2:37:e7:b7:58:97:93:8a:dc:a6:21:
91:c2:25:1c:56:85:04:ca:1b:8a:1e:d9:d6:8c:a4:
1c:e6:de:f6:58:9d:4c:54:43:15:78:77:05:35:8b:
6c:e1:c5:a5:8b:77:d5:0f:fd:7b:b5:ee:55:bf:d4:
7c:95:ce:f6:1a:c6:26:33:ec:1c:81:b4:ba:bf:43:
24:23:4e:11:ea:f2:ad:b4:03:bc:7d:55:23:3c:09:
17:10:8f:5d:70:9e:b3:92:34:32:f9:15:cc:14:27:
06:24:74:b7:f0:aa:41:05:aa:94:a1:1e:3d:c4:e7:
18:04:30:80:00:87:24:80:ff:80:48:93:df:00:a1:
db:5c:c4:c2:9f:af:19:31:15:e4:bf:f1:fe:02:7f:
03:99:95:e3:12:2b:3b:ec:07:c3:c1:07:fd:13:95:
ee:88:df:0a:73:d6:3a:95:bd:13:b3:d1:40:d2:8a:
34:28:09:13:df:4e:80:b7:f8:55:b6:bc:e6:9e:ef:
a2:36:b1:26:3a:0e:c0:6c:a2:ee:d0:ed:5c:3b:2d:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:38:0D:5C:CC:00:E0:85:89:10:74:79:FB:05:59:D2:2E:B2:8C:42
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0C703E54031011F0A4C3E4A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.103.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1f:80:5e:d2:ea:09:57:4b:17:25:6c:f6:df:e3:a4:e1:36:
ad:81:8b:ab:ab:79:8d:62:0c:8f:df:ea:e7:6c:88:6d:2f:9e:
a1:ed:de:31:49:a7:35:33:22:9b:f6:07:62:a5:34:62:52:dd:
05:67:c1:8d:58:c7:96:05:a9:33:dc:95:e2:ee:db:71:19:21:
80:4f:13:3f:e3:74:65:24:8f:e6:82:0b:35:6e:70:09:2a:87:
6e:07:27:f9:1f:28:7e:a9:b8:ad:a0:d7:25:04:bb:b0:fe:aa:
d6:5e:4f:65:c2:ee:3a:40:e4:3b:9a:90:ff:ca:05:46:8a:7b:
6a:6c:34:5a:68:36:d5:5e:54:bd:e6:d8:92:b4:c5:4e:f8:1d:
83:2e:19:01:19:1f:54:3d:de:eb:dd:93:f6:2b:07:48:8b:ba:
86:b5:2c:6d:1a:93:dd:8f:5c:5a:75:78:23:36:a9:bb:2a:d5:
61:dd:8b:6a:53:39:45:c1:9a:9b:74:2e:3d:22:b7:5a:12:6e:
fc:0c:f1:9b:b7:02:e1:c3:98:24:ed:b7:df:51:05:58:18:44:
97:02:a2:b1:7e:22:2c:38:f5:cd:64:32:41:2a:48:e2:7b:b7:
94:62:d0:44:3e:0a:15:68:10:9e:0f:d0:44:9a:69:6e:f4:16:
9d:f7:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:47 2025 by rpki-client