Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0CEC14AE071E11F0B7C6BEB3762E951A.roa
File: 0CEC14AE071E11F0B7C6BEB3762E951A.roa (raw, json)
Hash identifier: D5EkBkbbMvQAI6bFlpMRhXNt/WSOVhAusalBS6M69M8=
Subject key identifier: D5:EA:F8:2C:6A:8B:7F:D4:DB:78:86:A4:D2:62:25:46:01:A3:45:07
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0799
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0CEC14AE071E11F0B7C6BEB3762E951A.roa
Signing time: Sat 22 Mar 2025 13:03:30 +0000
ROA not before: Sat 22 Mar 2025 13:03:26 +0000
ROA not after: Sun 22 Mar 2026 13:03:26 +0000
asID: 208485
IP address blocks: 102.135.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1945 (0x799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 22 13:03:26 2025 GMT
Not After : Mar 22 13:03:26 2026 GMT
Subject: CN=67deb521-5b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:96:fa:00:ab:d5:e3:e5:63:6f:c6:ca:f7:
0b:d6:ca:fa:fd:5f:02:c2:b7:04:ee:c5:77:12:78:
09:15:59:7a:a1:36:3a:b8:2f:94:d6:55:5c:75:5c:
df:6c:d3:e2:a1:e9:61:d4:69:f4:f0:bb:a7:27:f9:
30:5b:24:4c:24:d6:65:3f:ee:ec:ef:c3:10:57:44:
05:c6:5c:f9:b9:1f:5f:6f:a9:6f:4e:03:80:dc:2d:
fc:0a:84:f5:7b:c4:fc:fb:33:5a:81:84:c8:dd:28:
f3:cf:51:a8:1d:00:d8:e5:26:a4:8e:e2:03:9a:fc:
51:b8:98:50:19:db:50:6e:d6:bf:0e:3b:2f:38:00:
88:d3:fd:2b:16:86:12:5a:53:9e:07:94:e6:8f:e6:
05:2b:94:1b:13:20:52:d2:4c:d1:33:05:a8:4e:a9:
aa:c8:af:18:d7:ec:0f:67:f9:a1:c7:93:02:d0:a0:
88:23:e5:e5:24:33:0d:16:c9:a9:b7:9d:93:44:91:
e8:72:53:9d:99:46:60:22:0e:94:f6:4c:09:29:93:
4e:8b:73:dc:3d:74:b4:1b:16:e4:fd:d4:0f:79:c4:
fd:da:5d:d8:ad:08:63:47:12:48:b5:e4:37:74:2a:
2c:74:85:0c:a2:3b:02:bb:7e:16:df:7a:d9:ab:de:
79:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EA:F8:2C:6A:8B:7F:D4:DB:78:86:A4:D2:62:25:46:01:A3:45:07
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0CEC14AE071E11F0B7C6BEB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:69:25:12:ca:17:cd:e3:df:fd:6a:c0:cb:87:25:ed:e7:e8:
62:c1:71:a2:52:29:f4:56:ba:f7:d4:05:5c:a0:fd:48:38:8c:
fd:e1:82:02:60:07:ba:ff:68:64:a6:a3:cc:52:51:44:8f:00:
a2:fe:41:b5:5d:71:da:16:9c:98:d0:f4:d7:92:7e:aa:e4:40:
cc:90:24:79:29:6c:56:dc:c4:7a:7d:4d:e4:0f:13:3d:24:78:
73:3c:73:ff:14:1b:ee:1d:26:fb:76:d5:d6:03:36:2f:4f:02:
c1:98:8b:c8:63:c0:9e:34:b3:c4:60:0e:ae:b4:39:55:d6:01:
10:38:f9:d6:f7:87:38:15:b2:3e:2d:eb:29:25:2b:4c:6a:00:
be:0f:e5:52:d7:04:36:1a:d6:6b:3f:96:a4:ea:43:66:27:d5:
ad:f9:ae:dc:ad:0d:30:0f:3d:2c:e7:a6:8a:e7:17:57:d6:cc:
13:3c:43:a3:d1:55:d4:98:ea:bf:ba:06:59:7a:f7:ae:9a:7f:
4d:6e:51:24:23:14:c2:da:8f:1f:92:6a:42:f9:e8:de:87:d0:
2a:72:4d:78:19:d2:18:bf:d7:a9:e4:1e:86:3c:e4:48:5c:7a:
be:52:42:45:3e:b4:44:73:a2:b8:7d:6f:75:36:b1:d7:a2:9e:
c6:32:6d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:11:32 2025 by rpki-client