Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0EB36F80D33911EF81FA41AF762E951A.roa
File: 0EB36F80D33911EF81FA41AF762E951A.roa (raw, json)
Hash identifier: HrNQtYwW0F4Sv7RuadWKDELS4iXgx68082tNbRzOQNM=
Subject key identifier: 99:60:EF:61:7D:17:B1:D0:22:95:29:CE:0D:37:0A:1E:51:AD:FE:00
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0560
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0EB36F80D33911EF81FA41AF762E951A.roa
Signing time: Wed 15 Jan 2025 12:05:48 +0000
ROA not before: Wed 15 Jan 2025 12:05:45 +0000
ROA not after: Thu 15 Jan 2026 12:05:45 +0000
asID: 53356
IP address blocks: 102.135.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1376 (0x560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 12:05:45 2025 GMT
Not After : Jan 15 12:05:45 2026 GMT
Subject: CN=6787a49c-09f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:b8:40:23:c6:d0:cf:ee:be:f5:ee:44:20:
36:88:37:f6:8c:3c:4e:09:22:7d:c9:a9:7f:d6:9c:
22:89:27:e6:54:47:23:cb:37:4b:8c:0c:61:d3:1c:
5a:ec:e6:60:cb:41:d9:28:9b:8c:a5:03:c3:79:e6:
9b:b3:be:25:0a:53:02:3b:4b:29:dc:43:d6:dd:8d:
7b:ae:df:14:e8:9d:a1:60:a7:2c:da:99:5d:6e:e8:
8e:16:78:ed:9a:5d:e7:0c:ef:9a:9a:68:f3:f3:77:
4d:27:33:e6:35:78:6f:ef:8d:20:b5:3b:50:40:12:
33:cf:da:37:3c:bd:29:8d:52:c4:4a:30:d8:f9:cd:
c8:41:b0:ed:23:07:4a:5a:32:77:e4:0b:c8:fd:98:
95:21:b4:54:0a:d4:70:c5:f3:8d:77:aa:47:db:cb:
b5:41:21:64:4b:28:da:57:47:f4:6c:6d:73:b1:d9:
a9:fa:8e:a0:a5:71:3c:e3:6d:14:bd:9b:9a:1c:96:
c8:08:ba:69:b1:b9:a3:01:f9:79:5c:6f:66:1a:66:
e3:f0:15:7f:16:a9:7e:d3:63:2c:52:dc:3b:49:9e:
03:5d:1e:ad:22:82:0a:ba:30:04:91:1b:7a:24:f2:
90:80:4c:4e:b6:00:0d:19:72:92:32:20:b9:f2:c9:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:60:EF:61:7D:17:B1:D0:22:95:29:CE:0D:37:0A:1E:51:AD:FE:00
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0EB36F80D33911EF81FA41AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.54.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d5:ab:42:13:e2:9e:6a:bb:6b:ad:59:d7:7e:bb:16:8f:64:
71:e7:51:0a:7b:fe:48:c7:c3:dd:1b:0e:b3:88:6b:77:85:02:
b0:ca:58:e2:37:98:be:31:9c:a7:c4:70:d3:46:b6:f1:1a:0b:
67:78:3c:71:81:ac:86:ba:79:fd:da:74:6a:5a:f4:db:eb:f4:
89:26:62:c6:78:66:e8:53:29:d9:2c:ad:48:d6:b4:48:6c:8b:
63:1c:cf:66:f6:9f:18:59:32:d8:d7:79:39:99:bf:f6:e9:0e:
2d:6a:b4:8e:f8:85:a2:a2:5f:65:b6:c4:de:b1:2f:c3:7d:ac:
94:c6:95:89:fd:93:d5:ac:72:70:11:f8:ae:e6:d6:6b:8e:b2:
47:68:4a:84:1a:9e:17:ec:2f:85:40:2e:43:db:e1:77:7e:e4:
5b:72:a0:42:56:8a:6d:6b:16:88:6f:19:64:a1:54:40:ec:a6:
48:45:b0:0d:3b:ca:3e:22:18:a4:9a:2d:6f:e8:ce:75:09:f4:
6c:70:88:1a:03:ef:7c:45:71:15:56:f1:b9:dd:af:bf:41:45:
bb:d5:9e:b1:24:25:8d:b8:46:e4:ca:f6:fd:39:65:08:10:f5:
4f:c8:ce:4f:bf:ab:fa:f4:26:06:d9:5e:53:ce:2b:e7:65:14:
5f:0c:2f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:49:09 2025 by rpki-client