Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0FAF3B80089F11F0B51A6964762E951A.roa
File: 0FAF3B80089F11F0B51A6964762E951A.roa (raw, json)
Hash identifier: /Z4Z25eBdNTTrrTRTU3eu9cWbXV5T7woOLBHBbBB56c=
Subject key identifier: 42:C7:54:75:A4:55:B0:5A:59:A6:9A:8E:57:3D:CA:B8:05:15:35:17
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07AD
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0FAF3B80089F11F0B51A6964762E951A.roa
Signing time: Mon 24 Mar 2025 10:59:30 +0000
ROA not before: Mon 24 Mar 2025 10:59:27 +0000
ROA not after: Tue 24 Mar 2026 10:59:27 +0000
asID: 2914
IP address blocks: 102.135.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965 (0x7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 10:59:27 2025 GMT
Not After : Mar 24 10:59:27 2026 GMT
Subject: CN=67e13b12-3d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:11:e6:92:f0:25:9c:4e:a7:51:fd:6e:e1:
12:40:95:bd:18:2a:86:10:fb:eb:83:5d:83:44:70:
d6:84:b1:2c:b7:ad:11:8a:60:fa:b4:fe:23:68:23:
5f:28:90:ff:b7:6b:36:fa:20:a7:cd:a6:57:08:c8:
fd:f8:2a:0f:91:e8:bc:f5:2e:89:86:34:d6:90:56:
19:6d:54:50:18:3f:e3:06:00:6d:97:3a:79:ca:5d:
27:38:74:2b:6b:ff:cb:ca:36:96:e5:a1:04:2a:8c:
2c:1f:01:60:0e:a3:73:cc:30:71:45:49:5e:50:05:
5c:eb:5d:24:e4:d1:5d:73:f2:41:df:73:e5:2f:53:
00:e9:4c:9f:2d:f9:57:70:d3:82:16:cd:c9:1b:75:
00:eb:11:fe:2a:c4:55:87:72:19:5d:6e:dc:11:ed:
9b:ca:d0:17:e2:9d:ab:c3:cc:f9:e0:33:aa:d4:b8:
e0:12:fd:7b:e0:e3:21:a8:d6:ff:3e:1a:1d:7a:a6:
b3:e7:f0:b7:20:fb:af:43:5b:28:2f:2c:99:aa:11:
dc:8e:92:d2:dc:71:64:5e:d2:f9:cb:8a:76:b2:b8:
19:e7:4e:44:c8:7c:ac:32:3c:8d:57:77:33:f4:73:
4b:cc:75:92:9b:bf:63:7d:2a:9a:3a:d0:92:a4:ca:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C7:54:75:A4:55:B0:5A:59:A6:9A:8E:57:3D:CA:B8:05:15:35:17
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0FAF3B80089F11F0B51A6964762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.105.0/24
Signature Algorithm: sha256WithRSAEncryption
77:09:f8:a1:49:04:a4:a5:9b:d3:fe:77:73:ac:0e:36:6f:fa:
48:72:9c:f0:94:ef:07:bc:1d:41:e8:e7:46:79:f2:33:55:e8:
dd:08:c7:50:a7:cc:c0:f8:75:3c:00:43:b9:8f:d0:19:01:04:
5e:e4:b9:f1:64:2c:93:f5:91:f5:98:55:b2:72:4b:45:2b:61:
38:1d:7d:1e:3d:9c:0c:e8:07:b4:51:65:5c:03:2d:93:eb:12:
23:32:2c:63:2a:91:d7:e6:31:52:f5:02:39:ef:13:5b:3c:e7:
34:bd:a0:46:bf:fd:30:0c:0f:91:d3:28:a7:2c:a6:0e:af:7b:
40:ca:dc:bf:55:c3:b4:71:78:6c:5a:50:ac:e0:71:82:68:6b:
46:96:9d:50:98:c3:14:87:9d:5f:7f:cf:79:49:9b:45:b3:03:
e7:5f:4d:ea:be:fe:76:07:de:ff:38:e8:d6:6e:59:d3:8d:ba:
74:90:79:6c:f2:c1:36:d3:75:8d:42:45:8c:93:53:22:48:0a:
f7:cd:b9:34:d0:de:00:d5:57:c1:84:c0:e4:81:e2:2a:c7:7e:
e4:16:2a:b5:de:5f:f7:52:4f:77:92:97:b7:78:6d:a4:65:d9:
5c:b8:9a:b7:03:24:c8:bf:df:f5:b5:40:b9:71:af:3d:10:39:
a4:34:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:59 2025 by rpki-client