Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/11C9CE4CE78B11EFA3EBE693762E951A.roa
File: 11C9CE4CE78B11EFA3EBE693762E951A.roa (raw, json)
Hash identifier: xk2aSbjrhdCPGqBAu+ioa9W0zK2SbRpcmLCUJxZGXuE=
Subject key identifier: F9:B2:C8:D4:D8:05:D8:C1:68:7C:B5:93:45:91:0D:81:66:F5:AD:B1
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05CC
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/11C9CE4CE78B11EFA3EBE693762E951A.roa
Signing time: Mon 10 Feb 2025 08:43:16 +0000
ROA not before: Mon 10 Feb 2025 08:43:12 +0000
ROA not after: Thu 01 Jan 2026 08:43:12 +0000
asID: 329007
IP address blocks: 102.135.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1484 (0x5cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 10 08:43:12 2025 GMT
Not After : Jan 1 08:43:12 2026 GMT
Subject: CN=67a9bc24-69dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:45:25:db:f9:2c:20:84:ee:8d:6b:04:bc:72:
4b:50:33:70:a9:57:76:4e:35:90:96:af:1a:36:3f:
33:d1:b8:16:5e:e5:55:e0:73:1e:61:5f:c5:ff:8f:
73:c6:8d:87:2d:3c:4b:30:1b:2a:0e:4c:00:da:eb:
2a:fe:b2:49:86:aa:31:6f:36:22:2c:99:c4:ab:42:
ec:d6:0a:a9:c5:b1:a1:be:df:7a:43:2e:45:00:d7:
b6:63:80:ef:2b:c6:47:52:56:0f:fa:15:73:e6:df:
0f:89:72:21:b1:eb:67:f2:bc:50:79:3c:8b:b4:91:
2c:1f:b3:4b:b0:f0:a2:c5:5f:f0:dd:5e:1b:26:90:
49:14:83:80:c5:e1:07:df:2d:fb:c8:74:77:c6:6f:
46:67:e7:77:cf:b2:d8:6e:c4:5c:f2:b6:45:15:c3:
ea:68:eb:50:db:5a:1b:8f:9d:ad:f0:0d:bf:9e:97:
11:0f:e1:7f:8d:13:3d:a0:65:49:24:97:fc:20:3d:
2d:d6:1c:0c:22:f3:3c:3a:04:bd:4e:bc:8e:ae:16:
0c:d7:f0:d0:3d:29:bc:60:1a:45:53:47:ab:89:b3:
e3:17:1b:d7:c4:e4:db:5d:da:b9:f6:1f:43:5e:5f:
97:a2:0a:90:18:3e:e1:5f:33:39:6d:d7:b5:be:ae:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B2:C8:D4:D8:05:D8:C1:68:7C:B5:93:45:91:0D:81:66:F5:AD:B1
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/11C9CE4CE78B11EFA3EBE693762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.68.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:5d:af:dd:c0:fa:62:aa:c2:42:16:1b:fb:2a:f1:64:07:62:
e0:d8:0b:3d:74:0f:75:03:45:3f:0d:3e:e5:a0:49:ba:0a:82:
b5:9c:40:da:ff:83:79:e5:44:ad:94:ef:d3:0d:da:6b:fb:96:
dd:e3:53:19:d8:59:b9:e6:db:03:59:43:a5:c1:47:01:e4:2c:
b8:f9:10:88:ad:5a:ac:53:37:9c:c0:db:51:53:89:c6:9e:0e:
4a:4d:24:32:77:9a:b7:06:aa:bc:1e:4b:aa:6d:ac:7f:df:e1:
96:63:58:a6:ca:33:5b:00:48:c7:da:3c:02:ff:03:f3:a5:55:
46:54:19:ad:94:58:cd:1d:c9:41:0a:f9:94:71:af:a9:66:6f:
08:8f:8b:87:88:e5:cb:a8:2c:59:c2:a3:23:e7:d7:1d:37:2c:
25:de:a3:d4:a3:6d:52:0c:a1:b0:90:de:77:67:61:2c:e3:33:
f2:9b:14:ea:57:2f:9f:ad:49:7e:ed:e9:e4:c4:dd:3e:a5:b0:
57:87:e0:ca:2d:c1:79:fb:57:d9:33:63:05:85:80:ec:9b:c3:
37:3f:a1:e5:47:f4:b7:c7:92:f4:a9:72:ab:76:22:e6:63:29:
6a:71:1b:73:32:ea:f0:5e:66:3b:b4:e8:96:40:ca:76:30:66:
e7:63:7a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:04:54 2025 by rpki-client