Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/131A6D5CD33F11EF90B18255762E951A.roa
File: 131A6D5CD33F11EF90B18255762E951A.roa (raw, json)
Hash identifier: y35BSw692A134yF0pGFBHr9FE1uu0SfSrKEVqLCZbH8=
Subject key identifier: 4E:3E:FB:25:E6:B1:EE:0F:6C:8B:38:2D:59:A5:04:46:B9:49:26:3B
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0572
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/131A6D5CD33F11EF90B18255762E951A.roa
Signing time: Wed 15 Jan 2025 12:48:53 +0000
ROA not before: Wed 15 Jan 2025 12:48:49 +0000
ROA not after: Thu 15 Jan 2026 12:48:49 +0000
asID: 329007
IP address blocks: 102.135.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1394 (0x572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 12:48:49 2025 GMT
Not After : Jan 15 12:48:49 2026 GMT
Subject: CN=6787aeb5-452b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:21:73:5c:51:38:08:10:10:28:e2:f5:a7:87:
3b:b2:76:7b:4e:d6:03:fd:05:e8:bf:c0:c0:db:f5:
e7:ea:6e:20:81:66:bf:b8:9e:ac:72:43:f1:a9:ec:
7e:bb:bc:45:36:ba:a7:b8:93:52:b7:bd:5c:85:0e:
c8:f5:2a:ac:ae:a6:26:3a:c2:66:65:6b:67:42:05:
35:c1:ca:e8:44:16:3f:db:09:55:e1:2a:e9:26:b5:
3b:7e:48:9c:ab:12:03:41:31:4f:8b:dd:20:58:c2:
f6:9a:93:e7:a1:53:a5:37:5d:0b:8b:18:5d:4d:89:
dd:03:34:29:cc:e5:51:16:9c:c9:ed:e3:02:d5:2c:
5b:d2:9e:f1:43:43:ae:4f:25:b0:32:8a:8a:84:54:
eb:27:f1:e6:05:62:f9:da:9c:46:b2:18:05:cd:4d:
b9:6b:ed:72:3d:09:62:62:83:bf:7c:4e:13:21:b1:
d5:2f:69:35:4b:ef:0d:7c:78:70:2c:b8:27:cb:c8:
23:34:0d:11:ac:c7:d9:33:5d:cf:02:75:c1:74:78:
81:b3:3c:f2:06:cf:01:ba:bf:d2:e9:95:a6:16:5f:
6d:8b:97:69:5f:7b:4d:98:af:83:6f:ed:28:ce:f0:
b1:7a:41:c9:42:e7:d0:19:66:34:1d:8e:da:b8:67:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3E:FB:25:E6:B1:EE:0F:6C:8B:38:2D:59:A5:04:46:B9:49:26:3B
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/131A6D5CD33F11EF90B18255762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.2.0/24
Signature Algorithm: sha256WithRSAEncryption
41:dd:06:de:6d:3b:42:00:ee:be:0f:0a:02:78:d4:8b:2d:f7:
26:e0:12:e0:29:f2:ee:05:60:8d:ae:33:bc:fc:48:f8:2b:fb:
33:67:3e:1a:0f:b4:c4:5b:e8:fd:ea:1a:85:bd:7a:3d:ae:77:
3f:45:87:57:59:02:5d:21:54:de:4e:28:2d:a8:0e:0f:b5:b0:
ba:7d:92:30:3c:99:2c:ab:2a:f7:f6:1d:b4:67:70:4a:71:73:
f6:05:12:cc:9e:9a:f0:73:dd:6f:a5:5e:b1:52:c4:3f:fa:16:
9b:55:ba:78:97:30:46:d9:6e:4f:d7:48:f3:e7:07:e1:79:24:
84:5b:24:41:ed:97:40:56:29:08:3b:83:15:3b:8b:b3:b4:c3:
71:b7:99:8b:0a:61:a8:99:ca:91:2e:7c:a6:44:c4:7a:83:11:
36:03:14:23:dc:da:e0:52:5e:02:3a:83:11:f5:e1:53:ee:0f:
83:85:d3:ba:10:e4:28:ec:e4:86:05:bd:dd:a9:7e:51:92:63:
00:96:97:cd:93:72:9d:85:71:21:79:77:c2:a9:4a:1b:9b:3d:
07:d4:09:92:29:9f:77:45:3c:67:8c:46:2a:8f:17:65:1a:0f:
fb:b5:28:90:d6:94:4d:60:28:16:99:5e:e9:8a:5e:3d:f4:6a:
2f:dd:25:59
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBXIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAxMTUxMjQ4NDlaFw0yNjAxMTUxMjQ4NDlaMBgxFjAU
BgNVBAMTDTY3ODdhZWI1LTQ1MmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDeIXNcUTgIEBAo4vWnhzuydntO1gP9Bei/wMDb9efqbiCBZr+4nqxyQ/Gp
7H67vEU2uqe4k1K3vVyFDsj1KqyupiY6wmZla2dCBTXByuhEFj/bCVXhKukmtTt+
SJyrEgNBMU+L3SBYwvaak+ehU6U3XQuLGF1Nid0DNCnM5VEWnMnt4wLVLFvSnvFD
Q65PJbAyioqEVOsn8eYFYvnanEayGAXNTblr7XI9CWJig798ThMhsdUvaTVL7w18
eHAsuCfLyCM0DRGsx9kzXc8CdcF0eIGzPPIGzwG6v9LplaYWX22Ll2lfe02Yr4Nv
7SjO8LF6QclC59AZZjQdjtq4Z1TXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUTj77
Jeax7g9sizgtWaUERrlJJjswHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzEzMUE2RDVDRDMzRjExRUY5MEIxODI1NTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhwIwDQYJKoZIhvcNAQEL
BQADggEBAEHdBt5tO0IA7r4PCgJ41Ist9ybgEuAp8u4FYI2uM7z8SPgr+zNnPhoP
tMRb6P3qGoW9ej2udz9Fh1dZAl0hVN5OKC2oDg+1sLp9kjA8mSyrKvf2HbRncEpx
c/YFEsyemvBz3W+lXrFSxD/6FptVuniXMEbZbk/XSPPnB+F5JIRbJEHtl0BWKQg7
gxU7i7O0w3G3mYsKYaiZypEufKZExHqDETYDFCPc2uBSXgI6gxH14VPuD4OF07oQ
5Cjs5IYFvd2pflGSYwCWl82Tcp2FcSF5d8KpShubPQfUCZIpn3dFPGeMRiqPF2Ua
D/u1KJDWlE1gKBaZXumKXj30ai/dJVk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:47 2025 by rpki-client