Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/172254DCD24011EFACC9E782762E951A.roa
File: 172254DCD24011EFACC9E782762E951A.roa (raw, json)
Hash identifier: XbpDP5WlwbwmXANxklTNzvVgRFU74m8KI1iaGtKpsdc=
Subject key identifier: 4F:F8:55:56:21:31:E3:E8:F2:8A:29:37:92:15:F2:44:4B:60:34:1D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 051B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/172254DCD24011EFACC9E782762E951A.roa
Signing time: Tue 14 Jan 2025 06:23:38 +0000
ROA not before: Tue 14 Jan 2025 06:23:34 +0000
ROA not after: Wed 14 Jan 2026 06:23:34 +0000
asID: 43260
IP address blocks: 102.135.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1307 (0x51b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 14 06:23:34 2025 GMT
Not After : Jan 14 06:23:34 2026 GMT
Subject: CN=678602ea-3dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6a:b5:38:cb:5b:d4:80:23:30:5a:3e:20:f9:
3b:49:b7:fe:f5:3c:71:e1:00:09:f6:2c:ba:ad:1e:
34:80:c4:77:1b:9e:23:b9:84:ec:08:91:64:d3:ab:
6f:fb:7c:23:46:dc:89:06:d8:09:d2:c5:ab:b0:12:
a7:6e:d3:0b:cc:c6:d3:22:1c:9f:2b:fb:26:15:ca:
fa:c4:73:53:e5:5e:a8:eb:ca:ba:92:7e:01:9f:ee:
11:09:bf:f0:60:b9:35:9b:d4:1b:34:dc:56:05:7d:
62:07:7a:e7:53:1b:47:54:55:34:06:ca:4e:4a:80:
8f:ed:9a:cc:a3:40:8f:35:cd:20:0b:91:a8:92:5f:
df:f0:44:7e:03:87:44:71:38:ab:40:69:91:18:84:
3e:1f:9c:04:89:2d:6b:d4:f8:59:d2:ba:c7:31:04:
b3:6f:23:8a:59:42:f6:7c:6d:cb:6a:e6:48:2a:eb:
66:b2:5c:23:73:73:5e:d6:8c:48:5c:b5:38:d8:fa:
78:27:af:75:b8:3a:8b:09:10:70:e5:2f:aa:1a:f6:
93:e8:c5:70:34:1c:96:89:c4:3d:1c:b3:a3:41:cc:
c8:f2:30:82:02:46:c1:2e:09:fa:21:4f:fe:0b:c2:
d6:f5:0f:7a:04:64:7b:87:45:75:80:53:b8:1b:31:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F8:55:56:21:31:E3:E8:F2:8A:29:37:92:15:F2:44:4B:60:34:1D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/172254DCD24011EFACC9E782762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.10.0/24
Signature Algorithm: sha256WithRSAEncryption
36:9f:9e:39:5f:30:f7:24:ad:ac:83:2e:58:61:e7:c9:b9:8c:
19:4c:be:8f:b5:61:ab:85:2b:61:1c:86:01:31:bf:d5:66:c3:
a9:85:cf:36:d0:8c:be:af:f3:0a:d9:03:f0:7a:44:b4:58:15:
c3:fd:13:d7:35:ac:0f:c6:c6:65:6a:04:2d:2c:50:2e:d2:a1:
8d:05:e3:d9:1a:ce:36:c4:71:c1:67:4b:5a:cf:c6:be:e0:90:
92:29:91:fe:19:d0:ab:9e:a8:6f:11:bd:1c:e6:c8:97:d9:a1:
60:b4:83:b3:48:6c:3b:8a:38:36:e6:d4:7d:f4:ab:5c:ed:e5:
47:cf:8c:33:aa:2c:51:de:78:f9:25:3b:12:7e:ba:d0:a3:0e:
d9:66:80:76:71:50:37:db:92:88:e0:15:4c:46:5a:d1:99:57:
22:dc:f4:b5:97:80:9b:0b:03:8f:39:54:eb:df:ec:b9:fe:e6:
78:ec:62:25:21:c4:a2:c8:73:ac:1d:f4:f3:96:26:4d:0b:a1:
1a:23:fb:87:c2:54:d1:66:e2:49:dc:49:db:22:d4:cb:38:7a:
04:d3:8b:fb:85:08:3f:23:8a:20:3b:d1:38:5a:9a:fb:7a:7a:
ed:09:81:6f:60:8f:7d:23:bf:b3:19:f4:55:ea:77:72:27:d3:
58:4d:7f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:52 2025 by rpki-client