Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1D51D76C0A1511F0842C0E56762E951A.roa
File: 1D51D76C0A1511F0842C0E56762E951A.roa (raw, json)
Hash identifier: ObZWZLjudqpig1ktDqpQTAkuEemEoGUf3yFNGvjq0Zs=
Subject key identifier: DF:87:F7:61:73:98:8D:0E:4E:CE:06:E2:07:9D:88:F3:16:9F:BA:EA
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0888
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1D51D76C0A1511F0842C0E56762E951A.roa
Signing time: Wed 26 Mar 2025 07:37:05 +0000
ROA not before: Wed 26 Mar 2025 07:37:01 +0000
ROA not after: Thu 26 Mar 2026 07:37:01 +0000
asID: 4766
IP address blocks: 102.135.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2184 (0x888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 26 07:37:01 2025 GMT
Not After : Mar 26 07:37:01 2026 GMT
Subject: CN=67e3aea1-0b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b2:f9:9e:eb:7d:bd:4b:81:2d:b7:ff:e7:5f:
24:77:1b:63:2f:49:ba:86:bb:e5:94:4c:53:74:84:
fa:39:1d:f7:d0:f3:eb:2d:cb:19:88:2b:87:f5:5b:
b9:4c:82:36:c8:9c:52:ce:5d:f5:66:4e:5d:85:dc:
e0:26:8c:0c:1a:b7:46:2e:ce:96:69:ee:af:5a:d8:
d5:26:f8:a5:8a:71:40:47:18:14:20:f8:e5:a9:e4:
56:29:ee:0f:3c:d8:fd:48:5b:d3:39:b2:3d:90:b2:
b7:ef:a4:fd:ff:19:91:e8:94:be:86:44:0b:91:8e:
93:30:2e:56:cf:ee:b8:ee:22:1d:d4:0a:17:74:25:
04:39:7f:1e:73:55:c4:ea:29:6f:5b:03:0d:d6:88:
8b:94:aa:b3:42:22:98:5d:ed:0a:5e:9f:fd:18:da:
9c:5e:64:ec:25:02:d8:b3:6d:3a:ba:11:d5:8e:a2:
37:1d:86:c0:a6:d3:2d:a2:dd:0a:df:2d:9f:bb:61:
f7:72:70:75:a1:1c:e6:05:6b:b9:ef:af:e8:c0:15:
56:98:e6:14:b9:5c:cc:3f:ff:4f:a1:21:36:0e:53:
94:fc:f9:15:4a:48:87:dd:de:d4:54:68:3a:4a:ec:
c2:4d:78:87:74:16:34:01:c7:fe:11:1b:b7:24:ab:
39:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:87:F7:61:73:98:8D:0E:4E:CE:06:E2:07:9D:88:F3:16:9F:BA:EA
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1D51D76C0A1511F0842C0E56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.93.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:1b:16:b3:3a:f3:29:70:ca:ff:5c:20:31:15:78:38:fb:5b:
aa:02:d5:d1:76:4c:f5:5b:ee:90:4f:30:4f:ed:3b:ae:66:d3:
fb:2c:d2:ce:75:ea:af:44:37:d5:a3:48:d7:e7:cb:09:9f:47:
f7:3d:14:65:64:f1:f8:c4:48:75:62:3f:08:5f:6e:43:b9:65:
08:67:36:70:fc:65:52:02:dc:08:3d:a6:e2:b2:20:56:bc:f4:
90:c3:df:15:50:4c:f5:46:40:35:67:81:c6:21:1a:2d:60:d2:
78:46:32:00:ab:58:7f:44:25:8f:dd:a4:11:e0:57:24:4b:b4:
ff:d9:41:b0:7a:40:ff:41:bd:86:e8:a7:0b:96:b2:3e:d1:c0:
2b:d3:88:24:d5:a6:ae:52:e3:37:97:1c:4f:49:04:f5:f3:b6:
f1:e8:3b:be:ca:ce:0f:ec:90:cf:75:c3:67:53:fb:ad:7c:83:
06:0d:93:9a:66:9b:2d:c5:f0:42:fe:7d:26:da:cb:5a:0b:88:
d9:fd:b6:8e:67:6a:c6:d1:94:9f:fa:5b:2c:a3:5c:d1:7b:c0:
4a:f2:09:33:30:e3:81:e8:e7:0f:45:c8:fb:16:05:22:53:5d:
69:2e:35:37:7e:a8:a1:38:d5:be:14:0b:f9:22:79:a0:66:36:
a6:a6:10:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:37:12 2025 by rpki-client