Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1D97B596D33511EF98F25697762E951A.roa
File: 1D97B596D33511EF98F25697762E951A.roa (raw, json)
Hash identifier: 8zNpWYctPaDPKNZd04iBDoTNvppqPlbSmam+1SEL6H4=
Subject key identifier: 69:CA:B3:C7:F7:A4:44:FE:03:71:F5:27:51:75:06:AF:36:FE:14:5C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0534
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1D97B596D33511EF98F25697762E951A.roa
Signing time: Wed 15 Jan 2025 11:37:35 +0000
ROA not before: Wed 15 Jan 2025 11:37:32 +0000
ROA not after: Thu 15 Jan 2026 11:37:32 +0000
asID: 53356
IP address blocks: 102.135.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332 (0x534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 11:37:32 2025 GMT
Not After : Jan 15 11:37:32 2026 GMT
Subject: CN=67879dff-3862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:23:09:fb:91:97:5a:69:52:4a:f4:26:c7:
00:36:a0:de:d9:60:27:d3:f2:da:2f:13:aa:61:ef:
13:bd:6c:58:a5:d1:bb:95:f3:01:78:9b:4d:48:24:
28:e6:46:9c:4d:1d:80:fd:67:72:42:5a:2a:df:6b:
65:58:80:1c:fb:f9:f3:94:ed:cf:9c:ad:c5:25:ef:
71:48:18:5b:31:18:b3:f8:f9:90:01:87:a0:db:33:
2b:2b:29:0f:fd:15:9f:b7:6c:32:4c:bc:c6:d3:d9:
fd:ad:f3:f3:ae:92:9a:ce:09:54:8f:ed:42:d5:01:
e7:37:c3:cc:d1:3d:02:70:ac:ad:fe:cf:f5:d7:2a:
59:5d:60:16:73:14:86:94:4d:06:59:a5:95:4a:a3:
64:82:0f:73:d7:0a:bc:a2:8b:f3:39:88:2b:f6:99:
53:e7:88:58:9c:4f:91:a5:6d:73:67:f5:61:bb:88:
01:c9:a9:69:34:4a:af:fe:ce:aa:11:6e:f1:8b:bd:
85:3c:94:4f:1e:c9:62:ae:8a:b7:4a:9b:04:f3:42:
34:25:37:d1:83:e4:f1:4d:b1:15:60:84:9b:42:1b:
d8:7c:b5:87:43:71:6b:b8:26:87:28:72:06:42:17:
a4:67:12:37:be:de:9b:fa:71:f4:3a:cf:3b:39:30:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CA:B3:C7:F7:A4:44:FE:03:71:F5:27:51:75:06:AF:36:FE:14:5C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1D97B596D33511EF98F25697762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.61.0/24
Signature Algorithm: sha256WithRSAEncryption
50:cf:6f:cb:58:e9:00:59:99:f8:14:d9:23:71:b4:ef:b9:51:
03:e3:fd:5e:18:6a:e5:ca:ec:70:fd:4b:4c:a3:82:28:8b:fb:
45:45:d1:49:ee:94:65:c1:21:2c:1c:35:d9:b4:d2:db:04:fd:
ff:53:06:cb:da:5e:d6:25:a7:0a:a0:74:db:a5:bd:10:22:0f:
4a:64:0c:e3:b3:d1:5c:8d:00:bd:d1:36:7b:ad:00:f0:43:6c:
99:24:1e:82:9f:e0:c4:8c:09:d1:8c:46:59:d1:e5:4b:bb:8e:
52:4c:e5:dd:e1:e9:d0:c2:86:c2:80:a3:dc:a6:96:68:d0:6b:
57:58:a7:51:e7:8a:2e:35:50:87:e4:d5:33:f3:08:66:c3:1b:
87:92:20:61:2b:6b:98:ad:5c:4d:e5:3e:ee:02:4c:9d:fc:d0:
dd:b0:4a:6f:0d:f7:0d:07:44:7c:38:13:09:cb:de:1f:97:3d:
11:ac:bc:bc:a8:93:e6:d3:ee:43:e9:e6:8c:94:6d:96:33:03:
82:01:1b:94:1a:5e:53:8f:ac:be:82:ef:d9:bd:45:3b:15:b2:
21:e9:e1:5f:04:16:25:46:61:5a:81:24:74:4c:63:e8:f3:7e:
6a:c6:60:40:38:c7:10:61:75:c1:b8:eb:36:a6:f9:d4:12:4f:
dc:4b:e6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:15:25 2025 by rpki-client