Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/20D8440AD33F11EFAEB55257762E951A.roa
File: 20D8440AD33F11EFAEB55257762E951A.roa (raw, json)
Hash identifier: RxdrtCE3gl9ELZYN63DNnMmrNKFabZgVPKy2ctyt4YI=
Subject key identifier: 22:48:3F:D2:89:BD:CF:DF:32:74:38:7E:B1:85:AE:02:39:72:08:E7
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0574
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/20D8440AD33F11EFAEB55257762E951A.roa
Signing time: Wed 15 Jan 2025 12:49:16 +0000
ROA not before: Wed 15 Jan 2025 12:49:12 +0000
ROA not after: Thu 15 Jan 2026 12:49:12 +0000
asID: 329007
IP address blocks: 102.135.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1396 (0x574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 12:49:12 2025 GMT
Not After : Jan 15 12:49:12 2026 GMT
Subject: CN=6787aecc-0dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:9b:f4:2d:43:ee:e0:6d:fa:34:be:81:5a:
48:6e:c9:c2:1f:c7:3f:43:04:b2:88:1a:e7:b9:d4:
95:32:64:0b:a6:87:76:38:8e:bd:7e:dd:6a:b6:21:
dc:bf:20:69:bf:8e:5c:e2:2f:89:24:e8:84:a5:80:
79:f1:fb:a7:8c:6c:2b:89:96:fd:51:ee:aa:15:08:
dd:6f:4a:e0:a2:52:85:76:e0:c2:20:73:66:2c:58:
04:1a:98:82:ac:75:1e:b2:e0:fa:7a:d8:c7:7a:8c:
ce:00:cc:31:b5:29:4b:ce:8a:de:a2:fd:88:8a:e3:
7a:7c:46:fe:2e:3f:fc:e7:76:4a:63:da:50:8d:13:
e5:30:95:c7:c0:ee:35:7e:bd:d9:c0:2d:f0:65:1f:
22:ad:49:ac:ec:a7:67:32:b7:59:84:40:c5:ac:b4:
21:1f:5d:29:9b:0c:0c:01:6d:f7:8b:e1:bf:6d:55:
f1:c5:51:ea:b5:9f:1a:8e:2b:ba:c4:88:53:6d:ca:
93:01:3d:cf:32:ea:58:14:dd:54:61:dc:9c:32:94:
31:96:bf:eb:f7:2c:e2:b4:c3:b1:d6:c4:bb:a3:ab:
b3:e4:c0:4f:95:34:4b:7a:0e:4b:46:8a:a5:37:d2:
63:fa:27:b7:00:df:f2:4b:e1:d9:90:50:5a:83:5a:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:48:3F:D2:89:BD:CF:DF:32:74:38:7E:B1:85:AE:02:39:72:08:E7
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/20D8440AD33F11EFAEB55257762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b0:9d:51:b7:34:81:0b:1f:6e:03:87:e1:94:37:76:42:59:
e4:56:39:b6:c1:04:2c:78:9e:1b:f2:cd:49:dd:a3:16:d0:97:
79:88:65:36:e6:2b:61:8c:d4:62:a0:b6:ac:06:8c:c6:b8:08:
24:ef:2d:62:dd:28:69:f8:8b:a4:91:98:9f:5f:b1:53:38:d2:
b6:7f:13:6d:0a:72:70:1e:0e:30:d4:01:9c:c3:7f:46:2a:49:
91:b4:fb:bd:9b:72:6a:ec:ed:71:49:ab:a9:60:1b:18:4b:ad:
31:55:34:43:5d:8c:85:a0:0f:b7:41:0f:2e:51:95:a9:a5:d5:
65:fa:5c:a1:c8:a9:cb:fd:cd:e6:5f:14:85:42:ac:ba:14:58:
be:c8:d9:24:a0:01:31:70:d4:34:40:3d:c8:8a:33:3a:b8:14:
d8:09:e4:a3:96:46:94:24:40:6b:c0:a7:72:ca:86:0e:25:8f:
6d:51:86:ce:1f:5f:5a:bb:8f:24:fe:b4:e2:71:ea:fa:15:26:
10:03:4f:6d:34:b5:fe:45:2d:c7:43:2d:43:d7:84:65:f5:b0:
32:51:ed:fc:ba:7b:99:0e:0b:2f:62:74:a3:13:d7:80:c4:76:
6d:15:95:b7:61:b7:3f:07:39:92:96:35:7d:0c:77:f8:6a:e0:
a1:91:7b:d5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAxMTUxMjQ5MTJaFw0yNjAxMTUxMjQ5MTJaMBgxFjAU
BgNVBAMTDTY3ODdhZWNjLTBkZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCncZv0LUPu4G36NL6BWkhuycIfxz9DBLKIGue51JUyZAumh3Y4jr1+3Wq2
Idy/IGm/jlziL4kk6ISlgHnx+6eMbCuJlv1R7qoVCN1vSuCiUoV24MIgc2YsWAQa
mIKsdR6y4Pp62Md6jM4AzDG1KUvOit6i/YiK43p8Rv4uP/zndkpj2lCNE+UwlcfA
7jV+vdnALfBlHyKtSazsp2cyt1mEQMWstCEfXSmbDAwBbfeL4b9tVfHFUeq1nxqO
K7rEiFNtypMBPc8y6lgU3VRh3JwylDGWv+v3LOK0w7HWxLujq7PkwE+VNEt6DktG
iqU30mP6J7cA3/JL4dmQUFqDWjQLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUIkg/
0om9z98ydDh+sYWuAjlyCOcwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzIwRDg0NDBBRDMzRjExRUZBRUI1NTI1Nzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhwMwDQYJKoZIhvcNAQEL
BQADggEBADqwnVG3NIELH24Dh+GUN3ZCWeRWObbBBCx4nhvyzUndoxbQl3mIZTbm
K2GM1GKgtqwGjMa4CCTvLWLdKGn4i6SRmJ9fsVM40rZ/E20KcnAeDjDUAZzDf0Yq
SZG0+72bcmrs7XFJq6lgGxhLrTFVNENdjIWgD7dBDy5Rlaml1WX6XKHIqcv9zeZf
FIVCrLoUWL7I2SSgATFw1DRAPciKMzq4FNgJ5KOWRpQkQGvAp3LKhg4lj21Rhs4f
X1q7jyT+tOJx6voVJhADT200tf5FLcdDLUPXhGX1sDJR7fy6e5kOCy9idKMT14DE
dm0Vlbdhtz8HOZKWNX0Md/hq4KGRe9U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:03 2025 by rpki-client