Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/22607814C7FB11EF82D5DFAF762E951A.roa
File: 22607814C7FB11EF82D5DFAF762E951A.roa (raw, json)
Hash identifier: YMxriaOQgxair0dvpu3L6JVxP+3vpqAu8FyImRa55Qw=
Subject key identifier: EA:00:E4:8B:A6:0E:B9:DE:71:C0:D0:44:75:8D:10:7F:04:F5:47:2A
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04CC
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/22607814C7FB11EF82D5DFAF762E951A.roa
Signing time: Wed 01 Jan 2025 04:44:50 +0000
ROA not before: Wed 01 Jan 2025 04:44:46 +0000
ROA not after: Thu 01 Jan 2026 04:44:46 +0000
asID: 43260
IP address blocks: 102.135.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1228 (0x4cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 1 04:44:46 2025 GMT
Not After : Jan 1 04:44:46 2026 GMT
Subject: CN=6774c842-df80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:c4:e1:d1:aa:84:29:23:aa:78:d9:87:f2:
b9:07:24:a1:f6:d7:83:0f:29:60:78:38:eb:6d:fc:
8c:74:ae:55:bc:71:f0:3a:17:84:2f:73:7b:49:66:
44:20:26:31:b7:ab:1a:95:b0:db:08:fe:9e:79:ec:
28:af:5a:98:d9:1b:06:67:1a:23:ba:0d:46:b5:80:
ce:49:da:54:c9:53:04:e2:c7:d2:46:8e:4b:4a:91:
e0:a4:8b:be:23:c5:4b:5e:43:b6:52:7e:ef:97:59:
3b:d0:5c:c1:3b:41:6a:19:17:83:a3:e0:e2:b0:a2:
59:2b:b0:a1:88:b8:be:cf:dd:7f:d8:e9:65:1e:b3:
bf:d6:8a:e9:b9:ea:1d:db:58:c2:56:ad:cd:4d:a7:
13:8d:5d:c6:02:c2:8f:fa:eb:e0:bb:e0:d6:11:76:
58:35:6d:c0:bc:c0:87:2d:e3:ff:65:d3:68:a8:03:
8d:0c:93:c2:6b:8a:4d:0b:29:bc:78:dd:a3:09:1d:
ee:0f:31:44:93:27:1c:47:94:d6:73:a2:28:37:43:
48:8b:fe:b4:c5:b5:ab:92:bd:1f:96:66:e6:d1:45:
62:b2:79:ef:3b:0b:95:a0:e8:83:fb:8c:39:15:2c:
46:b4:26:2a:df:58:1c:e3:6f:d8:1b:48:87:a4:63:
2b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:00:E4:8B:A6:0E:B9:DE:71:C0:D0:44:75:8D:10:7F:04:F5:47:2A
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/22607814C7FB11EF82D5DFAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:66:07:eb:cf:6f:79:c7:6a:42:e3:56:8e:c9:8c:b6:cc:96:
fa:df:1b:0c:29:ef:ba:18:d8:27:f2:5c:17:f0:b5:c1:38:8f:
00:fe:80:1a:80:e1:2c:76:91:bb:b5:2a:b8:6f:b1:a0:27:77:
07:36:0a:b9:c7:2c:1f:48:9c:ac:81:d4:5d:53:4d:6b:f4:b4:
30:e1:58:d1:10:2c:d2:ac:65:bb:43:f2:68:a0:eb:5a:ca:8d:
63:20:49:1a:08:e2:c6:1c:e3:67:7d:24:74:61:9c:f5:ba:04:
9e:55:b0:f4:63:2f:fe:45:23:a5:20:5c:f5:1a:0c:f7:96:b9:
53:36:e1:ce:b9:32:0b:ab:3c:e6:86:67:c3:e9:6a:e5:b1:37:
48:f0:91:9d:e7:20:96:92:3f:f1:71:e2:4d:c7:d8:69:0b:bf:
fa:81:96:ab:f4:ea:bf:90:af:3a:88:02:1d:5d:47:7f:c8:f5:
ef:93:fa:12:7f:91:7b:64:10:b5:e3:c5:d9:14:55:90:e4:c1:
50:af:6e:17:c7:38:6c:bd:a4:f4:ae:8f:b3:fd:bb:f5:32:d2:
b0:6f:e8:15:d4:d0:4f:fb:c4:00:b6:3d:54:21:91:1b:56:54:
98:9d:4d:f7:96:e3:d5:f7:1c:44:46:fe:bf:41:11:39:1c:b3:
0d:f2:b1:dd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAxMDEwNDQ0NDZaFw0yNjAxMDEwNDQ0NDZaMBgxFjAU
BgNVBAMTDTY3NzRjODQyLWRmODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDArMTh0aqEKSOqeNmH8rkHJKH214MPKWB4OOtt/Ix0rlW8cfA6F4Qvc3tJ
ZkQgJjG3qxqVsNsI/p557CivWpjZGwZnGiO6DUa1gM5J2lTJUwTix9JGjktKkeCk
i74jxUteQ7ZSfu+XWTvQXME7QWoZF4Oj4OKwolkrsKGIuL7P3X/Y6WUes7/Wium5
6h3bWMJWrc1NpxONXcYCwo/66+C74NYRdlg1bcC8wIct4/9l02ioA40Mk8Jrik0L
Kbx43aMJHe4PMUSTJxxHlNZzoig3Q0iL/rTFtauSvR+WZubRRWKyee87C5Wg6IP7
jDkVLEa0JirfWBzjb9gbSIekYytrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU6gDk
i6YOud5xwNBEdY0QfwT1RyowHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzIyNjA3ODE0QzdGQjExRUY4MkQ1REZBRjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhwAwDQYJKoZIhvcNAQEL
BQADggEBAApmB+vPb3nHakLjVo7JjLbMlvrfGwwp77oY2CfyXBfwtcE4jwD+gBqA
4Sx2kbu1KrhvsaAndwc2CrnHLB9InKyB1F1TTWv0tDDhWNEQLNKsZbtD8mig61rK
jWMgSRoI4sYc42d9JHRhnPW6BJ5VsPRjL/5FI6UgXPUaDPeWuVM24c65MgurPOaG
Z8PpauWxN0jwkZ3nIJaSP/Fx4k3H2GkLv/qBlqv06r+QrzqIAh1dR3/I9e+T+hJ/
kXtkELXjxdkUVZDkwVCvbhfHOGy9pPSuj7P9u/Uy0rBv6BXU0E/7xAC2PVQhkRtW
VJidTfeW49X3HERG/r9BETkcsw3ysd0=
-----END CERTIFICATE-----
Generated at Wed Apr 9 23:24:32 2025 by rpki-client