Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2329C4A8D33611EF8DFDB29D762E951A.roa
File: 2329C4A8D33611EF8DFDB29D762E951A.roa (raw, json)
Hash identifier: upH10LS4j98XO8ZT3BK33hOM6CE6FIqDiSZXEu2lA1k=
Subject key identifier: 1B:E0:C4:B6:4D:58:A8:C3:A0:ED:D6:E0:41:E1:39:93:68:FE:B5:E4
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0546
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2329C4A8D33611EF8DFDB29D762E951A.roa
Signing time: Wed 15 Jan 2025 11:44:54 +0000
ROA not before: Wed 15 Jan 2025 11:44:51 +0000
ROA not after: Thu 15 Jan 2026 11:44:51 +0000
asID: 53356
IP address blocks: 102.135.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1350 (0x546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 11:44:51 2025 GMT
Not After : Jan 15 11:44:51 2026 GMT
Subject: CN=67879fb6-eac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a4:d6:0e:ab:ea:96:83:f6:84:fa:cd:a4:96:
ad:b7:4e:00:8d:76:ce:c2:9f:a9:d0:fb:f5:60:4b:
b6:32:1e:8f:23:3d:97:4e:df:51:4c:7d:44:66:9d:
ec:90:d7:93:76:b0:a0:be:fb:7f:f7:d7:f9:dc:f6:
92:49:84:9d:30:01:c4:17:80:90:8c:ef:25:dc:05:
07:7d:3b:26:aa:d6:ad:d3:93:c3:84:d3:f0:1c:92:
cd:26:ac:6c:30:e1:77:9d:2a:0a:55:4e:a2:e2:24:
95:d4:51:5d:8f:f6:ac:58:d8:fd:1d:b9:32:69:77:
de:0b:19:94:21:e0:2b:14:87:c7:1c:19:71:3a:19:
78:cb:47:a6:f2:93:26:b7:90:42:0b:b4:df:7e:1a:
20:33:67:6c:36:fe:f8:46:fe:76:8f:33:d2:47:6c:
ce:02:e8:a8:8d:57:d3:3e:94:e9:14:df:62:28:dc:
5b:eb:02:f5:b5:11:85:d7:fd:1b:88:f7:94:dd:8e:
86:ce:4d:70:44:f0:1b:46:ac:e2:01:50:29:07:5e:
7b:b5:73:51:9f:07:cf:f4:07:51:47:4f:76:d5:05:
94:f8:93:d8:c1:df:1e:dd:4e:df:0b:19:f7:25:9c:
48:2a:9c:44:49:3b:c1:42:7e:8c:2c:6b:41:af:5e:
7a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E0:C4:B6:4D:58:A8:C3:A0:ED:D6:E0:41:E1:39:93:68:FE:B5:E4
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2329C4A8D33611EF8DFDB29D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.40.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:27:09:82:87:69:39:e0:61:8e:a4:76:fc:f6:cc:6a:f1:f9:
90:17:05:f0:f2:ae:b3:d4:55:f6:a7:2f:6b:af:83:c3:a5:81:
db:ac:56:6e:e4:52:f2:a7:bc:01:08:a4:5b:10:ec:0e:eb:93:
33:a7:f8:d7:44:0d:a1:70:6c:46:5c:11:51:3d:85:d5:b9:c8:
c9:20:67:e4:6e:95:0c:53:ea:24:01:74:01:93:66:4a:11:76:
ac:b2:91:cc:5c:ba:5c:f5:41:d4:8e:5e:54:ad:e1:eb:85:80:
69:83:27:f8:ed:d2:a7:61:3b:d0:d4:77:59:9b:d0:68:e7:64:
bc:59:87:33:37:db:9e:62:89:45:29:26:13:d7:35:5c:cd:e5:
45:94:ca:79:81:39:b9:9d:57:fa:e1:e8:c7:a8:f9:56:ce:c3:
5d:c8:f9:97:78:ea:75:0d:03:71:c5:e2:90:9c:39:32:dc:68:
8d:ce:a1:ad:07:54:f2:80:02:7f:48:c2:f6:b3:5c:c9:c1:ca:
d1:64:e2:b4:65:5a:7c:1a:26:3b:4d:22:f7:0b:ad:f3:b4:e1:
7f:eb:36:44:8b:7e:1f:26:f3:b9:12:27:f1:9c:a7:f7:5e:9b:
b2:37:8d:41:49:0b:26:17:ca:b1:34:55:bb:c9:08:df:d2:5c:
fc:ec:ff:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:48 2025 by rpki-client