Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/27AE44A408A111F088D1D970762E951A.roa
File: 27AE44A408A111F088D1D970762E951A.roa (raw, json)
Hash identifier: mcS7DJtd3hmQkiAftMl0V9CphazSBwmvOHTuf/pR4wk=
Subject key identifier: 61:F1:AD:C4:08:43:44:9C:1F:8F:70:C9:47:C5:8F:F0:03:C7:F3:12
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07C9
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/27AE44A408A111F088D1D970762E951A.roa
Signing time: Mon 24 Mar 2025 11:14:30 +0000
ROA not before: Mon 24 Mar 2025 11:14:26 +0000
ROA not after: Tue 24 Mar 2026 11:14:26 +0000
asID: 2914
IP address blocks: 102.135.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1993 (0x7c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 11:14:26 2025 GMT
Not After : Mar 24 11:14:26 2026 GMT
Subject: CN=67e13e96-91cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:e3:4b:de:c0:8a:17:c2:53:2f:64:13:ab:
15:80:50:1e:02:1c:c6:ff:77:15:de:98:be:90:37:
01:9e:c5:32:cc:a5:9b:b2:73:b6:d9:65:7d:ef:a1:
af:98:ac:4b:44:3e:9c:47:80:ab:45:b1:f7:07:26:
13:a6:9f:ef:55:46:18:52:cb:2e:ea:24:d1:c0:3a:
f6:e6:24:8c:da:61:22:0f:bf:aa:fd:6c:fa:b2:34:
f3:61:1e:c9:82:47:1f:38:16:29:f6:fb:a0:63:d4:
fe:a0:81:aa:4f:73:9f:bf:84:49:7a:64:41:77:eb:
6d:f2:32:97:5d:78:8a:44:d4:2d:f5:33:52:60:3e:
9c:c0:3d:a9:46:05:f0:48:ea:37:22:b1:66:b3:02:
38:71:be:8b:0d:4d:86:dc:6f:c5:bd:0e:66:f9:93:
fe:fa:4b:fc:b2:ed:97:9f:28:f9:04:af:2a:f4:ea:
5b:8b:11:00:66:c8:46:64:43:94:b8:42:b0:a9:d7:
f9:c2:8f:d9:42:8f:89:74:ad:8c:b2:df:da:f6:44:
c4:39:77:24:56:9f:6b:cb:b5:46:a2:e4:6b:50:0f:
83:35:6a:8f:71:7d:b9:a0:85:3b:ea:cb:3f:16:b5:
07:7c:3a:db:ca:db:b6:54:77:e5:4c:e0:6e:27:3f:
8d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F1:AD:C4:08:43:44:9C:1F:8F:70:C9:47:C5:8F:F0:03:C7:F3:12
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/27AE44A408A111F088D1D970762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.121.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0b:b9:96:a8:e7:0a:65:ee:5f:49:0e:1e:25:6c:da:30:b3:
41:31:b9:74:67:4c:36:e7:26:2c:30:7f:c4:7b:f2:34:ed:88:
25:2d:43:ea:8f:d2:60:6d:e3:41:c5:e4:a2:5c:f8:2a:ce:ac:
7a:66:33:16:23:9d:49:97:2c:76:e9:0c:4d:f2:f8:e5:ae:d8:
eb:d5:de:4b:21:4a:40:8f:4b:df:ff:1d:4d:1f:05:85:1c:a2:
bf:b4:59:64:11:54:f3:11:ae:da:6e:f2:dc:f7:fa:ae:58:9d:
4b:ef:d3:35:a0:18:f3:7d:eb:19:40:d7:6c:69:79:84:54:c9:
79:05:53:5c:f9:58:ec:c9:5b:6e:22:f1:e9:2d:74:fc:25:e3:
a3:9a:c9:f0:77:3f:cb:91:7c:53:fa:24:d6:d0:7e:1e:1d:22:
23:7e:d4:b4:59:c9:49:da:bd:35:1f:5c:f4:ed:14:1b:a6:ac:
7e:b0:5a:ee:50:cc:af:39:f0:90:68:cc:c0:9f:ef:71:d3:b8:
a7:93:78:22:7e:fe:42:47:ca:69:b5:7d:bd:50:15:34:2d:7c:
4a:9d:85:fa:ce:3f:16:13:07:9c:4d:84:0e:0b:2c:c2:b3:df:
b8:60:1e:6b:aa:46:c9:4a:7f:5a:7e:7f:d6:3d:96:b4:1b:93:
5b:04:43:5e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB8kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjQxMTE0MjZaFw0yNjAzMjQxMTE0MjZaMBgxFjAU
BgNVBAMTDTY3ZTEzZTk2LTkxY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDC+uNL3sCKF8JTL2QTqxWAUB4CHMb/dxXemL6QNwGexTLMpZuyc7bZZX3v
oa+YrEtEPpxHgKtFsfcHJhOmn+9VRhhSyy7qJNHAOvbmJIzaYSIPv6r9bPqyNPNh
HsmCRx84Fin2+6Bj1P6ggapPc5+/hEl6ZEF3623yMpddeIpE1C31M1JgPpzAPalG
BfBI6jcisWazAjhxvosNTYbcb8W9Dmb5k/76S/yy7ZefKPkEryr06luLEQBmyEZk
Q5S4QrCp1/nCj9lCj4l0rYyy39r2RMQ5dyRWn2vLtUai5GtQD4M1ao9xfbmghTvq
yz8WtQd8OtvK27ZUd+VM4G4nP401AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUYfGt
xAhDRJwfj3DJR8WP8APH8xIwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzI3QUU0NEE0MDhBMTExRjA4OEQxRDk3MDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh3kwDQYJKoZIhvcNAQEL
BQADggEBAA0LuZao5wpl7l9JDh4lbNows0ExuXRnTDbnJiwwf8R78jTtiCUtQ+qP
0mBt40HF5KJc+CrOrHpmMxYjnUmXLHbpDE3y+OWu2OvV3kshSkCPS9//HU0fBYUc
or+0WWQRVPMRrtpu8tz3+q5YnUvv0zWgGPN96xlA12xpeYRUyXkFU1z5WOzJW24i
8ektdPwl46OayfB3P8uRfFP6JNbQfh4dIiN+1LRZyUnavTUfXPTtFBumrH6wWu5Q
zK858JBozMCf73HTuKeTeCJ+/kJHymm1fb1QFTQtfEqdhfrOPxYTB5xNhA4LLMKz
37hgHmuqRslKf1p+f9Y9lrQbk1sEQ14=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:25:39 2025 by rpki-client