Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/30D512FCCDB811EF9AEF1949762E951A.roa
File: 30D512FCCDB811EF9AEF1949762E951A.roa (raw, json)
Hash identifier: LNIYpWLmoVLBQBGADl/l7LXByVFxQF2L2WKVUxdzj2g=
Subject key identifier: FD:1F:C7:9E:60:E9:4A:BA:93:1F:24:79:82:70:73:9E:C7:CB:2D:23
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04DE
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/30D512FCCDB811EF9AEF1949762E951A.roa
Signing time: Wed 08 Jan 2025 12:00:45 +0000
ROA not before: Wed 08 Jan 2025 12:00:35 +0000
ROA not after: Fri 09 Jan 2026 12:00:35 +0000
asID: 329007
IP address blocks: 102.135.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1246 (0x4de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 8 12:00:35 2025 GMT
Not After : Jan 9 12:00:35 2026 GMT
Subject: CN=677e68ed-9d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:aa:4f:40:64:57:3a:21:30:1a:cf:3f:33:
63:2e:36:3b:52:a0:ca:36:3d:5d:46:8e:8f:e0:1b:
3a:5d:34:ed:5a:cd:d2:ab:bc:66:c5:7f:6d:de:c6:
ce:66:1d:a0:82:b9:00:b8:09:2b:22:95:61:cb:ef:
92:79:03:62:8d:6d:6a:fe:be:42:0e:1d:cf:c6:c2:
65:8e:b5:aa:b8:b9:0e:dd:24:3d:57:8d:82:d5:4f:
4d:c0:0b:cc:53:96:33:a7:d4:19:a0:44:a8:82:71:
7f:e2:c1:8e:ed:be:dd:4e:18:2d:ee:d9:95:d6:53:
19:21:44:57:fb:9a:61:29:7b:1d:6a:cb:4c:2d:28:
8a:f8:49:df:9b:cc:b1:fb:6e:fc:d1:d9:e8:07:dc:
8a:3f:2b:4e:17:39:14:97:f3:47:e0:53:53:98:88:
a4:c2:4c:09:e8:1f:25:35:00:29:a0:95:57:0a:85:
7e:a0:d8:93:ba:e7:dc:2c:d8:ad:8b:cf:b1:03:d7:
d4:06:b8:12:8f:9f:f5:8e:b1:28:19:69:5d:95:eb:
84:a0:04:e0:2f:51:2e:c9:a9:77:1a:91:d4:0e:42:
23:b0:61:5b:72:03:79:60:6d:d6:c4:54:f6:f9:4c:
58:bd:33:4d:25:cd:3e:bf:20:61:28:e8:b1:13:e0:
d7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1F:C7:9E:60:E9:4A:BA:93:1F:24:79:82:70:73:9E:C7:CB:2D:23
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/30D512FCCDB811EF9AEF1949762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.0.0/22
Signature Algorithm: sha256WithRSAEncryption
85:7c:f7:e5:18:01:5f:c1:ed:5f:22:ad:44:8d:2e:be:b1:e3:
9a:5a:2d:c0:af:68:5b:db:1a:70:44:56:18:00:ca:2b:e2:59:
24:2f:ae:0b:db:fb:0f:9a:88:fb:5a:11:2d:d1:51:4d:4a:c7:
84:e0:ca:e1:28:27:e4:a0:de:a6:25:f1:7c:46:75:54:4e:6b:
23:a4:58:2c:18:97:70:31:fe:cc:f0:26:74:1e:c3:94:06:75:
85:39:84:a2:98:f9:76:10:9e:b5:d5:b9:69:7c:4c:26:1a:a3:
5a:4b:dc:cf:97:3d:c0:ea:e7:ba:93:f7:f7:c9:2a:8b:46:80:
83:32:0a:7a:db:a6:40:41:1f:36:82:ea:1d:e4:27:31:64:3f:
e5:f8:ee:bc:86:ed:50:4e:e7:08:8b:e0:08:5c:6d:ec:68:bb:
3c:63:e4:36:7a:47:16:59:5c:10:89:62:96:04:0b:26:ec:8c:
98:35:aa:29:98:ea:a7:da:18:39:41:0e:f2:7c:ce:b4:10:22:
46:21:69:d8:4b:e4:01:2e:82:c6:2a:2f:91:dd:65:4b:80:9c:
35:7d:33:7e:76:aa:e8:99:a6:53:2a:9c:4c:50:b5:2e:46:ac:
9a:57:a6:5c:f2:52:14:ca:37:6a:00:f6:bc:8b:fe:de:ac:89:
ce:13:01:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:47 2025 by rpki-client