Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/38168A22E78B11EF8ACB4594762E951A.roa
File: 38168A22E78B11EF8ACB4594762E951A.roa (raw, json)
Hash identifier: wGdpZNEjy65BJ2/GE0+/gR0wCi4ATbe7udef5Zb6M/g=
Subject key identifier: CA:BF:D0:42:3D:39:CB:46:C0:B2:0E:DE:95:72:79:A0:97:DF:9F:37
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05CE
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/38168A22E78B11EF8ACB4594762E951A.roa
Signing time: Mon 10 Feb 2025 08:44:20 +0000
ROA not before: Mon 10 Feb 2025 08:44:16 +0000
ROA not after: Tue 10 Feb 2026 08:44:16 +0000
asID: 329007
IP address blocks: 102.135.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1486 (0x5ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 10 08:44:16 2025 GMT
Not After : Feb 10 08:44:16 2026 GMT
Subject: CN=67a9bc64-219a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:6a:33:aa:b8:06:6f:e9:ab:8e:89:db:39:
80:ef:de:03:1a:99:4e:bd:e7:2d:fd:96:9d:9f:c0:
ba:62:c7:d2:05:81:06:4f:40:24:45:28:a1:75:9d:
e6:87:85:fa:71:cd:f1:c0:c6:08:03:a9:db:50:28:
53:43:dd:36:6c:70:5c:ab:a0:bd:b9:96:f5:0a:bc:
76:8b:37:90:67:bf:29:a5:a1:a3:6f:2f:ba:a4:52:
63:ed:0f:25:c0:55:7f:d7:a5:18:e7:62:b0:6d:49:
02:2e:86:71:89:4d:16:85:7a:5d:66:b0:38:24:43:
d6:f4:12:2d:96:87:75:38:c8:b1:7a:83:46:b0:b1:
93:35:81:2e:6b:d8:15:92:a7:69:3b:55:57:b1:cf:
70:95:9a:fc:d8:04:eb:65:a2:ac:5e:2b:76:d9:ff:
e8:92:91:03:6b:27:58:3c:83:06:12:a9:de:0d:52:
11:ac:b0:9f:c2:aa:18:4a:87:6c:4e:fc:8c:68:37:
b5:c8:7a:c2:79:29:4b:86:3b:9a:98:79:ec:77:ea:
30:58:2b:62:28:98:d4:f1:b8:5c:28:f3:0d:f8:33:
a9:14:41:de:f8:ed:77:8a:03:45:92:a0:60:c5:e2:
3e:dd:b0:9f:ba:71:f8:5d:75:99:10:bd:06:27:b9:
04:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BF:D0:42:3D:39:CB:46:C0:B2:0E:DE:95:72:79:A0:97:DF:9F:37
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/38168A22E78B11EF8ACB4594762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.65.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:07:92:ab:9e:bb:16:28:d9:5d:43:17:3e:2f:e9:52:af:25:
f1:f7:d8:cb:e8:c6:7b:65:cb:66:57:32:4d:6f:b6:cb:f3:07:
a8:08:b8:4a:76:37:d3:5e:e0:6b:3d:ea:6d:c3:7f:dd:92:01:
92:0d:09:ae:6c:ce:d6:dd:05:51:d8:1c:c2:68:98:39:fb:ac:
8f:00:43:89:fb:a5:20:a0:7d:87:5e:c8:ff:6c:da:ad:f1:f5:
66:ce:b9:b0:44:cf:53:c3:d9:0a:6e:4e:09:22:40:10:17:db:
83:d4:d5:a8:49:b1:6c:e0:44:3e:07:d5:73:c0:73:22:77:e3:
46:bc:df:f6:f6:37:4b:20:9e:15:31:fe:6a:0b:f3:07:fa:04:
04:93:0b:0a:7f:b2:a1:7e:c8:3b:6f:b3:14:ca:49:f0:23:b5:
61:66:11:a3:ef:1a:90:f2:1d:67:79:d4:ef:ae:15:8a:76:c1:
0a:4f:15:5a:be:32:e9:bb:5e:dd:fc:96:d4:49:70:3e:2d:ab:
ce:92:bb:36:c9:07:70:df:46:98:33:5c:58:67:2e:8b:0b:49:
70:bc:0f:a9:44:cd:89:c8:f5:0c:cf:a8:44:90:5a:f6:ec:96:
57:1b:10:fb:9d:3d:d5:ed:3c:23:0f:7b:bb:1a:06:1a:f1:89:
8f:dd:aa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:52:22 2025 by rpki-client