Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/388501DADFDB11EFBEAC6DB9762E951A.roa
File: 388501DADFDB11EFBEAC6DB9762E951A.roa (raw, json)
Hash identifier: v7JrQ3EefbANQgeGnwxKBsm7TqD6npLZXekk2ixMSz8=
Subject key identifier: 13:FA:F0:21:50:93:ED:08:6A:64:79:2A:CF:83:31:00:10:43:27:6F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05A5
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/388501DADFDB11EFBEAC6DB9762E951A.roa
Signing time: Fri 31 Jan 2025 13:56:51 +0000
ROA not before: Fri 31 Jan 2025 13:56:47 +0000
ROA not after: Sat 31 Jan 2026 13:56:47 +0000
asID: 9009
IP address blocks: 102.135.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1445 (0x5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 31 13:56:47 2025 GMT
Not After : Jan 31 13:56:47 2026 GMT
Subject: CN=679cd6a3-6108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:da:86:6c:28:7d:fd:35:5c:42:7c:8a:c2:
a7:48:99:73:92:b0:e9:10:c5:a8:1c:af:91:67:33:
e5:33:80:d6:15:ec:74:3e:42:e7:15:e0:8a:6a:79:
f1:b8:0b:14:dd:50:30:c5:7f:2a:24:37:d8:7f:9d:
55:70:b7:63:3a:47:5f:56:d9:4d:17:ba:97:4d:80:
74:e2:af:52:a0:2a:7f:90:70:97:99:f1:06:c3:a7:
8b:47:57:25:1a:b0:40:0d:ba:94:c1:1e:bb:d2:43:
67:86:86:e8:76:09:73:46:40:08:eb:a4:67:00:7e:
21:c2:1d:88:5b:e2:b2:4b:c8:85:96:bf:eb:f1:4d:
df:50:4c:65:e0:f3:b2:f1:41:9f:d8:73:f7:77:da:
ff:a9:51:ad:73:25:35:cf:f1:3a:d4:c8:31:3f:ce:
ee:c3:11:0a:a3:f8:fd:0c:09:0e:6f:2c:bd:f0:9c:
01:01:39:09:49:be:b1:56:72:a2:df:23:d1:2b:66:
08:bc:e3:71:0a:62:1e:6d:2c:76:43:9d:c4:c9:4b:
25:ec:b4:d6:b5:2f:85:ca:31:4d:a5:e9:78:dc:5f:
f8:be:88:d6:53:68:9c:b1:3d:b2:53:a7:98:95:ec:
8f:9b:ea:e0:17:e8:fe:b7:7c:20:3e:fd:32:21:bd:
55:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FA:F0:21:50:93:ED:08:6A:64:79:2A:CF:83:31:00:10:43:27:6F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/388501DADFDB11EFBEAC6DB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.101.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b9:8e:3e:9b:52:1e:63:7d:84:71:b4:eb:c6:4e:92:c7:e4:
cd:67:29:ef:06:67:c9:fe:39:0c:ec:b2:d8:69:97:05:3b:e5:
81:06:25:f5:e4:9a:5d:eb:b2:77:79:81:22:08:3e:52:61:f1:
bb:06:74:2e:9c:8e:e8:83:a3:55:bd:27:c4:fd:f8:22:ba:19:
6d:68:1d:eb:c7:d5:ef:87:89:9c:98:d4:3c:66:91:fe:c4:8c:
0d:27:b2:f6:63:03:6a:29:c8:6c:ae:3c:d3:04:65:2a:8e:fa:
58:89:9b:92:9c:33:19:24:37:de:6b:e4:a9:d2:96:8e:fb:b4:
09:10:03:df:1d:62:a1:ba:33:ee:52:4a:82:77:71:84:a1:82:
38:46:41:80:6b:55:9b:b7:e3:3c:6a:c3:ce:bd:9a:5c:73:07:
88:60:fc:90:4d:9c:b3:9c:71:b7:45:11:26:31:8f:4e:8f:5d:
19:5d:bf:87:88:a9:a1:c0:cc:56:9e:8d:9b:f2:44:0a:34:94:
b6:03:bb:2f:26:20:bb:62:10:69:7c:15:b5:ef:5c:30:d7:02:
9e:23:0a:af:ba:f8:cf:3a:8a:c9:b7:ac:77:97:be:f3:f5:65:
37:59:6f:81:9e:34:6f:de:c6:cc:98:50:29:b1:45:17:bc:04:
47:02:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:32:23 2025 by rpki-client