Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3C7261E4C8DD11EF9A2E1866762E951A.roa
File: 3C7261E4C8DD11EF9A2E1866762E951A.roa (raw, json)
Hash identifier: Ulu8M7/49/mZt6wtowgGReyVRF6L8Z1Ix+oF59/p86E=
Subject key identifier: 00:1E:B5:3E:DC:F6:20:BB:FF:27:E5:73:2B:69:B8:2C:57:C0:95:3A
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04D4
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3C7261E4C8DD11EF9A2E1866762E951A.roa
Signing time: Thu 02 Jan 2025 07:43:20 +0000
ROA not before: Thu 02 Jan 2025 07:43:16 +0000
ROA not after: Thu 01 Jan 2026 07:43:16 +0000
asID: 43260
IP address blocks: 102.135.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1236 (0x4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 2 07:43:16 2025 GMT
Not After : Jan 1 07:43:16 2026 GMT
Subject: CN=67764398-4584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:52:17:81:cc:97:dd:d1:a4:5b:0e:28:6e:
7c:a0:f4:eb:d6:1f:c7:69:31:ee:c4:e4:0e:7b:da:
4c:93:0f:a8:b5:a2:9a:80:1a:ad:3e:e2:a1:c3:88:
b7:c5:72:09:30:b1:70:1d:aa:e4:ca:3a:ca:99:78:
f8:27:d9:fb:cb:0b:3a:5c:8f:ea:61:12:07:f1:54:
40:8e:55:c0:79:3c:9d:40:84:bc:31:50:1e:3f:27:
83:e5:6b:f7:03:4c:65:c8:1b:a7:89:29:83:ed:1c:
a6:1b:35:2e:05:12:52:03:6d:5d:db:e5:88:24:0e:
51:77:d0:c8:52:67:c8:c8:2d:be:85:89:2d:82:09:
75:91:9c:5e:48:c7:da:09:57:c7:48:55:4d:64:07:
41:06:c7:6a:29:fe:ff:9f:66:2a:50:8e:5f:a7:b6:
00:af:cf:e4:e3:dc:04:42:11:fd:33:58:45:d8:b9:
91:c8:a5:dd:d7:09:d6:68:ff:cd:0a:22:4e:f7:52:
ab:ed:9e:d4:d0:f9:8d:c4:59:1e:d1:fa:a3:55:f8:
d7:87:1f:0f:56:16:02:51:af:85:f2:a9:8a:25:0f:
27:82:de:66:99:ad:6f:40:74:8c:d0:58:ec:b6:c3:
fb:43:eb:cd:f1:84:28:0c:30:3a:f4:b5:5f:c7:dd:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1E:B5:3E:DC:F6:20:BB:FF:27:E5:73:2B:69:B8:2C:57:C0:95:3A
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3C7261E4C8DD11EF9A2E1866762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.1.0/24
Signature Algorithm: sha256WithRSAEncryption
95:be:8a:52:b7:3a:c3:de:43:f9:cb:90:79:7d:24:83:bd:4e:
9f:f8:8c:68:68:9e:61:cc:04:55:52:62:12:93:d5:ca:e5:5c:
35:b3:48:fe:8c:e5:00:32:e8:27:eb:58:92:0e:33:19:24:0d:
82:c4:b8:61:70:68:42:4f:87:14:cb:51:79:f1:4d:86:c2:cb:
a2:74:85:2a:8f:c5:26:c0:d3:22:40:0a:1d:66:34:8b:ba:a9:
78:b8:9e:fa:64:35:6b:72:19:97:a9:21:db:33:02:f3:05:f4:
9b:d2:23:6b:b8:47:00:62:bc:d0:24:27:41:b3:20:9d:23:93:
a7:cb:0f:ca:45:12:bf:37:8c:0c:b8:c5:5f:0b:f2:2b:ff:83:
eb:b8:e4:74:50:91:74:da:88:69:48:50:c9:cd:6b:fd:79:a1:
98:d2:83:2f:20:4a:54:d4:75:06:09:26:ce:ce:fc:6f:00:ec:
86:4c:0f:12:fc:76:6e:05:e5:80:50:2a:61:70:5e:15:b3:9d:
c7:4d:8b:04:7a:8f:e5:2c:fc:43:c2:07:9c:76:fe:49:e2:30:
0d:78:e8:0c:7c:75:90:5f:c4:a1:60:8d:56:5e:d7:43:64:3f:
bc:d6:7a:be:3d:e6:97:34:08:8e:33:63:62:fe:66:64:8f:df:
e0:75:5d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:47 2025 by rpki-client