Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/49B3EE6408A111F0A44D8474762E951A.roa
File: 49B3EE6408A111F0A44D8474762E951A.roa (raw, json)
Hash identifier: e2qvhqxtLJcDTCGkXpd+blvAxYUqV4/5pInCiJhmhaU=
Subject key identifier: 96:41:93:5A:F8:97:F7:25:8F:7E:91:7F:F1:40:89:E5:4F:3C:7C:F1
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07CF
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/49B3EE6408A111F0A44D8474762E951A.roa
Signing time: Mon 24 Mar 2025 11:15:27 +0000
ROA not before: Mon 24 Mar 2025 11:15:23 +0000
ROA not after: Tue 24 Mar 2026 11:15:23 +0000
asID: 2914
IP address blocks: 102.135.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999 (0x7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 11:15:23 2025 GMT
Not After : Mar 24 11:15:23 2026 GMT
Subject: CN=67e13ecf-4497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:28:36:d6:b2:59:48:9c:ea:83:f5:04:f4:cb:
3b:c5:74:68:17:10:c7:0f:75:82:ff:35:12:30:57:
2c:0d:a6:6a:0a:b5:8a:37:1a:70:05:3b:12:c4:ec:
60:db:03:2f:fe:30:f5:34:9c:80:fa:e7:8e:fb:85:
8c:4c:cf:86:12:d1:28:8c:9f:0b:bf:f5:e9:74:90:
b3:18:2e:32:f4:d3:8c:00:5a:f8:f1:b2:a0:ac:a0:
f5:32:f1:ff:d7:16:d5:ad:cc:b0:2e:31:46:a4:ac:
23:3b:9a:72:7a:1d:a2:4d:f0:3d:4f:0d:88:df:5c:
35:d9:1d:42:5a:a3:ec:e7:49:a9:fe:73:ab:4b:a6:
5f:72:36:59:9c:b0:1a:7a:0b:e3:73:35:cb:89:c9:
91:50:c6:38:0c:58:6e:5c:81:b2:f8:21:7f:77:14:
05:64:05:03:8c:52:2b:d8:55:f8:5b:07:e4:94:63:
31:16:0b:66:e1:6a:d6:76:3f:01:fe:18:7e:20:b7:
1f:da:4d:ea:96:15:c7:a5:20:12:5a:49:50:2f:f7:
22:bd:2d:5d:dc:80:28:66:0d:68:20:89:d3:10:0d:
37:80:9b:a4:3e:b7:71:ad:8f:ed:61:ea:6e:8f:e2:
8c:4a:b3:b3:2d:77:77:ab:5c:c8:ad:31:8f:2d:aa:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:41:93:5A:F8:97:F7:25:8F:7E:91:7F:F1:40:89:E5:4F:3C:7C:F1
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/49B3EE6408A111F0A44D8474762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:db:a2:89:f7:c3:e9:4b:15:f3:ce:4d:56:7d:96:fa:e4:11:
e6:cf:d8:05:91:e9:a9:be:4a:2e:d0:50:3e:ad:72:04:99:f8:
2b:dd:7a:d2:3f:b9:16:b0:cf:d1:d5:03:70:af:78:ff:3a:5e:
8a:71:88:05:fe:f7:9b:79:44:e9:ad:72:f5:9d:06:b7:7a:d7:
d3:fa:1f:62:7e:d2:41:a7:a6:17:7b:6f:da:2c:a8:c0:ac:6f:
53:2a:62:ab:e2:a6:3a:50:9e:54:b8:34:bb:03:a9:d1:a7:97:
81:ff:7f:9c:75:98:37:f3:bf:e2:ef:44:e2:19:b5:eb:50:01:
a4:8d:b8:8d:2a:25:ef:78:c2:c3:03:e6:b3:9b:a8:2a:47:2b:
70:66:31:83:ea:a5:d8:81:23:00:4d:01:77:60:28:4b:68:6a:
33:38:23:64:d3:93:98:1f:d9:b0:b5:c3:4a:7f:9c:de:b8:fc:
e3:82:f4:b3:fe:90:bf:e3:57:96:11:ba:03:90:e3:19:6f:24:
cc:4a:17:79:60:0a:d5:a8:d3:22:b0:8b:13:66:b8:2e:0d:5a:
d9:b7:48:ca:d9:c9:8c:6b:51:0e:d3:e8:86:c2:87:c7:7a:bd:
61:55:4e:49:19:81:d1:e3:30:8b:94:b4:a4:52:73:7d:23:c7:
43:c8:4f:0d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB88wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjQxMTE1MjNaFw0yNjAzMjQxMTE1MjNaMBgxFjAU
BgNVBAMTDTY3ZTEzZWNmLTQ0OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDkKDbWsllInOqD9QT0yzvFdGgXEMcPdYL/NRIwVywNpmoKtYo3GnAFOxLE
7GDbAy/+MPU0nID65477hYxMz4YS0SiMnwu/9el0kLMYLjL004wAWvjxsqCsoPUy
8f/XFtWtzLAuMUakrCM7mnJ6HaJN8D1PDYjfXDXZHUJao+znSan+c6tLpl9yNlmc
sBp6C+NzNcuJyZFQxjgMWG5cgbL4IX93FAVkBQOMUivYVfhbB+SUYzEWC2bhatZ2
PwH+GH4gtx/aTeqWFcelIBJaSVAv9yK9LV3cgChmDWggidMQDTeAm6Q+t3Gtj+1h
6m6P4oxKs7Mtd3erXMitMY8tqlWZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUlkGT
WviX9yWPfpF/8UCJ5U88fPEwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzQ5QjNFRTY0MDhBMTExRjBBNDREODQ3NDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh3wwDQYJKoZIhvcNAQEL
BQADggEBAE7boon3w+lLFfPOTVZ9lvrkEebP2AWR6am+Si7QUD6tcgSZ+CvdetI/
uRawz9HVA3CveP86XopxiAX+95t5ROmtcvWdBrd619P6H2J+0kGnphd7b9osqMCs
b1MqYqvipjpQnlS4NLsDqdGnl4H/f5x1mDfzv+LvROIZtetQAaSNuI0qJe94wsMD
5rObqCpHK3BmMYPqpdiBIwBNAXdgKEtoajM4I2TTk5gf2bC1w0p/nN64/OOC9LP+
kL/jV5YRugOQ4xlvJMxKF3lgCtWo0yKwixNmuC4NWtm3SMrZyYxrUQ7T6IbCh8d6
vWFVTkkZgdHjMIuUtKRSc30jx0PITw0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:50:46 2025 by rpki-client