Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4B76E9E2096C11F0BF6ABA4B762E951A.roa
File: 4B76E9E2096C11F0BF6ABA4B762E951A.roa (raw, json)
Hash identifier: oO+yNsIReSEnr5AT8q86R2vM+gJwcSB/ZfLwsf0iH2E=
Subject key identifier: 31:0E:B1:28:5F:9E:79:6D:5F:23:44:6E:00:09:66:90:35:C6:A4:99
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0810
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4B76E9E2096C11F0BF6ABA4B762E951A.roa
Signing time: Tue 25 Mar 2025 11:28:38 +0000
ROA not before: Tue 25 Mar 2025 11:28:27 +0000
ROA not after: Wed 25 Mar 2026 11:28:27 +0000
asID: 2914
IP address blocks: 102.135.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2064 (0x810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:28:27 2025 GMT
Not After : Mar 25 11:28:27 2026 GMT
Subject: CN=67e29366-6015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:63:2e:6a:09:62:ad:7b:49:76:d6:d8:5a:16:
55:21:aa:bb:f9:ce:df:d0:cb:11:21:53:cd:de:13:
b6:a2:d5:a1:8a:2c:25:5d:d8:10:c5:fd:ff:15:08:
e7:02:58:d0:80:2f:0f:96:9e:3c:16:b4:50:ea:23:
9f:06:d8:01:4f:6f:be:49:63:2e:ab:9c:70:58:66:
66:39:8f:ce:3e:3a:c5:47:c3:72:59:78:9e:01:3a:
a6:db:7e:1f:e4:6e:ed:65:91:07:59:b5:d7:8f:82:
f9:fd:94:5d:50:91:fc:20:1b:69:3c:56:43:fc:67:
24:9f:eb:54:3f:4f:6e:22:54:d4:8e:9c:01:6c:d8:
3c:36:df:b8:d1:ee:1a:33:87:fd:9c:b8:4d:24:57:
86:85:49:20:f9:93:e0:90:0c:e7:90:61:c3:4f:a1:
23:7b:6d:99:d7:62:d1:ab:47:14:ad:ad:c1:b5:ce:
df:76:f4:9c:0d:78:e6:dc:f7:5f:30:80:83:54:c3:
4e:7d:bd:58:23:73:ee:c7:35:24:47:6f:6d:6f:e6:
67:2d:b3:8e:60:9b:1c:40:98:7e:1f:12:5f:31:dd:
e8:cf:0e:fe:b3:9b:99:f6:e4:31:84:79:5b:52:f4:
c5:26:99:e4:e3:c4:8a:70:46:65:de:29:94:ef:4c:
f4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0E:B1:28:5F:9E:79:6D:5F:23:44:6E:00:09:66:90:35:C6:A4:99
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4B76E9E2096C11F0BF6ABA4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.67.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:d1:34:cf:d1:91:c2:a4:ea:74:07:3f:cb:75:f3:e9:36:04:
38:76:48:18:dc:34:f2:03:07:7a:fc:24:1d:1c:89:2a:6a:61:
59:9c:8c:80:94:ec:90:57:8e:19:d1:53:36:34:4d:3b:54:f1:
c1:cc:35:2b:b1:34:2d:09:82:89:1c:9a:3c:18:75:9b:68:1d:
04:ae:94:62:4e:ad:15:70:ec:41:1a:5b:d0:a2:02:27:e2:6b:
13:1e:36:9d:73:72:ba:31:e4:c2:2b:10:d4:de:25:f0:01:5b:
20:0d:0d:5c:66:8a:80:dc:f8:51:a1:d8:ba:7f:df:33:d9:c4:
1d:09:4a:6c:c7:bf:32:cb:f5:0f:19:00:19:5a:be:c5:91:94:
31:24:5b:00:cf:0e:a8:45:5a:b3:b3:52:63:82:b6:81:9b:c6:
6e:07:21:1c:77:75:7d:6d:66:bf:7c:6a:49:ab:e6:ea:f9:b5:
23:26:94:f9:a1:ce:32:9a:79:80:b9:ba:46:14:00:23:e2:35:
87:70:fd:e0:a1:9c:99:70:0f:ca:f7:d7:86:76:5c:1e:b8:4d:
b8:a3:e6:8d:df:ae:a6:5e:ae:32:0b:ba:38:3d:dc:12:be:5f:
d8:9c:99:c2:7e:ff:8f:58:5c:e4:00:b7:e4:1b:6e:fd:0c:59:
35:fe:ca:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:03 2025 by rpki-client