Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4C2C1514DA5B11EF865EC6A0762E951A.roa
File: 4C2C1514DA5B11EF865EC6A0762E951A.roa (raw, json)
Hash identifier: ikQ2WBQqqVqY7ypYITUByYSZnmttM+Li9ME2k5JSpzM=
Subject key identifier: BD:0C:FD:C1:7F:0A:54:43:5A:9D:E9:3F:F5:23:F6:6F:43:2A:70:95
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0598
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4C2C1514DA5B11EF865EC6A0762E951A.roa
Signing time: Fri 24 Jan 2025 13:58:33 +0000
ROA not before: Fri 24 Jan 2025 13:58:29 +0000
ROA not after: Sat 24 Jan 2026 13:58:29 +0000
asID: 329007
IP address blocks: 102.135.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1432 (0x598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 24 13:58:29 2025 GMT
Not After : Jan 24 13:58:29 2026 GMT
Subject: CN=67939c89-4531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:20:9f:ec:78:05:cd:9a:fd:f9:d5:8f:03:
4e:9e:31:4d:22:ec:e7:21:07:8b:87:21:11:ff:ce:
f8:34:f3:f6:87:4c:2b:eb:3c:68:3b:c2:1d:c4:93:
db:0a:83:b0:7f:95:bf:65:1f:bd:d7:eb:46:a0:98:
af:ed:4c:a0:78:cc:27:cb:91:73:0a:80:5a:b4:16:
75:0e:4e:75:7c:cb:2b:e0:4c:e7:c0:b7:2e:1b:bc:
a2:fb:f5:f6:89:3b:e2:12:f0:ea:88:a2:ea:a6:58:
b8:a3:1a:b1:45:65:ca:8a:c7:8c:7f:3d:96:95:f3:
d8:0b:06:c8:66:e6:aa:f3:95:c2:1f:1c:d6:39:0e:
8f:0d:61:d0:b6:8f:f9:65:b6:cd:8e:8d:d2:7b:4f:
04:8e:f8:82:45:c9:0c:dd:04:a3:e8:23:94:6d:f8:
92:ab:62:40:5f:88:fe:fa:72:42:83:a2:68:db:f0:
31:16:b4:58:3b:f4:c4:27:50:b9:14:d5:ad:83:21:
a4:57:75:83:10:a0:de:c3:41:bc:94:63:48:c9:80:
ac:c6:01:69:ee:fb:b5:b3:b0:7e:56:8c:e4:a5:bd:
96:99:20:d8:ad:6b:e8:0f:09:ce:58:ab:61:b3:11:
7d:6d:9f:71:1b:6c:d2:a5:45:71:f8:c3:8c:a9:2f:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0C:FD:C1:7F:0A:54:43:5A:9D:E9:3F:F5:23:F6:6F:43:2A:70:95
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4C2C1514DA5B11EF865EC6A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.124.0/22
Signature Algorithm: sha256WithRSAEncryption
91:66:54:79:b1:d8:43:af:b5:50:f1:cd:8e:85:c6:2b:57:63:
24:75:ae:95:09:2a:39:9a:ed:b6:da:64:eb:25:bb:12:bd:4d:
87:e7:c5:66:8b:23:f5:d5:65:d1:fb:76:1d:04:1d:de:42:36:
2d:45:d4:04:37:45:f4:ce:75:d8:56:fe:ed:8c:b1:23:85:6f:
1c:36:fe:fa:be:0a:7c:79:ba:1b:f6:76:5b:b7:5b:78:9c:f6:
bd:e6:4d:ef:a6:27:72:5c:3d:34:06:59:ad:03:6f:3a:9c:22:
f4:26:51:65:48:e7:59:21:84:a2:28:05:90:fe:ad:3d:42:98:
f2:7f:02:70:e9:52:89:ac:11:76:e4:11:71:73:62:3d:90:5f:
69:40:41:e9:d9:ff:ee:2d:fd:4e:e6:c4:84:ac:83:67:13:a5:
7b:99:b5:b0:7a:73:11:d2:77:d5:98:96:ec:4b:1b:0a:e5:9d:
dc:08:78:e0:ae:c5:ed:b9:e4:32:74:82:20:0a:03:41:4b:07:
71:57:f5:8a:1e:6a:fe:af:78:40:e9:e8:8d:6f:a5:d4:ab:9c:
20:43:0c:f2:4f:2f:25:d5:7c:3e:67:24:b8:ec:bf:cf:1b:08:
dd:8e:69:81:7e:2d:26:c7:41:3a:b2:03:e6:e4:fa:29:53:1f:
78:35:9c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:17 2025 by rpki-client