Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/52F3DC78096E11F094824658762E951A.roa
File: 52F3DC78096E11F094824658762E951A.roa (raw, json)
Hash identifier: xBBwSpiM9a5Ul/ADq4pBhMzZBsExqDdgrN6S1TeXYto=
Subject key identifier: 08:31:67:34:77:06:25:43:67:59:E3:20:8D:06:23:1E:D0:98:76:61
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 083C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/52F3DC78096E11F094824658762E951A.roa
Signing time: Tue 25 Mar 2025 11:43:09 +0000
ROA not before: Tue 25 Mar 2025 11:43:05 +0000
ROA not after: Wed 25 Mar 2026 11:43:05 +0000
asID: 2914
IP address blocks: 102.135.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2108 (0x83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:43:05 2025 GMT
Not After : Mar 25 11:43:05 2026 GMT
Subject: CN=67e296cd-3d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:1b:27:f8:f3:4d:7b:2a:1f:bc:d9:e4:32:
94:9f:b5:74:82:98:c3:4b:3b:8e:df:df:7f:3e:02:
68:ca:e0:90:b0:2b:39:05:2f:01:4f:03:92:a3:0b:
e6:3c:35:4c:b1:db:c4:4d:c9:f8:92:19:ad:2c:d9:
c0:4e:05:85:44:25:cb:1e:9c:17:43:5f:cb:bb:e1:
09:2b:bd:53:7e:a2:a1:52:46:e6:72:ff:26:b1:a2:
94:20:9a:63:fe:d0:8f:a1:98:1c:71:53:21:aa:e4:
d9:c6:2d:88:08:b0:7e:9b:ff:a7:0c:34:13:28:20:
86:bf:e7:7a:0e:06:34:c7:d6:97:38:20:d3:33:6b:
88:c7:cb:e0:3f:3c:43:01:22:11:73:97:b2:dc:0f:
22:71:ee:f2:a3:6c:2c:ff:56:c4:bf:5d:f1:9b:30:
f7:50:1e:4f:53:34:74:09:cd:67:c3:18:dd:85:54:
12:b8:0c:06:4e:dd:d7:f1:11:29:68:5a:2e:0a:60:
14:7d:33:32:91:02:e4:78:1c:5e:71:4c:a2:f5:6c:
49:44:28:df:2c:3a:29:bf:36:d6:52:26:00:9f:6b:
5f:96:6c:73:ac:3a:da:7a:5b:61:e3:9a:3c:af:93:
59:ce:ee:dc:11:7b:ec:cc:e5:ab:9b:7d:fc:73:27:
2e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:31:67:34:77:06:25:43:67:59:E3:20:8D:06:23:1E:D0:98:76:61
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/52F3DC78096E11F094824658762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.89.0/24
Signature Algorithm: sha256WithRSAEncryption
df:d8:fa:00:e8:fd:0f:a2:9b:0d:65:c8:69:b8:8b:c0:e8:6c:
90:ee:d0:d4:29:f0:2b:d1:cf:d6:c9:ef:73:b5:7c:b9:b9:1d:
d6:82:01:4c:3c:49:fa:b6:5d:6b:39:db:ba:a3:ea:94:36:26:
9f:bd:c2:7b:b7:9d:78:10:c8:01:cc:c1:5a:65:31:62:04:71:
67:c6:c2:b5:35:78:8e:d7:68:fe:cc:b3:7b:09:35:2d:f3:b6:
ce:16:70:bb:59:36:68:f2:ac:d8:63:bd:07:1e:db:ee:a3:0c:
3e:85:b2:2a:8e:48:53:20:f2:e5:e9:2a:bd:87:0f:93:36:1d:
12:60:17:93:b4:26:1c:a6:69:1d:42:c1:23:3e:a6:06:87:c4:
3b:d6:7b:e5:45:02:b9:ce:2f:76:65:4c:1c:15:b1:8f:0d:5e:
d7:0e:eb:cc:30:ed:e4:ee:cb:43:71:78:4e:fe:09:9e:08:c4:
87:ff:41:33:6b:9a:fd:07:cf:61:0b:d0:cd:fa:35:f9:f1:e3:
25:24:35:c9:70:f2:48:09:5a:7b:8e:df:3a:5e:30:89:24:a7:
30:ab:0a:a2:3e:c0:2b:9d:d4:e5:87:24:d2:0a:33:34:93:8b:
6a:1b:ed:63:67:f2:5c:e9:e3:a6:cf:c1:c3:b6:3f:26:f9:56:
1a:cc:2f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:42 2025 by rpki-client