Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/547C20DC08A111F0A02F8974762E951A.roa
File: 547C20DC08A111F0A02F8974762E951A.roa (raw, json)
Hash identifier: wjr0dF9EDmaZGnlNn/IRsJhmeIx/CNO2FSG1XNP7tXU=
Subject key identifier: 8D:C5:CF:A7:72:C7:0D:03:54:CB:0D:2C:2E:86:6F:27:2C:A1:00:D5
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07D1
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/547C20DC08A111F0A02F8974762E951A.roa
Signing time: Mon 24 Mar 2025 11:15:45 +0000
ROA not before: Mon 24 Mar 2025 11:15:41 +0000
ROA not after: Tue 24 Mar 2026 11:15:41 +0000
asID: 2914
IP address blocks: 102.135.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2001 (0x7d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 11:15:41 2025 GMT
Not After : Mar 24 11:15:41 2026 GMT
Subject: CN=67e13ee1-a0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bb:25:c5:c6:04:75:b0:18:95:bf:7a:ee:5d:
9e:42:d2:0f:73:2c:9a:0f:53:aa:a7:41:46:03:5f:
b7:fe:6c:3a:25:41:dc:38:fe:6e:47:e9:91:78:ee:
02:93:79:c9:39:2d:cd:90:e3:e4:fe:95:54:53:65:
44:fd:ba:61:f3:17:7f:f8:64:b1:eb:e6:23:a0:98:
b3:74:9d:94:de:11:b9:7d:0c:cc:ab:43:5e:89:f3:
b6:e9:66:9b:92:25:ae:60:1b:62:ac:0c:f6:aa:49:
72:2e:00:b6:34:4d:3b:f7:97:34:ee:00:79:20:43:
2f:ba:ab:7c:c4:46:3f:a2:d1:09:de:95:b7:56:65:
91:f7:f1:9a:3c:7f:6c:b9:79:27:2d:c6:b2:ba:62:
82:28:18:e5:86:66:90:00:ba:28:3d:21:6c:c8:92:
59:66:28:7a:bc:0a:2f:02:75:33:44:eb:4b:bc:fe:
4b:57:64:c4:01:11:3d:74:50:66:62:a9:73:b6:1c:
c7:0b:af:cd:e8:49:d5:21:f0:70:f7:9b:68:db:5c:
de:91:d7:6c:4d:b2:b4:eb:59:ac:76:e9:eb:06:2f:
ae:9f:a8:8b:a6:ba:17:fe:b2:e3:3f:7d:3d:a2:d1:
8b:16:f0:44:c2:a0:a0:a9:0b:9e:17:ea:47:10:6e:
3f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C5:CF:A7:72:C7:0D:03:54:CB:0D:2C:2E:86:6F:27:2C:A1:00:D5
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/547C20DC08A111F0A02F8974762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.125.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:53:29:77:10:b4:5a:8e:56:63:91:70:cf:93:d4:8e:94:eb:
0b:44:79:b9:77:e6:e8:df:29:54:b0:1c:55:e5:14:d1:ab:3b:
ed:f2:93:dd:5d:29:bf:67:f9:ab:9b:03:3f:77:61:eb:43:ca:
a5:e3:ce:6d:47:33:06:6d:9e:05:9f:4d:dd:0b:f9:d6:91:99:
f9:5a:ce:1f:3a:50:17:cd:3a:e3:3e:8b:a7:ba:e5:90:60:1c:
77:10:f2:28:fb:95:78:bb:2c:e7:4b:fb:4c:27:ad:8e:a1:18:
05:25:78:d3:20:f3:94:4e:72:a2:48:63:56:7a:45:f1:d9:13:
5d:0f:74:3c:0f:cc:1d:d0:d1:70:ae:00:c5:f2:17:28:75:ac:
80:35:3a:9c:03:ae:49:c1:bf:c8:21:43:d2:ac:41:43:1b:05:
09:59:e9:11:9a:73:0e:df:0d:b4:aa:fd:88:37:d6:0b:22:ae:
01:5b:91:c5:f5:8b:fb:aa:db:f7:34:2d:33:46:62:09:d2:47:
4f:44:2d:6b:98:8b:e5:a0:f2:56:fd:97:6b:5f:68:b7:23:46:
a2:cb:a5:85:b5:fb:d7:5b:6d:fe:9d:90:63:18:a7:75:1e:04:
d5:76:5e:b8:ae:69:bd:76:6a:a2:6a:04:f1:23:56:cf:31:d5:
8e:38:2d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:02 2025 by rpki-client