Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5AF0D45ED33F11EFB6FAB557762E951A.roa
File: 5AF0D45ED33F11EFB6FAB557762E951A.roa (raw, json)
Hash identifier: +HNtnlc7ly0xPPrihx//aEOqzRnTjK/45Nm+lTy7sgw=
Subject key identifier: 08:28:29:DD:20:AA:96:88:DE:00:DB:B1:17:3D:67:61:47:88:9D:7B
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 057A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5AF0D45ED33F11EFB6FAB557762E951A.roa
Signing time: Wed 15 Jan 2025 12:50:53 +0000
ROA not before: Wed 15 Jan 2025 12:50:50 +0000
ROA not after: Thu 15 Jan 2026 12:50:50 +0000
asID: 329007
IP address blocks: 102.135.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1402 (0x57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 12:50:50 2025 GMT
Not After : Jan 15 12:50:50 2026 GMT
Subject: CN=6787af2d-515c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:4e:5b:d6:9f:2c:1e:b6:de:7c:7d:e3:a1:
6c:80:ab:39:aa:7f:49:e2:a7:03:5f:47:d2:90:b8:
3f:1b:43:d2:af:f8:e1:83:3d:97:e3:e1:ca:70:42:
b3:b5:2c:cb:76:b7:70:5e:c2:9d:fb:9d:4d:21:cf:
c1:75:ee:01:ed:1e:2d:87:be:b7:f4:ac:44:a8:53:
e1:ad:65:67:15:14:b1:cd:e1:40:ea:39:11:5d:85:
7a:ac:c4:25:8e:3d:64:76:57:f9:00:98:89:6c:52:
7d:ce:cc:d0:65:b3:cc:6e:c3:11:04:81:72:a0:34:
30:e3:94:f9:1a:79:0f:b2:71:94:74:7f:cf:fa:86:
ca:68:56:08:14:ba:f8:0e:90:c3:02:a0:f8:ba:09:
4a:fb:ef:aa:01:22:49:76:33:9d:66:30:23:87:3a:
ed:f4:27:8e:6e:c7:2f:87:8e:ef:90:ff:f4:49:44:
4f:f1:e8:fe:3b:8d:a7:72:e8:a4:1a:37:8b:34:a3:
a4:a1:b4:78:8e:5f:7f:b2:f8:09:99:1f:4e:da:44:
2d:1f:c4:3f:c6:bb:69:66:31:a5:d1:4d:25:c7:62:
c2:79:e2:50:96:0b:c0:71:11:a0:21:63:52:3d:14:
87:cc:b7:a0:90:21:28:23:80:f1:98:9f:ee:02:73:
2e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:28:29:DD:20:AA:96:88:DE:00:DB:B1:17:3D:67:61:47:88:9D:7B
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5AF0D45ED33F11EFB6FAB557762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.6.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:98:45:be:42:90:f2:8c:1d:42:24:6d:55:98:39:a0:1e:a8:
df:5a:32:93:fc:e9:3a:55:93:b5:17:e4:d4:c8:b0:e2:44:55:
bc:87:91:cd:21:da:28:e9:6c:a0:76:3d:07:94:b1:b7:12:b7:
e3:4c:92:d9:1b:c1:1a:51:65:60:46:c6:34:0a:53:b4:e0:15:
12:a8:39:29:87:a0:97:cd:28:ac:08:50:73:5e:87:7e:28:4d:
8a:be:6e:f2:bd:73:d7:df:54:75:a3:38:fe:fc:02:9e:68:d2:
d5:1c:29:d4:1a:a4:e3:fb:1c:4a:c1:f8:37:f8:ed:66:6b:08:
09:1b:44:f6:a4:9c:8e:72:a3:01:f5:90:1c:dc:cd:34:b0:af:
1b:8a:31:4a:24:a1:b0:56:f1:ec:80:df:d6:fa:87:c7:c3:94:
99:30:56:b6:c5:f4:21:61:13:1c:99:25:5b:7d:57:26:58:e1:
f7:ab:37:5e:f5:0b:9c:de:c4:5c:99:96:54:cd:3f:0a:d2:8e:
5f:ce:bd:b3:07:7b:0e:31:b8:21:7c:fb:0c:7a:60:6b:6f:50:
49:dd:31:07:bb:a4:d2:65:a9:90:44:92:00:fb:eb:44:50:9e:
73:69:4e:14:b0:65:2e:9f:95:ae:56:a6:7e:1b:2e:f9:d8:28:
20:7b:95:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:34 2025 by rpki-client