Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/63486BD6096C11F09EC80A4C762E951A.roa
File: 63486BD6096C11F09EC80A4C762E951A.roa (raw, json)
Hash identifier: 3BeW9sK0SresnOJcpAePxgR9suukKjTVoW1thZW620c=
Subject key identifier: 43:CA:34:1D:D9:EE:30:3E:78:F4:96:AB:D4:89:47:19:51:39:FA:0D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0814
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/63486BD6096C11F09EC80A4C762E951A.roa
Signing time: Tue 25 Mar 2025 11:29:18 +0000
ROA not before: Tue 25 Mar 2025 11:29:14 +0000
ROA not after: Wed 25 Mar 2026 11:29:14 +0000
asID: 2914
IP address blocks: 102.135.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2068 (0x814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:29:14 2025 GMT
Not After : Mar 25 11:29:14 2026 GMT
Subject: CN=67e2938d-fcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:ef:5e:16:8f:b2:14:37:1e:a3:15:a7:f4:
6e:95:5b:9c:3e:a3:5e:09:4c:dd:fd:1e:29:49:d4:
a0:32:f8:b6:d9:12:ba:63:ce:c9:c2:b0:78:32:4e:
c5:84:9b:b8:64:69:66:ba:80:71:2e:d6:9d:43:57:
14:07:d5:cf:c5:2b:85:08:37:5e:ab:52:dc:3e:3a:
f3:e3:b2:de:96:fb:05:d7:26:af:95:f3:83:b8:f7:
6a:90:4e:d9:42:49:33:52:21:e8:a8:e6:84:f9:a4:
64:84:fb:cc:49:7b:35:ed:eb:12:06:ef:aa:94:13:
cb:e0:c9:38:41:f7:96:cf:2e:97:ac:03:77:28:a5:
e7:22:a6:a3:3c:f2:10:8c:ef:4d:d3:6f:ce:63:da:
68:8d:aa:f5:b4:d5:65:c7:f0:9d:ba:e6:2d:dc:a6:
b2:bc:cc:b1:1a:e3:25:20:3b:22:92:1a:aa:92:ad:
1d:2e:36:e0:30:72:f3:49:34:5e:b4:4c:65:e7:be:
13:6e:05:23:77:ab:c3:ca:72:fb:03:99:ab:8a:cc:
30:eb:74:b2:c9:54:5b:2c:ff:3c:aa:fa:62:bd:2e:
3b:c1:1a:53:cb:f5:1f:a6:84:44:1c:79:ef:a6:7f:
d5:db:cf:27:98:40:cb:98:67:73:52:0f:fa:62:63:
75:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CA:34:1D:D9:EE:30:3E:78:F4:96:AB:D4:89:47:19:51:39:FA:0D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/63486BD6096C11F09EC80A4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.69.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:77:98:46:b2:43:e0:a2:ef:9f:b1:d5:c0:da:ee:bc:e2:a8:
98:2a:b8:98:c9:ed:ca:ff:97:8b:ff:1b:5c:7f:24:95:d4:6e:
4b:c7:59:6d:75:70:42:5b:08:e8:12:b1:19:23:37:60:d6:2b:
a5:54:30:19:0c:1e:e1:2d:17:67:b6:78:0e:b9:59:a9:18:a3:
c1:4f:c4:17:38:19:ed:40:86:f2:84:17:ff:e6:b1:76:67:ae:
a6:8d:b1:90:8e:18:76:88:46:18:8b:69:a0:c0:d5:1e:ef:76:
e6:c6:33:7e:1e:fc:f5:80:72:c4:34:12:6c:32:0f:4a:b5:f9:
10:c0:6b:21:9a:1f:07:13:65:9f:21:b1:9e:93:4a:15:b7:da:
6a:49:d8:93:33:f0:48:f3:56:4b:a7:0a:a9:84:da:1c:4f:f6:
f1:e3:80:47:3b:77:de:2f:8a:34:3d:88:a0:97:5e:be:06:36:
bc:e8:78:22:6a:94:cb:41:02:d9:3d:7c:96:a2:8f:ec:77:1f:
6e:34:64:53:71:a8:16:f7:ee:c1:53:9a:95:02:83:20:96:1e:
d6:12:13:98:bd:b3:7b:8e:5a:32:a1:53:26:e0:4a:0a:9f:d4:
bd:54:43:8c:17:2f:16:18:bb:2f:66:b1:b2:96:67:0a:a1:88:
0b:8f:ed:74
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjUxMTI5MTRaFw0yNjAzMjUxMTI5MTRaMBgxFjAU
BgNVBAMTDTY3ZTI5MzhkLWZjZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzBO9eFo+yFDceoxWn9G6VW5w+o14JTN39HilJ1KAy+LbZErpjzsnCsHgy
TsWEm7hkaWa6gHEu1p1DVxQH1c/FK4UIN16rUtw+OvPjst6W+wXXJq+V84O492qQ
TtlCSTNSIeio5oT5pGSE+8xJezXt6xIG76qUE8vgyThB95bPLpesA3copecipqM8
8hCM703Tb85j2miNqvW01WXH8J265i3cprK8zLEa4yUgOyKSGqqSrR0uNuAwcvNJ
NF60TGXnvhNuBSN3q8PKcvsDmauKzDDrdLLJVFss/zyq+mK9LjvBGlPL9R+mhEQc
ee+mf9XbzyeYQMuYZ3NSD/piY3U9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQ8o0
HdnuMD549Jar1IlHGVE5+g0wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzYzNDg2QkQ2MDk2QzExRjA5RUM4MEE0Qzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh0UwDQYJKoZIhvcNAQEL
BQADggEBAC13mEayQ+Ci75+x1cDa7rziqJgquJjJ7cr/l4v/G1x/JJXUbkvHWW11
cEJbCOgSsRkjN2DWK6VUMBkMHuEtF2e2eA65WakYo8FPxBc4Ge1AhvKEF//msXZn
rqaNsZCOGHaIRhiLaaDA1R7vdubGM34e/PWAcsQ0EmwyD0q1+RDAayGaHwcTZZ8h
sZ6TShW32mpJ2JMz8EjzVkunCqmE2hxP9vHjgEc7d94vijQ9iKCXXr4GNrzoeCJq
lMtBAtk9fJaij+x3H240ZFNxqBb37sFTmpUCgyCWHtYSE5i9s3uOWjKhUybgSgqf
1L1UQ4wXLxYYuy9msbKWZwqhiAuP7XQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:19 2025 by rpki-client