Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/66C30198F40111EF859E6E95762E951A.roa
File: 66C30198F40111EF859E6E95762E951A.roa (raw, json)
Hash identifier: KaefrESADJVZXVSYKCWdj81SWuxup7By0+lmOKFOqwY=
Subject key identifier: 03:C4:72:CF:9A:22:D6:28:FD:FB:F3:D1:A8:23:98:B0:19:C5:98:7F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 06A7
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/66C30198F40111EF859E6E95762E951A.roa
Signing time: Wed 26 Feb 2025 05:20:33 +0000
ROA not before: Wed 26 Feb 2025 05:20:29 +0000
ROA not after: Thu 26 Feb 2026 05:20:29 +0000
asID: 36352
IP address blocks: 102.135.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1703 (0x6a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 26 05:20:29 2025 GMT
Not After : Feb 26 05:20:29 2026 GMT
Subject: CN=67bea4a1-5be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:66:c7:9a:68:d8:1c:39:1c:09:32:57:ee:
32:f1:2a:7a:cc:05:c8:24:03:8f:be:c5:1f:0e:43:
58:a2:a6:d4:b8:82:0a:6f:db:44:ec:4e:e6:ba:9c:
3b:4a:e3:93:90:14:01:29:36:b9:70:38:0a:63:34:
a8:64:ac:62:c5:eb:4f:d2:69:16:6c:f9:38:c2:9a:
2a:5a:58:ef:29:21:bb:c7:81:2d:3d:a9:31:b1:71:
fa:c5:35:ad:87:d2:f6:c1:2d:56:a6:db:db:a0:ca:
9a:d0:7c:9f:ba:54:c5:c1:a2:0c:56:cf:e0:54:27:
9c:f0:21:46:d0:e5:4e:0f:c3:a1:7a:fc:4c:4e:1f:
5d:4d:af:df:cf:2e:0c:c2:eb:59:71:4b:3f:fe:7d:
aa:bb:ab:83:99:41:f3:a3:b4:9e:af:e1:51:28:0b:
5b:6b:ec:29:47:b9:aa:71:ea:a6:84:64:8d:10:01:
22:3f:52:8f:86:79:6a:7f:8a:40:39:8d:92:65:1b:
c1:c1:e6:71:80:f1:ce:d2:38:00:9e:cb:0d:ca:aa:
75:9d:66:fa:94:43:1f:0b:ab:f0:cb:6c:f6:40:39:
6a:74:e5:c2:33:c6:66:b3:24:1b:6f:2e:37:86:4c:
db:fc:10:e8:19:a9:d7:7b:2f:7b:09:9f:d7:14:f0:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C4:72:CF:9A:22:D6:28:FD:FB:F3:D1:A8:23:98:B0:19:C5:98:7F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/66C30198F40111EF859E6E95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.108.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e7:58:a0:c9:ce:13:9e:f3:04:27:d5:b7:f8:ae:12:13:91:
c0:12:d2:4a:f7:b8:46:bb:37:85:71:90:9b:ce:3b:cb:03:77:
29:f1:c7:ba:27:96:9b:4b:f5:1c:03:a8:85:ce:54:75:b0:ef:
fd:16:61:6f:83:45:b0:15:d8:6b:22:9c:18:46:96:85:8b:10:
2c:fb:4a:e2:e0:f7:01:89:b1:8e:c7:c6:02:33:e5:09:9d:9e:
03:7d:1e:9b:5f:ab:41:51:e8:30:d5:8e:c6:fa:ee:2d:98:f1:
83:2f:7d:f2:9d:1e:9f:99:5e:23:c0:4b:e0:c2:35:48:f8:05:
10:ba:47:ab:0f:38:bb:49:b2:f5:00:6b:f7:89:b4:3d:7f:d3:
88:ad:fc:5b:f9:55:72:0c:2a:7e:a7:0b:4c:3c:5c:95:17:8b:
6a:d6:91:ea:58:4a:5c:7e:c1:9e:76:96:7d:04:d1:a8:48:7f:
11:44:90:8c:bd:2f:6d:d6:26:a3:69:92:41:5e:04:a1:5e:33:
88:4e:11:ab:2e:75:4d:e4:ea:99:fb:d9:22:3b:e0:25:92:d7:
b7:96:f3:f7:c6:33:b7:91:d1:4b:74:98:c2:fa:11:19:7f:23:
f5:d4:28:aa:af:4f:41:dd:ac:8d:d4:62:ff:58:8d:de:4a:17:
2a:c5:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:56:55 2025 by rpki-client