Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/67E65F32042011F0980D825D762E951A.roa
File: 67E65F32042011F0980D825D762E951A.roa (raw, json)
Hash identifier: nbCoZtz5L2rsdiJx3xGUCsTVovknuEumzgrz3Uzpaak=
Subject key identifier: 80:98:AA:27:ED:16:56:6D:C1:89:A4:9A:8D:D6:E9:CF:92:D7:CF:2F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0749
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/67E65F32042011F0980D825D762E951A.roa
Signing time: Tue 18 Mar 2025 17:42:48 +0000
ROA not before: Tue 18 Mar 2025 17:42:44 +0000
ROA not after: Tue 17 Mar 2026 17:42:44 +0000
asID: 329007
IP address blocks: 102.135.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1865 (0x749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 18 17:42:44 2025 GMT
Not After : Mar 17 17:42:44 2026 GMT
Subject: CN=67d9b098-7749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:e9:90:a7:42:fd:de:b9:e1:e3:14:cc:1e:
0d:7e:56:16:3e:24:6e:e5:a1:11:cf:7a:ab:91:7f:
d6:cd:48:ff:aa:1a:7c:8a:4e:78:53:76:51:94:83:
b8:83:a2:9c:94:ec:06:7a:98:0e:bf:ff:b3:97:fd:
0c:01:22:f8:96:cf:e9:40:b7:9b:4f:5a:66:bb:a6:
b8:19:79:3e:1e:2c:3c:b0:b8:a5:ea:3e:61:23:8d:
e5:6e:b0:2e:3a:26:36:1f:1f:ad:24:5a:73:8e:e9:
0b:b3:28:e6:cf:07:9d:1d:e8:ff:b2:7a:07:3a:f2:
86:b1:fe:75:1c:80:8c:7c:82:d0:b3:e6:26:75:d1:
21:71:ff:2f:1e:17:99:fa:71:19:87:1e:f7:59:f5:
67:43:19:1f:6d:2a:e2:eb:72:95:00:ba:2f:c1:b0:
6e:b8:be:0b:30:82:fe:c7:e2:a3:72:37:91:80:ec:
46:76:55:0e:3b:f3:80:a0:eb:05:0b:43:dc:82:06:
5d:00:d3:5e:65:07:7a:20:a7:1b:98:ad:ca:81:44:
34:6c:b7:74:0e:9f:f6:ff:9b:6d:5a:8d:81:6a:81:
06:6f:db:7a:82:fe:48:f5:2a:b6:24:f2:7d:e7:48:
98:bc:76:0d:fe:43:d3:fa:97:b6:61:e7:da:0c:73:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:98:AA:27:ED:16:56:6D:C1:89:A4:9A:8D:D6:E9:CF:92:D7:CF:2F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/67E65F32042011F0980D825D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.80.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ac:d6:0f:f1:48:ce:da:d2:62:60:33:d2:6d:14:a4:28:63:
ff:24:f0:2c:f6:cd:ea:10:81:d8:19:29:55:f4:02:20:b9:f9:
78:a1:cb:9d:12:4d:46:01:6e:c7:a8:13:33:ce:7e:a8:53:d9:
de:5e:cc:05:27:a4:de:24:ff:6a:08:35:fe:a7:7b:25:45:d1:
4e:24:6c:19:1b:2b:d0:0a:82:51:b3:ba:a2:38:96:8f:6a:9f:
f3:69:4d:47:62:b5:1f:48:ea:ab:d8:93:62:19:e5:fe:91:c7:
7e:31:c1:76:44:ac:0b:1b:91:db:dd:a9:fc:a0:47:92:6d:f5:
8a:1b:69:83:d3:02:6a:c4:4f:de:e3:f2:40:55:dc:a4:4d:3f:
6f:69:ce:19:85:f8:9c:05:3b:5d:19:ab:8d:50:28:8b:42:68:
7d:7d:ad:6a:9a:10:9e:0d:ba:c5:00:24:4b:c2:18:cf:bb:ea:
5a:31:67:e9:bd:7c:56:f5:f6:1e:ef:54:7e:1b:c0:f3:31:56:
fc:be:69:c7:a7:2e:cc:4a:47:71:01:84:89:71:da:bc:4e:39:
c9:aa:fd:12:f3:2a:f0:22:8d:df:11:bf:bb:ae:b6:26:b4:e5:
0f:61:a0:67:16:3a:1c:06:f5:84:87:e2:5a:6c:04:02:c9:3d:
67:74:af:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:39 2025 by rpki-client