Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/689A2408F34B11EF8FFDF2BA762E951A.roa
File: 689A2408F34B11EF8FFDF2BA762E951A.roa (raw, json)
Hash identifier: EoBUpctNtFxt22o6Jw+cWtM0OqPqAM44zVxAZOU2vRA=
Subject key identifier: 33:C8:85:4D:27:FD:A9:A9:BC:15:6D:8F:3D:07:0F:50:93:4E:EE:FE
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 069F
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/689A2408F34B11EF8FFDF2BA762E951A.roa
Signing time: Tue 25 Feb 2025 07:37:47 +0000
ROA not before: Tue 25 Feb 2025 07:37:44 +0000
ROA not after: Thu 26 Feb 2026 07:37:44 +0000
asID: 43260
IP address blocks: 102.135.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1695 (0x69f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 25 07:37:44 2025 GMT
Not After : Feb 26 07:37:44 2026 GMT
Subject: CN=67bd734b-527d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:5b:27:3f:61:bb:2e:4c:aa:f9:20:92:1f:
62:9f:e4:68:9e:b5:25:24:62:20:ac:c6:ea:82:ac:
a1:b4:f3:4d:80:95:02:dd:6a:f5:a3:af:5b:0d:9c:
e6:f7:34:b3:47:82:bf:11:ff:4a:b1:f1:ec:40:10:
fb:08:cc:8e:4f:da:84:73:a8:1e:72:6e:00:4e:3b:
02:4b:5b:24:ba:64:9e:08:8a:24:15:40:97:5b:c6:
3a:d6:c5:66:00:4e:d9:90:3a:76:67:7a:19:07:6f:
d9:57:af:fd:33:66:03:1b:f0:5b:0d:79:d1:e2:4d:
6f:60:1a:ff:a3:f5:8c:cb:c1:7d:df:43:50:d6:73:
7f:07:40:73:e9:c7:23:52:e0:9a:10:63:fc:05:de:
b0:f9:cd:8c:a5:29:0f:22:fb:b1:42:b3:0c:00:96:
46:ff:20:72:2e:f2:42:87:30:de:f5:b0:9f:6c:1a:
2e:8f:50:22:d0:71:f0:23:ea:62:97:07:30:ce:da:
da:d0:12:ee:a9:35:e0:63:5e:3d:a3:95:16:ff:b6:
b4:bf:2d:11:e1:18:0d:4a:b0:fd:a2:93:3a:08:1a:
de:e6:4f:4b:89:0a:04:d9:d7:3a:3f:3e:ca:d7:df:
ba:38:a2:f7:68:8f:96:76:e2:01:99:6d:58:a3:c6:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C8:85:4D:27:FD:A9:A9:BC:15:6D:8F:3D:07:0F:50:93:4E:EE:FE
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/689A2408F34B11EF8FFDF2BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.99.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a2:9b:19:d1:91:81:46:b8:98:3a:85:7b:86:bc:c2:fb:19:
bb:e6:7e:86:8d:d6:38:7d:8b:07:ce:7a:93:6d:55:8e:f5:1f:
2a:6c:59:b9:f1:d1:4c:60:83:d0:6a:62:02:fb:dc:51:bf:2b:
42:4b:a6:0a:e2:db:1b:1d:d3:71:9f:3c:eb:b1:59:40:7a:01:
c9:77:94:0e:b4:4a:c4:b3:38:df:93:a9:1d:1a:85:14:91:9a:
e2:5d:8b:18:b2:b5:fb:ca:33:c2:9e:eb:64:b8:a7:7b:3f:42:
44:b5:f5:b7:29:c9:12:e9:23:0a:d3:08:62:fe:44:a8:03:07:
68:05:52:46:ae:1d:bf:b2:77:ea:eb:6d:a4:5a:b2:c8:fc:f4:
c3:f6:bf:21:36:67:6c:b4:32:c0:4d:0a:da:78:05:dc:36:0f:
c5:1d:4e:4c:30:66:8b:05:e5:27:9a:7b:ac:a9:40:21:ea:28:
93:80:59:4d:49:e0:ee:ca:5b:e7:76:a2:e7:7c:bc:82:e1:d6:
28:55:8b:e0:a2:f2:30:59:54:70:29:d0:5c:25:ea:33:c8:e2:
11:bb:7b:31:92:41:25:36:56:bf:2d:19:72:78:d1:d9:6e:2e:
20:fb:22:03:f4:3a:97:d8:29:7b:3e:12:71:a5:52:c3:c0:dc:
30:ed:f3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:11 2025 by rpki-client