Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6B9C751ED33611EFBA67389E762E951A.roa
File: 6B9C751ED33611EFBA67389E762E951A.roa (raw, json)
Hash identifier: abBwIIobNp101rA5X+Pbj8UAV9e/TIgJ/pFgqxpsa/8=
Subject key identifier: 06:D8:E0:9B:8D:5E:31:E8:F1:36:91:AE:1A:08:58:77:73:5E:C1:45
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 054C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6B9C751ED33611EFBA67389E762E951A.roa
Signing time: Wed 15 Jan 2025 11:46:56 +0000
ROA not before: Wed 15 Jan 2025 11:46:52 +0000
ROA not after: Thu 15 Jan 2026 11:46:52 +0000
asID: 53356
IP address blocks: 102.135.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356 (0x54c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 11:46:52 2025 GMT
Not After : Jan 15 11:46:52 2026 GMT
Subject: CN=6787a030-9bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:9b:aa:13:5b:61:46:36:00:ea:27:d3:54:
fd:d3:2d:16:96:2a:64:7c:ab:b3:ed:9c:43:3e:79:
51:e3:55:93:47:8b:25:4a:2b:dc:4f:4d:24:71:37:
e3:ac:70:14:41:19:f5:ff:d7:51:ad:0d:03:20:0c:
57:c5:eb:d8:90:db:33:ef:af:dd:c0:79:1a:65:21:
a0:8a:e6:51:82:97:fd:1f:95:b3:f0:06:29:97:a1:
6e:2f:a5:4a:98:d6:5f:67:08:6c:4d:f1:de:9f:2d:
ff:20:a1:cf:17:4d:34:c5:92:d0:ad:f3:07:ee:0a:
cd:fa:22:ac:ff:6c:00:c5:71:7d:b0:05:e5:36:c3:
a8:ed:ae:62:e7:07:ed:0b:8b:d6:0c:8f:b4:2e:7b:
9d:24:d0:83:9a:2d:20:92:52:6e:18:1d:ea:46:c5:
65:4a:63:31:af:4e:b0:45:e5:a7:7f:9f:18:f2:87:
6b:ca:80:a6:04:c2:7e:81:b0:58:1a:5e:07:a8:f2:
95:d3:74:3f:f8:0b:c1:0f:3b:7d:99:b1:2e:3d:65:
9e:fb:4f:8f:78:12:56:49:cd:f8:21:1e:ad:6e:95:
d9:ee:66:9b:5a:f1:4e:18:8e:5c:ab:be:30:b0:e5:
86:00:c3:30:ea:15:86:ec:3e:14:b3:f6:1b:9d:aa:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D8:E0:9B:8D:5E:31:E8:F1:36:91:AE:1A:08:58:77:73:5E:C1:45
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6B9C751ED33611EFBA67389E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.43.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a2:eb:2d:b4:ef:8b:80:35:d1:63:7b:e5:72:93:aa:af:49:
d5:74:98:e1:b6:45:bf:b4:a3:d6:e6:d9:25:64:48:e7:4b:55:
5d:d3:aa:ff:15:4e:e9:84:75:da:20:05:48:6d:fd:fe:42:12:
2f:52:f9:25:e4:80:6b:9f:88:7b:ff:0d:f3:32:9e:38:f4:a6:
bc:51:c1:4e:ab:1d:22:6a:30:e3:ff:da:97:f5:c8:44:e2:d0:
d2:50:15:e9:1e:3e:1d:2b:bc:7d:69:11:16:e3:93:b7:61:ed:
e2:30:61:3d:89:03:a8:be:3b:9a:2f:b5:93:7e:66:84:b1:fd:
1d:35:70:e4:53:3c:c7:3b:bb:ea:f0:00:5f:47:da:1f:38:4f:
c4:d6:65:a9:2b:ea:c9:56:8a:32:a8:06:5a:d8:07:e3:0b:56:
1c:94:05:60:61:a1:fb:85:bd:09:27:4d:65:13:5a:f3:93:33:
7a:9d:e9:34:ab:d6:34:83:67:ec:e7:90:64:da:73:ab:e4:0b:
7d:5f:f7:5d:6e:e9:bd:b0:58:71:fa:72:e6:81:0e:c6:17:de:
b1:09:5c:19:13:d4:2f:87:1d:1c:a8:f9:e8:c8:ab:e9:94:e6:
0f:9f:7b:86:93:e5:3d:b1:9a:7d:81:54:bd:ca:16:2e:13:c7:
f2:94:32:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:08:28 2025 by rpki-client