Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6D0AAA640A1411F08F14CD51762E951A.roa
File: 6D0AAA640A1411F08F14CD51762E951A.roa (raw, json)
Hash identifier: VKen5OrhQX/VFA3a7Bi8VV07hk+UlEJoGY8xdBByAoM=
Subject key identifier: D9:9E:5C:85:92:3E:EA:2A:7E:56:6B:BD:39:BD:FF:CA:F2:3D:3A:C2
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0876
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6D0AAA640A1411F08F14CD51762E951A.roa
Signing time: Wed 26 Mar 2025 07:32:09 +0000
ROA not before: Wed 26 Mar 2025 07:32:05 +0000
ROA not after: Thu 26 Mar 2026 07:32:05 +0000
asID: 4766
IP address blocks: 102.135.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2166 (0x876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 26 07:32:05 2025 GMT
Not After : Mar 26 07:32:05 2026 GMT
Subject: CN=67e3ad79-96d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:ca:7e:5c:46:d5:61:30:bc:5f:fb:98:a9:
df:23:d5:bc:a1:d5:1a:e4:68:b1:4e:b2:f8:4a:d4:
89:e5:55:13:d3:5f:a9:a9:32:2b:0c:70:10:40:c1:
7d:87:0a:17:00:b1:e4:e3:f9:ac:3a:b9:7e:c3:fd:
34:05:25:d8:94:f4:4a:bc:9f:c2:e6:4d:14:ec:26:
ec:b6:f4:e9:6e:34:62:00:1d:cc:3c:cd:fb:53:b7:
db:4b:a1:7f:62:a7:be:5c:67:a1:02:09:90:15:5b:
95:3a:08:36:0e:d0:cf:41:1a:be:85:0a:fd:62:86:
f1:f4:ef:4a:fa:04:c2:c9:9e:ed:f5:ad:34:c4:d4:
fc:c1:7c:1f:5d:dc:1c:47:94:1d:d0:8d:be:f6:4c:
17:02:b4:c2:ca:cd:54:ef:20:f6:fb:37:a5:6e:7a:
ec:ce:15:e0:56:21:12:30:9e:a2:83:c2:03:be:6b:
8a:3d:a7:56:e0:73:b5:cb:b2:7b:ec:28:13:0b:03:
68:cb:ae:1d:25:e3:a1:ee:38:b0:70:47:27:aa:ec:
78:aa:c7:62:f1:b4:fb:ef:52:c6:86:24:71:a6:fc:
e5:33:0c:a2:d3:f3:d1:7b:0d:0e:86:e6:fc:58:93:
9e:6a:bf:de:4c:04:a2:ed:56:97:84:40:ff:49:36:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9E:5C:85:92:3E:EA:2A:7E:56:6B:BD:39:BD:FF:CA:F2:3D:3A:C2
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6D0AAA640A1411F08F14CD51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.75.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:e8:e3:6b:97:25:7c:84:4b:a1:37:0f:42:63:5d:26:35:f6:
ae:45:e7:58:70:88:8b:64:c1:c3:2b:11:ff:a1:91:cc:27:3d:
2d:2b:b3:73:f8:ef:bf:c9:19:a0:0e:10:e6:3c:c7:80:ae:e0:
d3:84:fc:ab:9f:1f:19:4a:03:4a:e7:cc:3e:20:34:10:5e:5d:
ea:3c:97:16:cd:c7:05:15:9d:56:c4:a0:ee:3a:a5:88:a6:5d:
eb:80:9d:cb:f0:f2:46:aa:a9:6f:9d:5c:b4:64:9c:9e:4a:34:
62:f0:2f:a4:cf:5b:2d:2e:45:e7:eb:ea:5e:ae:d0:72:72:8a:
95:9f:c6:34:d7:57:8f:be:ed:e8:cc:33:5d:dd:5b:f5:af:07:
1f:34:4e:2d:d7:0c:60:d7:88:11:9a:dc:0a:d9:9a:ec:1b:9f:
0a:aa:31:fb:c3:c3:f2:1a:ab:0b:f7:72:b5:7b:70:68:f7:0f:
3b:99:cf:77:39:2d:73:21:b6:c8:a0:3e:3f:b6:0a:c1:38:8b:
95:be:90:08:1c:92:32:cc:ae:c8:68:71:cd:1d:03:99:61:c2:
1b:0a:18:c2:26:5e:80:1d:90:2f:39:a8:f1:64:3f:d8:38:6d:
39:77:cb:91:fc:6f:8e:1e:cd:0d:42:74:c1:a4:da:3b:53:95:
16:af:eb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:59:44 2025 by rpki-client