Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7AFFF03602E711F0B6E011A4762E951A.roa
File: 7AFFF03602E711F0B6E011A4762E951A.roa (raw, json)
Hash identifier: U9KPSywNWPjnEdpjIzDHpCMXqjYJizZvYVwNrG38k+M=
Subject key identifier: 3E:E7:83:FD:CB:EB:6E:01:73:E6:01:B5:E0:6D:25:73:F4:74:3D:C6
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0706
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7AFFF03602E711F0B6E011A4762E951A.roa
Signing time: Mon 17 Mar 2025 04:22:47 +0000
ROA not before: Mon 17 Mar 2025 04:22:43 +0000
ROA not after: Tue 13 Jan 2026 04:22:43 +0000
asID: 137897
IP address blocks: 102.135.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1798 (0x706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 17 04:22:43 2025 GMT
Not After : Jan 13 04:22:43 2026 GMT
Subject: CN=67d7a397-570e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:59:30:fe:7f:d0:ec:69:83:6c:4f:17:a2:
53:72:45:ec:43:81:28:d1:1f:00:b1:9e:71:b1:da:
11:dc:94:55:df:75:67:c6:7e:07:e5:8b:93:e0:29:
7f:77:71:3a:89:ff:05:5c:f1:4b:bb:2c:75:da:25:
68:ff:b8:b1:8d:c0:fc:a4:d1:8f:ce:55:4f:06:78:
16:7f:40:88:c1:95:4b:de:3a:ee:50:2b:fd:37:ac:
d2:30:01:5d:3d:d7:44:58:5a:4d:fb:5e:ed:d7:28:
d9:10:88:eb:24:bb:7a:c1:f7:dd:2a:53:8e:44:ff:
b1:4f:7a:3e:1d:74:e3:78:bf:62:48:0b:5b:ba:24:
8b:f9:e1:cf:42:9f:b9:1f:92:e6:33:8d:e7:02:61:
0f:4e:da:2d:9b:71:2e:e8:e8:50:62:d8:85:a3:a8:
0b:d6:14:78:4a:19:a3:4d:ad:75:99:3d:9a:39:c2:
d4:6e:54:02:2f:5e:35:2a:a8:89:7a:07:3f:7f:ca:
40:69:4c:ca:88:42:11:f2:e7:6a:a7:ad:0b:4e:55:
cd:d9:2d:1c:27:1d:37:4d:22:5b:31:ce:e2:b4:66:
bd:74:78:c6:8f:8a:f4:89:42:d8:95:38:93:64:3c:
a0:45:ef:d6:c7:06:54:47:d5:fb:12:43:2c:88:0a:
fd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E7:83:FD:CB:EB:6E:01:73:E6:01:B5:E0:6D:25:73:F4:74:3D:C6
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7AFFF03602E711F0B6E011A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f2:74:00:e5:67:9c:f1:99:af:a2:16:19:6d:a7:0f:26:81:
a6:d1:89:53:2c:08:d9:c0:db:8b:45:e1:bd:1d:1f:58:fa:8a:
d8:16:75:d4:cd:31:5e:b7:48:14:6a:3a:58:56:4d:4b:e4:2a:
32:dd:83:9a:0d:c7:2b:f9:aa:39:ff:57:98:f1:60:31:26:0d:
41:d0:e7:c2:28:56:54:f9:10:09:2e:dc:6e:54:bb:0a:11:1b:
7d:17:2c:bf:9d:78:35:89:5d:f4:1b:8d:65:2f:63:6c:94:19:
46:f8:d2:5f:3e:33:83:f8:d7:5b:60:e4:67:27:f1:7f:e4:e2:
c7:71:cb:7e:a9:ea:1d:92:95:9f:ca:7d:ff:87:9d:86:84:f0:
d6:57:2b:2d:06:59:db:09:6f:18:25:b2:96:58:ef:4f:82:98:
63:44:22:8b:9f:53:a5:7b:4b:6b:c7:13:a5:3f:b5:da:56:78:
79:1b:11:73:0b:e5:b0:ee:e6:c8:26:e8:6d:7c:7b:96:c1:76:
db:77:fc:21:79:b4:91:87:06:d1:90:ba:1a:fb:81:4c:26:ee:
ad:f2:5f:73:4e:25:04:d6:c2:bf:47:f7:f8:b4:ef:4e:53:ad:
5f:c5:21:d4:5c:be:53:6b:c2:c8:e6:55:b0:5c:9e:19:33:6a:
61:85:82:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:54 2025 by rpki-client