Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7E7AAA22E77F11EF8F09F749762E951A.roa
File: 7E7AAA22E77F11EF8F09F749762E951A.roa (raw, json)
Hash identifier: qtYnFfMsTfCnugffizxpWFDmAQCbLVm3iHhq2tlzQnQ=
Subject key identifier: D3:F1:37:F5:7E:A4:25:83:5F:9B:B1:87:52:A9:49:89:7A:24:AA:4F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05C6
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7E7AAA22E77F11EF8F09F749762E951A.roa
Signing time: Mon 10 Feb 2025 07:20:24 +0000
ROA not before: Mon 10 Feb 2025 07:20:20 +0000
ROA not after: Tue 10 Feb 2026 07:20:20 +0000
asID: 9009
IP address blocks: 102.135.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1478 (0x5c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 10 07:20:20 2025 GMT
Not After : Feb 10 07:20:20 2026 GMT
Subject: CN=67a9a8b8-2d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:23:04:87:16:25:a0:15:f2:62:11:68:8f:a6:
e9:dc:45:d6:87:94:32:83:64:ad:18:32:60:f4:f8:
33:db:53:a5:a9:62:f1:49:3b:cd:ba:ae:ae:bf:e9:
01:c8:af:0a:2f:f8:af:92:a9:b0:03:83:f8:83:9e:
c8:f1:6b:21:ea:e5:96:5f:3d:dd:46:3d:6d:b2:19:
c5:ea:4f:73:b5:6f:37:cf:cb:d0:9e:59:39:33:1e:
90:a2:a2:3c:1b:42:ed:db:8c:3c:88:f6:cd:dc:98:
87:bd:e1:89:17:c6:63:17:a9:31:2a:75:ec:f4:62:
22:59:64:ba:a7:fb:3d:47:d2:85:1b:df:b4:7e:e9:
16:ba:0b:85:f9:a0:86:ab:fd:bc:15:12:fd:2b:11:
e5:e4:a9:2e:68:8a:ae:34:5a:93:f1:40:a3:76:e9:
5f:72:8d:3d:b6:41:9c:5a:b9:d7:d1:c0:cf:fa:04:
57:7b:38:77:6c:5e:e6:2a:0d:b3:4d:67:23:b5:20:
f4:7f:09:c7:3e:1e:c8:6e:98:bd:bb:39:dd:55:67:
33:77:50:78:d7:45:22:2e:f2:f5:13:6d:ec:06:3d:
6a:53:39:e1:d5:25:00:40:b5:65:db:de:99:ab:a4:
3e:d6:29:16:30:8e:18:ee:f7:44:52:bd:4c:9e:4e:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F1:37:F5:7E:A4:25:83:5F:9B:B1:87:52:A9:49:89:7A:24:AA:4F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7E7AAA22E77F11EF8F09F749762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.10.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:6d:3e:3d:41:64:7c:0f:53:c1:87:01:18:75:94:58:d9:b2:
8c:48:a6:38:13:38:19:fe:8d:41:20:dd:41:d5:b8:8d:31:28:
a4:5f:9b:5a:9e:fd:f9:8c:10:64:e7:0a:7d:a3:fb:8e:4d:b9:
2a:2c:25:93:31:6f:0f:7d:06:e2:ed:e9:cc:a8:06:58:34:89:
74:27:26:5a:d2:0e:f6:5f:b3:c9:45:a7:95:31:7d:2b:42:2c:
d0:34:ec:3a:53:16:c0:53:57:cc:2b:fc:f9:30:3c:d6:0a:24:
67:fd:25:0f:fa:e0:57:12:ca:64:99:79:bc:10:af:ba:68:49:
1f:37:30:e2:eb:44:c9:f4:a6:35:8a:36:bc:f1:40:21:2e:7c:
c6:e1:fe:27:0f:5e:13:d2:1e:e6:e0:65:07:ec:b1:de:03:fd:
62:c7:83:49:28:2a:a3:b5:e5:30:14:c7:d3:24:41:de:41:fb:
38:ef:60:1d:19:73:6b:0e:19:0b:2c:2c:9b:16:f1:74:d2:31:
8d:8e:7d:62:e0:1d:8c:c2:e1:a2:7f:f6:74:ec:d0:ea:0f:f1:
43:52:d8:c3:26:33:0b:a1:0f:e0:28:9b:79:30:e2:43:57:7a:
d0:2f:e2:b5:26:2c:68:2f:eb:88:63:fe:dc:60:da:84:47:4a:
e6:be:3f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:24 2025 by rpki-client