Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7F2A49AED33511EF8FE89B99762E951A.roa
File: 7F2A49AED33511EF8FE89B99762E951A.roa (raw, json)
Hash identifier: 2GCzpEg0nP78w4tBT6ih4nqEVEMeHmx2Q+3JnTQ0Nn0=
Subject key identifier: BE:6D:77:4B:10:63:03:4B:48:A1:65:75:28:62:71:16:2E:41:BF:FC
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0538
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7F2A49AED33511EF8FE89B99762E951A.roa
Signing time: Wed 15 Jan 2025 11:40:19 +0000
ROA not before: Wed 15 Jan 2025 11:40:15 +0000
ROA not after: Thu 15 Jan 2026 11:40:15 +0000
asID: 53356
IP address blocks: 102.135.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 11:40:15 2025 GMT
Not After : Jan 15 11:40:15 2026 GMT
Subject: CN=67879ea3-4126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:c8:31:af:36:8b:e7:a5:73:20:91:cb:d6:
b2:94:1d:c7:be:fb:29:2c:0e:84:4f:26:87:e1:ec:
30:80:11:35:4a:45:b0:f4:f7:af:79:41:99:1a:a6:
f8:4f:dc:90:37:14:6d:05:e4:92:5b:b5:20:3a:ce:
98:c6:4e:cb:61:bc:cc:99:4c:29:4c:f6:bc:d7:23:
47:d6:2e:45:20:34:4f:d4:b3:af:c8:de:dd:b8:01:
e3:f5:01:4b:f7:57:56:35:91:19:d0:f7:4d:f5:a1:
31:d8:91:30:a9:5c:8d:9e:e7:70:0c:07:d2:98:be:
67:51:63:46:3d:8b:70:ac:ea:68:ae:7b:c2:a8:eb:
b6:50:13:51:f9:1c:e7:2f:c6:c5:13:62:8b:8b:04:
b8:c2:7c:81:76:d3:e6:3e:f8:b1:75:6e:ab:3d:06:
29:f9:ab:2d:e6:1a:94:54:d0:2a:a5:28:a0:61:0c:
bf:1b:5d:1e:72:27:1f:a5:94:3a:42:46:01:5d:a4:
b2:a6:8e:f8:01:08:b3:c5:fa:88:bc:e6:46:67:6c:
87:32:6c:67:58:5f:e2:a2:54:28:21:2a:44:30:7f:
78:2f:12:63:24:e4:8c:7e:af:fb:e6:dd:e7:09:e2:
71:f6:98:d3:74:db:de:3c:8e:e9:f4:df:c1:6e:d9:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6D:77:4B:10:63:03:4B:48:A1:65:75:28:62:71:16:2E:41:BF:FC
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7F2A49AED33511EF8FE89B99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.60.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:7c:d1:47:4c:1e:8a:5c:99:a7:bf:69:69:f4:dc:ad:ae:93:
e3:6a:11:06:a8:5e:6d:a0:c1:d4:9a:1d:85:04:e4:74:5f:c4:
55:89:a9:4e:65:62:17:05:6a:e8:ed:6c:bf:f1:b8:20:37:1c:
9c:1e:e2:7d:83:b9:58:c2:d5:3b:50:95:f5:1f:36:59:58:2a:
8a:f0:c0:b7:d6:e9:38:45:e4:8e:2a:1f:69:a7:4a:8d:3b:61:
7b:20:89:b8:d4:88:63:f1:d6:8c:b7:65:37:fb:8d:18:99:7f:
c5:d9:c8:2e:e0:23:60:5b:8a:bf:b1:03:af:3c:93:fc:2f:18:
c8:4e:b6:b9:37:26:57:67:d4:87:96:47:50:9f:1c:f6:51:06:
ae:9d:72:f7:61:40:75:be:5d:49:b7:13:9f:12:a0:e3:95:a2:
57:5e:77:00:db:d5:d8:2c:8f:03:da:04:bc:89:6f:aa:34:72:
eb:9f:9a:36:a9:8e:5e:1c:69:15:4b:45:dc:e8:58:59:e8:d7:
dd:f4:b5:56:1c:12:68:9b:2c:78:83:14:03:2b:ff:67:ed:91:
80:5a:b6:8b:37:fc:97:46:4f:65:13:23:c1:35:59:c7:49:f2:
33:1b:39:ef:84:55:32:4d:af:c9:17:34:a5:8c:48:ac:b6:8b:
7b:eb:64:21
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAxMTUxMTQwMTVaFw0yNjAxMTUxMTQwMTVaMBgxFjAU
BgNVBAMTDTY3ODc5ZWEzLTQxMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCs2cgxrzaL56VzIJHL1rKUHce++yksDoRPJofh7DCAETVKRbD09695QZka
pvhP3JA3FG0F5JJbtSA6zpjGTsthvMyZTClM9rzXI0fWLkUgNE/Us6/I3t24AeP1
AUv3V1Y1kRnQ9031oTHYkTCpXI2e53AMB9KYvmdRY0Y9i3Cs6miue8Ko67ZQE1H5
HOcvxsUTYouLBLjCfIF20+Y++LF1bqs9Bin5qy3mGpRU0CqlKKBhDL8bXR5yJx+l
lDpCRgFdpLKmjvgBCLPF+oi85kZnbIcybGdYX+KiVCghKkQwf3gvEmMk5Ix+r/vm
3ecJ4nH2mNN02948jun038Fu2ZfrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUvm13
SxBjA0tIoWV1KGJxFi5Bv/wwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzdGMkE0OUFFRDMzNTExRUY4RkU4OUI5OTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhzwwDQYJKoZIhvcNAQEL
BQADggEBAJ580UdMHopcmae/aWn03K2uk+NqEQaoXm2gwdSaHYUE5HRfxFWJqU5l
YhcFaujtbL/xuCA3HJwe4n2DuVjC1TtQlfUfNllYKorwwLfW6ThF5I4qH2mnSo07
YXsgibjUiGPx1oy3ZTf7jRiZf8XZyC7gI2Bbir+xA688k/wvGMhOtrk3Jldn1IeW
R1CfHPZRBq6dcvdhQHW+XUm3E58SoOOVoldedwDb1dgsjwPaBLyJb6o0cuufmjap
jl4caRVLRdzoWFno1930tVYcEmibLHiDFAMr/2ftkYBatos3/JdGT2UTI8E1WcdJ
8jMbOe+EVTJNr8kXNKWMSKy2i3vrZCE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:53 2025 by rpki-client