Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8390C20A0A1411F0A048E051762E951A.roa
File: 8390C20A0A1411F0A048E051762E951A.roa (raw, json)
Hash identifier: kP7qWZ4XiEtKvxgHMUuuzJqQfvmJXaijldSeCpUfPUE=
Subject key identifier: CE:8F:32:91:FA:ED:40:92:25:D9:1E:5C:45:DE:7F:F9:BE:76:12:22
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0878
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8390C20A0A1411F0A048E051762E951A.roa
Signing time: Wed 26 Mar 2025 07:32:47 +0000
ROA not before: Wed 26 Mar 2025 07:32:43 +0000
ROA not after: Thu 26 Mar 2026 07:32:43 +0000
asID: 4766
IP address blocks: 102.135.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2168 (0x878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 26 07:32:43 2025 GMT
Not After : Mar 26 07:32:43 2026 GMT
Subject: CN=67e3ad9f-c3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:b2:df:66:91:de:2e:1f:2e:94:29:a2:3d:
7b:77:44:2b:a0:4d:8d:d9:e1:fa:0e:71:b1:75:34:
00:b8:89:77:67:44:81:c8:a3:bc:35:6f:ee:ec:71:
0a:f8:76:97:6d:46:1d:7a:46:50:bb:5e:24:dc:e7:
35:de:98:3a:d2:04:06:15:88:23:e9:24:09:5e:27:
db:64:32:38:e1:22:7c:3a:6d:8b:22:4b:13:45:d2:
0b:68:14:c4:8b:70:11:37:30:c3:19:bd:6a:36:cc:
5d:00:f4:8f:5f:d7:85:b6:12:d4:8e:e3:29:eb:24:
93:58:f1:26:35:da:89:d3:bd:b5:b0:c9:d9:7d:65:
4b:b5:dc:55:12:9f:bf:54:9e:3b:a3:49:d5:76:c5:
1c:15:1f:35:fe:11:5e:0f:c9:f6:e8:4a:fc:97:b6:
69:4b:1f:00:44:53:21:ef:e3:a2:9d:32:02:1b:f0:
b4:6a:59:18:d5:f4:00:1c:28:b7:da:cc:1f:a8:b9:
98:34:08:5b:55:69:b6:2a:54:a7:5d:dc:43:a7:c9:
25:09:60:d6:c5:f4:bc:5a:e3:af:23:69:bf:10:54:
1e:57:25:7f:10:81:b6:bd:77:e9:01:c2:e0:30:dd:
2c:4a:ff:a6:d5:b2:2b:9b:f3:95:d5:a2:2c:32:16:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8F:32:91:FA:ED:40:92:25:D9:1E:5C:45:DE:7F:F9:BE:76:12:22
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8390C20A0A1411F0A048E051762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.77.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:18:48:83:a9:89:94:8e:98:98:e5:e4:d1:88:a7:48:c6:5b:
b6:13:01:8a:af:c1:f7:ed:56:fb:af:3d:98:60:73:50:d1:87:
ca:88:62:9a:52:8e:2f:e2:ac:0e:a6:44:e8:37:54:3a:89:2b:
56:e1:59:3c:e3:38:49:f7:51:cb:f7:e0:4a:5e:d5:f4:68:e9:
4f:c0:7a:d0:1c:2b:5f:74:5c:74:92:9a:1c:5c:50:08:cb:eb:
3f:fb:f9:45:49:1c:ba:2c:32:0f:23:49:de:bc:91:d1:1b:d6:
39:42:a3:bb:11:fe:a1:47:66:cc:2f:33:6e:92:4f:a6:ae:6b:
e8:77:a0:52:70:e0:1c:fa:44:69:6f:41:51:05:17:8c:6a:c0:
bd:f9:1f:ac:88:9c:79:11:9b:f4:bb:df:07:fb:88:76:da:d4:
4f:f4:76:90:48:fd:b7:c1:7f:44:4e:a0:ec:bb:9d:cf:bf:13:
ed:c7:74:f9:8d:f0:24:25:74:f9:72:fb:22:45:70:25:19:c6:
f6:90:66:38:4e:ee:0d:d9:b8:62:60:b7:60:6c:b2:ba:9f:8e:
58:f7:28:a6:0c:f8:7e:eb:96:97:41:a2:8b:1e:f1:c2:07:1a:
0e:1a:8b:04:34:a2:af:47:c5:61:5f:40:84:d1:eb:70:8d:0b:
f9:76:2d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:45 2025 by rpki-client