Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8473A818041F11F0ADF30A59762E951A.roa
File: 8473A818041F11F0ADF30A59762E951A.roa (raw, json)
Hash identifier: X/e8Cj6EshcaOzSiQftZakgZPfFb4zzwcYoVZG+bSDo=
Subject key identifier: 3A:8C:23:1C:B8:F3:9C:19:02:92:CC:0B:5B:96:20:85:88:4A:6C:94
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0739
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8473A818041F11F0ADF30A59762E951A.roa
Signing time: Tue 18 Mar 2025 17:36:26 +0000
ROA not before: Tue 18 Mar 2025 17:36:22 +0000
ROA not after: Tue 17 Mar 2026 17:36:22 +0000
asID: 329007
IP address blocks: 102.135.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1849 (0x739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 18 17:36:22 2025 GMT
Not After : Mar 17 17:36:22 2026 GMT
Subject: CN=67d9af1a-daba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:2e:2a:f3:e9:0f:04:83:f0:2e:af:2e:41:
49:34:e3:72:f8:cd:0d:95:91:13:20:44:7e:d9:cd:
67:32:09:74:e0:d8:9e:bd:33:af:e7:da:ea:d0:af:
ea:16:ca:8f:31:86:61:f4:e8:f1:9e:a3:18:53:e2:
0b:8b:3c:28:d9:11:ad:57:39:82:b0:da:59:b7:56:
36:23:ab:2b:82:e5:46:9b:23:63:c1:e8:5d:00:4b:
c2:58:80:2c:74:86:63:c5:fb:ce:54:0a:2c:d4:a9:
1e:39:29:a2:25:a6:32:90:67:94:ee:cd:43:43:32:
e6:5f:c2:e6:8b:f4:85:58:29:50:83:5e:ac:c1:46:
a0:17:cf:b9:12:da:ff:bb:16:a9:1a:51:4c:25:d4:
62:5e:4e:cd:bd:8c:70:38:dc:cf:e0:e7:b6:16:0a:
d9:94:d8:c7:95:e3:ed:13:73:ae:ca:94:e7:17:cc:
d9:58:8f:3a:50:3a:43:62:2f:d5:5e:41:c1:83:2b:
13:f7:55:55:bc:36:06:a4:e3:1e:b1:cf:c8:97:db:
d7:f3:dd:e4:06:27:1c:b0:20:68:22:d0:b0:f3:a3:
62:92:24:78:a6:8a:ed:2b:0d:d8:d0:f8:3b:66:9a:
de:5d:29:41:1a:f8:2e:a9:10:f6:56:50:96:9d:4f:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8C:23:1C:B8:F3:9C:19:02:92:CC:0B:5B:96:20:85:88:4A:6C:94
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8473A818041F11F0ADF30A59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.72.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:29:f4:d1:17:14:79:89:4c:c8:07:fd:37:65:8b:d3:71:62:
e3:57:fd:ff:8a:9b:95:dd:09:47:65:37:b8:18:40:0c:88:4b:
0e:e2:06:5e:20:03:06:e0:28:49:f7:35:7e:e0:9f:13:d6:7b:
76:1a:19:65:15:e1:de:40:a5:fe:be:a7:bc:f6:ac:d8:df:b9:
bc:b2:94:d8:26:e2:a0:4f:d6:04:14:f6:60:e4:8f:69:08:45:
b4:da:2f:4c:3a:93:8a:24:78:7f:60:0c:07:23:77:8d:91:4b:
9e:f6:c4:8b:5b:f6:cf:13:dd:a0:86:99:4f:fc:89:68:68:48:
d3:19:12:64:4c:da:60:7a:21:26:d5:d8:20:9a:8e:04:07:44:
c0:c8:34:16:a2:5c:d2:b9:97:95:1d:36:6e:80:e8:d7:ee:af:
ce:75:ce:69:ae:f8:44:f8:11:ac:ad:3b:47:fa:56:a2:b7:d9:
d9:7e:c6:65:67:f3:b4:62:8c:8e:78:14:05:66:3b:cf:ed:06:
0d:56:5a:39:a1:d6:80:74:7a:2e:b4:0d:9e:7a:83:1d:0b:2a:
d6:65:2e:36:73:e5:35:b2:4b:23:b0:2f:92:15:95:16:4b:aa:
c3:e7:55:31:5e:27:40:62:29:4a:9f:c8:36:00:db:67:89:89:
58:d8:1d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:44 2025 by rpki-client