Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/85E9919CD33911EF9D1878B1762E951A.roa
File: 85E9919CD33911EF9D1878B1762E951A.roa (raw, json)
Hash identifier: 0DnSL2aM7qXtaJRhjKhOlqrEt+WNBbrbZDIh8u5WCYg=
Subject key identifier: 42:F4:64:4E:8E:72:AF:1F:06:BA:81:C6:B6:3F:9A:40:E6:FD:EA:03
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0568
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/85E9919CD33911EF9D1878B1762E951A.roa
Signing time: Wed 15 Jan 2025 12:09:09 +0000
ROA not before: Wed 15 Jan 2025 12:09:05 +0000
ROA not after: Thu 15 Jan 2026 12:09:05 +0000
asID: 53356
IP address blocks: 102.135.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1384 (0x568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 12:09:05 2025 GMT
Not After : Jan 15 12:09:05 2026 GMT
Subject: CN=6787a564-ee74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:ca:d7:c8:91:84:75:ee:25:cd:35:df:87:
bc:b0:08:ef:23:ea:e4:38:d5:06:9c:ef:12:e9:41:
67:57:84:72:10:48:26:ca:17:31:b8:63:0c:7f:40:
0a:c1:1b:fc:25:27:41:f0:be:94:fe:8b:6d:d9:b8:
50:2e:2f:54:79:c0:4f:23:9f:60:77:28:c1:63:11:
3e:a5:65:f1:41:5b:94:11:06:9f:b4:75:59:6d:f7:
a7:56:1e:ae:bd:68:cd:a4:66:52:fb:37:9c:36:77:
38:e1:6c:af:d1:e7:01:3b:d5:52:7e:0b:4a:83:23:
5b:e7:10:bb:f3:fb:b7:72:13:46:7d:d9:0b:73:e5:
a9:c0:e2:5b:85:07:10:88:67:1d:33:ee:d7:8d:10:
04:8f:49:aa:57:e6:47:6a:fd:aa:b8:9d:f8:d9:2a:
b3:7b:43:3b:54:b7:a7:2b:3c:d9:55:9d:2a:13:98:
cf:51:81:1f:08:26:98:1b:26:2a:ff:d8:58:54:08:
e3:84:23:43:fa:23:08:aa:d9:eb:c7:15:17:5c:77:
64:4a:66:02:64:f6:8b:d5:c5:5f:90:0f:6b:ef:a4:
39:c1:0d:0d:46:be:07:a7:3b:61:3d:bb:3f:e5:fa:
28:54:a9:2c:7d:45:65:68:3e:1a:5c:90:9f:0d:b0:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F4:64:4E:8E:72:AF:1F:06:BA:81:C6:B6:3F:9A:40:E6:FD:EA:03
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/85E9919CD33911EF9D1878B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.49.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a9:78:d2:8b:41:ac:22:8c:80:ed:a8:ea:82:bc:e5:29:5d:
d6:70:d7:8c:49:5b:26:00:1f:68:ac:fb:a6:ab:bd:4c:34:37:
23:34:d1:a6:26:83:fe:96:d6:c8:7b:3e:f7:fd:0b:76:51:11:
3a:fd:12:de:f3:9a:f0:f9:8f:fe:d3:ca:12:4b:97:c9:94:8d:
57:90:2e:fc:02:c0:a8:c1:a4:b9:68:f0:a1:e8:24:47:5a:8c:
a3:67:8c:6b:76:7a:6d:23:65:c4:cb:47:64:e7:61:61:05:06:
1a:1a:67:10:9a:5d:c1:37:b9:52:ab:2f:6a:d0:08:98:66:c2:
f7:b8:f1:20:ef:d1:45:bf:19:1c:7f:45:70:91:9f:34:ae:fb:
1a:b7:e4:2c:c0:ae:13:ba:27:2e:d7:d4:76:89:05:b9:00:17:
2c:5a:26:64:71:a0:fe:d0:5d:9a:49:bc:7f:fd:ce:37:13:ab:
23:df:34:e5:01:34:73:77:e7:a7:cc:38:05:de:ec:0c:a3:ed:
03:12:c9:96:d2:5f:90:f8:d3:bf:24:c6:a7:4d:86:c5:a8:11:
e4:67:ee:0c:ac:93:96:09:5c:04:b8:fb:eb:79:f9:ce:11:23:
00:51:c8:15:6c:d0:18:98:8c:36:5a:a0:40:d5:7b:42:67:e3:
27:24:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:38:34 2025 by rpki-client