Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/95E2FC4A08A011F0A8055170762E951A.roa
File: 95E2FC4A08A011F0A8055170762E951A.roa (raw, json)
Hash identifier: g3houh8CPzPCdvVtn7DjZXm1uy6KOgLk6Y/blPJ9f9k=
Subject key identifier: D3:96:23:8C:FB:6C:F2:8E:E9:19:12:CC:12:FA:1B:8C:81:B5:49:62
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07C1
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/95E2FC4A08A011F0A8055170762E951A.roa
Signing time: Mon 24 Mar 2025 11:10:25 +0000
ROA not before: Mon 24 Mar 2025 11:10:21 +0000
ROA not after: Tue 24 Mar 2026 11:10:21 +0000
asID: 2914
IP address blocks: 102.135.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1985 (0x7c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 11:10:21 2025 GMT
Not After : Mar 24 11:10:21 2026 GMT
Subject: CN=67e13da1-7037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5c:bd:d9:15:87:63:06:1b:15:ec:a8:45:66:
90:29:d2:10:c8:be:4a:2c:fd:f7:e5:3d:15:2f:a5:
f0:98:eb:78:5b:de:bc:3e:1d:44:0b:95:11:29:4b:
37:4a:62:af:ca:6f:1c:01:80:55:75:95:69:62:16:
f2:89:0d:ba:40:5b:1a:dc:72:e7:5a:6e:4c:cb:0f:
a0:42:0c:fa:39:8c:a9:90:eb:a2:cf:dd:d7:5e:d6:
04:98:11:94:12:c0:8b:60:fe:b2:64:e9:cf:06:ca:
43:20:c1:ce:eb:06:4f:d5:ac:0e:ca:e1:e7:17:7f:
62:11:84:07:10:36:87:7d:4a:5f:98:28:71:3b:c1:
ea:8f:98:fc:d5:26:35:43:2b:a2:4f:13:7d:0f:5d:
54:b0:12:b5:3a:4a:95:5c:74:48:32:a0:8a:62:7d:
3a:e9:35:f7:d7:c2:1b:42:ec:5a:ef:52:23:f7:cc:
1f:9a:b8:db:85:a1:3e:2f:1e:ff:95:d3:03:d6:ef:
fa:10:9f:f4:e3:76:88:d5:e4:27:ba:3b:8f:47:b1:
0a:e7:1c:4e:42:81:4b:fb:8e:41:68:33:a4:40:ab:
ba:0b:f7:4b:61:e7:63:c9:88:50:e3:05:02:b1:5e:
f8:b0:11:a8:d1:80:ea:63:88:cf:35:81:de:c0:27:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:96:23:8C:FB:6C:F2:8E:E9:19:12:CC:12:FA:1B:8C:81:B5:49:62
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/95E2FC4A08A011F0A8055170762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.117.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:bb:69:c8:fa:d4:5d:a2:80:63:b3:8e:d3:f5:83:1b:0d:3a:
68:4d:87:ec:6a:9d:5d:10:48:96:68:89:9a:0c:ef:91:2d:2a:
06:23:10:f4:95:88:76:d0:4e:6d:c7:71:44:a6:0a:ed:e1:ae:
7c:82:b8:f8:b8:7f:f6:73:6b:4d:a8:47:1c:d9:a1:12:d1:72:
90:b7:3f:a0:4d:6a:4b:9e:88:1f:43:d2:14:c4:63:e9:6f:30:
c8:44:14:d7:e6:fe:e3:bd:61:a2:02:61:21:f5:8f:63:2b:1e:
43:ed:16:86:bc:4f:43:28:99:9e:9d:b6:ca:7b:d5:df:9a:69:
c2:0d:f1:55:5c:9a:1c:75:b6:9f:2e:b4:89:70:eb:d8:21:a1:
19:ec:0b:8e:54:8a:fe:65:66:4f:5c:5b:31:3a:5e:99:ab:d9:
67:d3:c5:15:44:a8:9c:f1:0b:df:6e:69:14:1f:42:43:33:e4:
b3:43:86:4a:13:86:88:5e:fa:3f:81:16:7b:e4:e3:60:45:61:
36:d4:9a:27:e0:f5:dc:29:cf:87:f9:b9:34:45:cf:8b:06:7b:
c5:5f:91:8c:de:86:53:66:da:a4:25:f9:6c:e4:2a:46:c0:e3:
e4:99:11:62:dc:88:49:79:db:79:36:93:15:14:1f:5a:3f:73:
67:a9:f7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:07:10 2025 by rpki-client