Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9EEDE6A2D33411EFBFB21E93762E951A.roa
File: 9EEDE6A2D33411EFBFB21E93762E951A.roa (raw, json)
Hash identifier: m+PXUZjLHnUQ0YAp9fSu/KBNSqmhLcpTswAHUBfbHWQ=
Subject key identifier: 80:46:D5:02:A0:AD:C7:B9:8E:CF:AA:83:32:21:BA:F0:00:D4:81:77
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 052B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9EEDE6A2D33411EFBFB21E93762E951A.roa
Signing time: Wed 15 Jan 2025 11:34:03 +0000
ROA not before: Wed 15 Jan 2025 11:33:59 +0000
ROA not after: Thu 15 Jan 2026 11:33:59 +0000
asID: 53356
IP address blocks: 102.135.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1323 (0x52b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 11:33:59 2025 GMT
Not After : Jan 15 11:33:59 2026 GMT
Subject: CN=67879d2b-6de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:5c:d2:5b:48:71:53:64:1e:d7:ee:f2:b9:
14:de:16:40:41:3f:c1:23:cf:23:a5:d1:35:5c:56:
cd:ac:1a:82:06:d8:cd:46:fe:e0:8f:b6:52:68:f1:
b8:77:dc:33:44:7b:7e:ac:a6:b8:d7:6a:21:85:48:
a7:0b:6a:c2:f7:7e:82:5d:90:53:4f:3e:c2:21:7c:
fe:d6:e3:0a:46:28:4c:d5:de:7f:df:27:42:41:1c:
ec:48:0b:29:d1:18:e0:cc:b9:42:7c:b6:81:26:41:
56:96:bb:a9:94:95:06:bb:40:e9:18:71:c1:aa:37:
60:bf:f1:f2:74:2f:74:8f:b5:ab:57:1c:ca:f4:ab:
15:94:3e:5f:ed:a3:0f:c6:11:3b:be:56:ac:b0:d0:
a6:5e:6c:0b:10:5f:d3:88:0a:4d:4a:ae:67:80:78:
b2:f4:1e:ff:08:12:55:41:86:d3:4a:90:42:00:15:
ee:b5:96:bc:d1:8f:1e:0e:4c:3a:bb:1e:c5:1d:e6:
c6:2c:17:c6:d0:af:d2:09:ec:4a:7d:e8:f1:cb:d7:
cc:e1:e7:dd:6c:e5:d8:a4:9c:23:44:89:52:c6:ac:
e0:c5:0f:cc:a9:56:8a:8d:25:21:aa:c0:d6:dc:9c:
c8:0b:19:98:53:89:55:a4:09:dd:5a:53:98:07:e5:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:46:D5:02:A0:AD:C7:B9:8E:CF:AA:83:32:21:BA:F0:00:D4:81:77
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9EEDE6A2D33411EFBFB21E93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:f5:f5:ac:46:66:36:0b:ba:d3:b4:64:89:f3:32:92:7b:e9:
a8:16:0a:ae:37:54:2a:d3:90:3c:ed:24:1b:cd:cd:d0:8d:94:
32:c7:a9:f1:c5:87:99:f2:40:be:13:71:5e:f1:cd:f3:d5:47:
0e:9f:c6:21:86:6a:2d:20:75:7b:89:5f:d5:87:36:66:ad:5a:
2d:86:09:d4:7a:ed:af:81:ae:10:16:3b:a7:b6:5f:05:7d:3a:
48:21:5f:6b:97:a0:22:12:bd:66:d4:cd:80:93:37:db:b7:ef:
1f:d5:f9:a1:7f:dd:7f:f0:77:5a:b1:f4:7d:d0:13:8e:3d:35:
53:0e:08:31:4d:65:05:13:95:cc:9a:e0:96:a7:6d:90:26:ba:
d6:cb:09:25:00:5b:da:5f:ef:97:f0:9d:33:d4:65:b3:3d:ab:
f7:33:17:47:fe:4e:b2:ea:5c:45:0d:aa:7d:14:b2:42:a0:75:
d6:2e:95:3b:9e:01:97:d5:87:84:1b:f6:98:2e:0b:03:e1:9c:
e1:cc:9e:04:63:1b:9b:40:a1:03:f3:80:2a:51:ef:53:e9:a9:
58:8b:a5:61:10:45:41:4c:b6:d2:c8:8f:14:87:33:b1:f0:ea:
54:41:db:1f:c3:ae:8a:3d:f4:c2:6e:d3:92:3b:c7:00:a2:8e:
25:16:ca:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:53:48 2025 by rpki-client