Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A422E390054611F0A9F1AB88762E951A.roa
File: A422E390054611F0A9F1AB88762E951A.roa (raw, json)
Hash identifier: 1BhnQQgLNd/q07F9jS2rLvz0sOXLpUXNX1LCC3Kyzn8=
Subject key identifier: DE:92:D2:88:73:58:33:8C:7F:71:DD:54:AF:0C:36:14:FC:E5:A6:5D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 076E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A422E390054611F0A9F1AB88762E951A.roa
Signing time: Thu 20 Mar 2025 04:49:01 +0000
ROA not before: Thu 20 Mar 2025 04:48:56 +0000
ROA not after: Tue 01 Dec 2026 04:48:56 +0000
asID: 21859
IP address blocks: 102.135.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 20 04:48:56 2025 GMT
Not After : Dec 1 04:48:56 2026 GMT
Subject: CN=67db9e3d-1458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:f8:88:58:03:b7:25:95:1a:d5:f5:48:94:
c6:95:0e:7a:fb:9b:c0:eb:53:28:f2:0d:eb:bc:9b:
c6:f0:f3:ec:90:19:2c:42:64:70:70:24:56:d4:45:
e4:5c:7d:d3:91:62:e8:fe:ec:ea:c7:72:aa:9e:b9:
18:60:af:cc:00:71:17:a6:72:1c:62:f4:18:37:bb:
24:00:eb:b5:7b:ee:0f:95:7b:4a:8a:ac:33:55:ee:
9c:bf:a9:9a:2c:99:fa:23:e4:25:1a:b3:7b:42:81:
42:b6:8a:84:c4:c3:b8:dc:5d:06:9c:61:44:cc:46:
52:bf:02:70:40:d0:86:cd:42:f1:93:c7:c6:9d:78:
a0:20:25:6c:1e:49:c1:c7:88:a8:2d:7c:9a:9b:63:
df:18:f6:22:2d:9a:b0:be:38:22:26:1a:0f:1d:75:
dc:19:78:35:f5:c3:c6:b9:39:e7:8b:7c:93:06:7d:
c4:35:59:df:19:47:99:2a:0d:4a:39:ec:7a:0f:7b:
87:2c:b1:05:d0:70:97:8f:25:cf:08:c4:5e:22:8b:
15:5f:ca:50:5e:9f:ad:14:8c:22:93:a0:0d:21:01:
02:16:d5:88:e3:69:90:21:90:3d:8f:b4:6f:17:ed:
e3:a1:1a:77:b5:26:e9:6d:94:ff:2a:94:79:6b:19:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:92:D2:88:73:58:33:8C:7F:71:DD:54:AF:0C:36:14:FC:E5:A6:5D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A422E390054611F0A9F1AB88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.22.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b8:f5:6b:74:12:0a:61:64:88:77:8e:bd:b2:b2:13:e7:6d:
12:27:ba:ed:17:a4:de:0d:f2:c7:84:58:70:63:11:77:b0:bd:
50:70:c1:a2:46:7f:ab:b7:f7:fa:6c:9a:8f:e2:da:b3:c3:e1:
ba:6e:49:e9:18:42:c2:e4:79:e7:bf:60:aa:0d:4f:8f:31:c6:
88:70:a2:04:a9:c1:ab:d0:ea:03:73:de:50:54:7b:d5:4f:33:
17:d3:cf:a4:41:db:34:65:72:eb:0d:cc:a1:ce:fe:70:71:97:
d8:27:16:d9:7c:cc:a7:94:ac:37:a8:04:cc:9a:3a:4c:34:f9:
d2:1e:25:38:c2:97:dd:bb:71:1b:74:1c:38:d6:59:30:ba:47:
19:c1:aa:0f:2a:e0:f6:b5:82:7b:a4:45:f6:99:37:1f:5a:65:
fd:03:1a:ce:c5:15:99:fe:7c:06:3d:63:da:61:ae:93:fc:ae:
10:0d:1d:f4:d6:b6:30:4d:f0:40:78:7d:24:59:7a:ef:1c:21:
be:2e:c0:09:91:1d:9b:62:8a:f4:ae:7f:32:f3:39:ab:29:78:
ef:49:8e:fc:6d:ba:dc:5b:b8:cb:7b:49:4e:38:c1:64:bd:35:
38:6c:a7:32:80:26:0a:4a:bd:5d:f0:1f:a9:1b:c1:e3:01:54:
b7:b5:1b:35
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB24wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjAwNDQ4NTZaFw0yNjEyMDEwNDQ4NTZaMBgxFjAU
BgNVBAMTDTY3ZGI5ZTNkLTE0NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClYfiIWAO3JZUa1fVIlMaVDnr7m8DrUyjyDeu8m8bw8+yQGSxCZHBwJFbU
ReRcfdORYuj+7OrHcqqeuRhgr8wAcRemchxi9Bg3uyQA67V77g+Ve0qKrDNV7py/
qZosmfoj5CUas3tCgUK2ioTEw7jcXQacYUTMRlK/AnBA0IbNQvGTx8adeKAgJWwe
ScHHiKgtfJqbY98Y9iItmrC+OCImGg8dddwZeDX1w8a5OeeLfJMGfcQ1Wd8ZR5kq
DUo57HoPe4cssQXQcJePJc8IxF4iixVfylBen60UjCKToA0hAQIW1YjjaZAhkD2P
tG8X7eOhGne1JultlP8qlHlrGYfnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3pLS
iHNYM4x/cd1Urww2FPzlpl0wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0E0MjJFMzkwMDU0NjExRjBBOUYxQUI4ODc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhxYwDQYJKoZIhvcNAQEL
BQADggEBAIe49Wt0EgphZIh3jr2yshPnbRInuu0XpN4N8seEWHBjEXewvVBwwaJG
f6u39/psmo/i2rPD4bpuSekYQsLkeee/YKoNT48xxohwogSpwavQ6gNz3lBUe9VP
MxfTz6RB2zRlcusNzKHO/nBxl9gnFtl8zKeUrDeoBMyaOkw0+dIeJTjCl927cRt0
HDjWWTC6RxnBqg8q4Pa1gnukRfaZNx9aZf0DGs7FFZn+fAY9Y9phrpP8rhANHfTW
tjBN8EB4fSRZeu8cIb4uwAmRHZtiivSufzLzOaspeO9JjvxtutxbuMt7SU44wWS9
NThspzKAJgpKvV3wH6kbweMBVLe1GzU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:09:11 2025 by rpki-client