Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AA7690D2058411F0B8937672762E951A.roa
File: AA7690D2058411F0B8937672762E951A.roa (raw, json)
Hash identifier: x6aYLSGdvW6VT6eQerI5PQT68Ime9/nzBXHBYvLaWVA=
Subject key identifier: A5:26:36:10:44:F3:D9:4E:6A:42:C4:CF:C0:AC:F2:A2:2F:0C:CA:58
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 077B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AA7690D2058411F0B8937672762E951A.roa
Signing time: Thu 20 Mar 2025 12:13:00 +0000
ROA not before: Thu 20 Mar 2025 12:12:56 +0000
ROA not after: Fri 20 Mar 2026 12:12:56 +0000
asID: 137517
IP address blocks: 102.135.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1915 (0x77b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 20 12:12:56 2025 GMT
Not After : Mar 20 12:12:56 2026 GMT
Subject: CN=67dc064c-2f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:d7:43:96:e6:7a:94:f4:9b:ee:b5:7f:5e:
63:b0:18:b3:a2:4d:a7:71:2f:3f:eb:2e:22:51:c2:
b4:f6:3b:1e:ff:47:cd:5f:ea:d5:6e:b2:c9:d9:77:
07:94:5c:0b:ed:28:2f:0b:32:8c:72:5a:e5:9e:8a:
2e:ba:53:fd:1f:02:a3:ac:39:18:17:c7:64:ab:b7:
04:02:58:12:3f:9f:f6:30:90:94:be:b3:eb:4b:e0:
9a:50:26:7b:42:cd:45:20:d6:fa:03:f7:87:e7:e0:
ac:b7:f1:82:c5:82:70:c9:f1:5b:21:28:94:a7:3d:
5b:96:62:47:98:cf:b9:22:b1:8d:28:df:33:0f:2c:
d9:ae:55:5f:9a:2c:d7:69:15:3b:99:65:fc:3e:23:
5d:4f:30:de:e4:3c:63:69:74:87:87:26:68:f3:8f:
ad:2a:78:f5:e9:e9:4c:8a:3e:eb:69:60:c5:fb:e6:
37:60:73:0d:a3:42:f8:4b:ac:d0:6c:1c:db:f5:01:
56:5c:17:eb:f5:82:3a:c2:10:93:cc:38:13:c6:81:
52:44:5e:54:6e:11:c6:81:55:6f:80:14:83:aa:3c:
45:c5:11:11:27:30:e7:90:2b:53:c5:24:c8:e1:02:
fe:6d:ea:f6:fe:94:67:1c:38:74:f5:b3:c4:80:99:
56:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:26:36:10:44:F3:D9:4E:6A:42:C4:CF:C0:AC:F2:A2:2F:0C:CA:58
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AA7690D2058411F0B8937672762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.23.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:4f:ac:a9:54:68:62:03:82:01:5d:8b:95:23:c2:4b:1a:4f:
d7:85:55:f8:21:8b:a3:70:54:d2:a2:6e:6a:d2:97:3f:74:bd:
a1:a6:e2:26:92:04:f3:ca:7b:1f:20:a9:65:93:40:93:90:8a:
4f:b1:79:6a:14:85:f0:57:96:c3:a0:91:93:4e:c2:a8:10:af:
66:9c:ff:ae:79:83:a7:39:13:f0:9d:88:29:1c:50:b8:8b:09:
71:37:b5:93:1c:b8:86:aa:2f:61:cd:b7:3c:3d:5b:e0:a3:06:
30:1c:4d:c5:30:6d:9a:42:a5:1d:8c:54:d4:4c:ed:d5:5b:33:
8a:b0:94:da:65:bc:65:c1:95:f0:e6:71:00:1f:90:e1:d9:31:
59:5b:2d:fd:51:4b:8c:17:b8:a4:bf:14:67:8b:24:80:ff:20:
f6:6f:12:d6:51:5c:2d:54:5b:af:19:c4:e2:12:39:0b:b4:63:
20:36:27:0f:04:5b:58:a0:41:ab:0b:29:2a:8b:84:24:07:a5:
10:b8:04:6d:13:58:fa:e4:cf:9e:4b:58:02:09:47:8d:bb:2d:
c9:c0:21:34:5f:d3:cd:a5:5a:39:1b:89:4e:35:0d:0b:50:e2:
89:6c:50:ce:b1:59:12:39:83:c2:89:da:90:3a:ac:b0:b3:1f:
e1:ae:e1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:09:16 2025 by rpki-client