Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ADD83DF6D33511EFAC69B199762E951A.roa
File: ADD83DF6D33511EFAC69B199762E951A.roa (raw, json)
Hash identifier: 6+kcG+n35hMmlWoWVSV3snpaZDHe8pIHsAfeC8pis6s=
Subject key identifier: 66:8A:CF:5A:7F:85:7C:B5:9B:14:87:6D:62:6D:01:0B:0E:9C:91:38
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 053C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ADD83DF6D33511EFAC69B199762E951A.roa
Signing time: Wed 15 Jan 2025 11:41:38 +0000
ROA not before: Wed 15 Jan 2025 11:41:32 +0000
ROA not after: Thu 15 Jan 2026 11:41:32 +0000
asID: 53356
IP address blocks: 102.135.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1340 (0x53c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 11:41:32 2025 GMT
Not After : Jan 15 11:41:32 2026 GMT
Subject: CN=67879ef2-0fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:f4:d1:be:27:54:c6:5f:75:75:47:f5:36:
08:f2:26:2f:e4:03:99:9b:86:c4:18:65:37:fc:21:
c7:6e:9f:89:b9:5d:14:17:a1:6c:72:07:7a:f5:51:
9b:45:a1:14:13:98:42:92:2e:2b:b3:24:76:d9:9f:
4b:e2:6d:5e:8b:4e:93:de:9a:93:e9:bf:83:ba:23:
fc:40:2e:04:d2:71:6a:74:51:dd:2c:4a:ed:d6:3a:
e8:b6:ce:44:75:03:62:cf:ce:71:0f:0c:91:04:d3:
eb:ec:e7:4a:e5:aa:9f:f6:53:ed:3a:10:20:09:b5:
52:47:64:52:15:b9:e5:1e:d2:c3:95:44:09:51:ea:
83:a1:4a:88:49:b3:5e:a0:a0:fb:0b:b7:62:32:d0:
cd:24:7a:f1:5c:75:b0:d4:e3:2e:2c:78:78:c0:08:
ef:07:04:33:94:32:10:df:b5:f0:43:dc:a5:e3:67:
37:f3:d0:89:b2:e0:4c:ec:4d:02:3c:d8:00:de:24:
e6:17:fc:ed:7c:77:b7:a5:58:a3:6f:a8:20:55:48:
8a:c2:59:a0:a8:14:8f:4a:c1:ee:fd:92:a2:5c:36:
be:63:8e:1f:11:c8:6b:67:1b:e3:12:ca:61:ca:5c:
fe:3f:16:86:27:64:fe:db:b7:bd:66:9a:37:00:0d:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8A:CF:5A:7F:85:7C:B5:9B:14:87:6D:62:6D:01:0B:0E:9C:91:38
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ADD83DF6D33511EFAC69B199762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:86:33:ed:8d:7a:98:89:64:36:c0:e6:9c:9d:9e:97:73:dc:
ad:ba:d8:39:4e:11:31:de:b6:63:b9:4d:30:d8:07:ca:0c:e2:
a7:7f:87:af:7c:89:b2:9a:1a:a3:e4:f1:7b:15:a4:21:e8:ac:
34:9f:28:a8:56:47:85:05:c2:6e:db:df:9e:e8:d1:22:ad:72:
69:92:3a:65:50:da:44:c7:91:da:af:eb:b7:8f:67:fe:9c:e1:
0b:bd:c7:0f:5d:ee:c9:9b:b0:56:4a:1a:a9:5f:04:42:c1:a7:
89:2e:18:63:0e:74:d1:d2:fd:44:24:a4:c5:14:88:6d:91:ce:
03:fd:e2:a5:b1:f2:5e:dc:f0:e3:90:13:60:84:50:b9:ff:c3:
bf:13:89:03:6a:f6:93:36:0b:4e:81:87:15:43:49:ed:f6:86:
f7:b1:91:6b:10:e0:c4:7a:0e:15:76:24:65:e1:29:e3:96:12:
73:87:f7:5b:09:47:bb:1b:36:da:6c:93:c0:c9:d9:fe:f9:bf:
c9:bd:e9:d4:2e:16:a4:54:45:e3:57:7c:69:2c:0b:04:e0:37:
21:81:a1:96:59:07:95:6c:e6:71:a6:01:b2:04:b5:c5:d9:f4:
54:fb:d6:a8:e4:94:de:db:96:71:65:b0:0a:8e:27:cd:76:8b:
5c:99:63:f4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAxMTUxMTQxMzJaFw0yNjAxMTUxMTQxMzJaMBgxFjAU
BgNVBAMTDTY3ODc5ZWYyLTBmYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWcvTRvidUxl91dUf1NgjyJi/kA5mbhsQYZTf8Icdun4m5XRQXoWxyB3r1
UZtFoRQTmEKSLiuzJHbZn0vibV6LTpPempPpv4O6I/xALgTScWp0Ud0sSu3WOui2
zkR1A2LPznEPDJEE0+vs50rlqp/2U+06ECAJtVJHZFIVueUe0sOVRAlR6oOhSohJ
s16goPsLt2Iy0M0kevFcdbDU4y4seHjACO8HBDOUMhDftfBD3KXjZzfz0Imy4Ezs
TQI82ADeJOYX/O18d7elWKNvqCBVSIrCWaCoFI9Kwe79kqJcNr5jjh8RyGtnG+MS
ymHKXP4/FoYnZP7bt71mmjcADccHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZorP
Wn+FfLWbFIdtYm0BCw6ckTgwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0FERDgzREY2RDMzNTExRUZBQzY5QjE5OTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhyMwDQYJKoZIhvcNAQEL
BQADggEBAF2GM+2NepiJZDbA5pydnpdz3K262DlOETHetmO5TTDYB8oM4qd/h698
ibKaGqPk8XsVpCHorDSfKKhWR4UFwm7b357o0SKtcmmSOmVQ2kTHkdqv67ePZ/6c
4Qu9xw9d7smbsFZKGqlfBELBp4kuGGMOdNHS/UQkpMUUiG2RzgP94qWx8l7c8OOQ
E2CEULn/w78TiQNq9pM2C06BhxVDSe32hvexkWsQ4MR6DhV2JGXhKeOWEnOH91sJ
R7sbNtpsk8DJ2f75v8m96dQuFqRUReNXfGksCwTgNyGBoZZZB5Vs5nGmAbIEtcXZ
9FT71qjklN7blnFlsAqOJ812i1yZY/Q=
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:10:30 2025 by rpki-client