Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AF1BD718096D11F095144654762E951A.roa
File: AF1BD718096D11F095144654762E951A.roa (raw, json)
Hash identifier: s8Xexzw7CATcmk0gGyGp7BNI6tVovN0Kt3qeTdpUXYU=
Subject key identifier: 61:C2:03:AA:AC:99:A2:98:15:18:98:5B:20:A7:B1:7D:CE:A1:CE:8F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 083A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AF1BD718096D11F095144654762E951A.roa
Signing time: Tue 25 Mar 2025 11:38:34 +0000
ROA not before: Tue 25 Mar 2025 11:38:30 +0000
ROA not after: Wed 25 Mar 2026 11:38:30 +0000
asID: 2914
IP address blocks: 102.135.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2106 (0x83a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:38:30 2025 GMT
Not After : Mar 25 11:38:30 2026 GMT
Subject: CN=67e295ba-e2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:81:d4:5e:dc:43:d1:c5:e1:d2:db:4e:30:3d:
40:60:a2:fd:f3:0c:69:f2:2d:2e:f4:dc:b8:1c:8f:
f8:6b:91:45:1d:8b:ba:9e:ae:3d:0e:da:42:23:f2:
95:7b:e6:c1:56:ab:54:a9:0b:5b:75:cc:c7:0f:62:
36:02:95:a4:62:18:ed:65:a0:95:2a:b5:0f:a4:81:
e4:d4:4e:1a:a7:0a:6e:1f:51:fa:8c:cf:31:82:ff:
a5:e7:10:ba:8c:73:a0:88:c4:6b:d9:da:f6:b1:e5:
78:79:6f:69:da:e1:7d:7d:04:16:fb:4b:bf:80:2a:
67:83:5a:7b:ee:80:4e:22:92:b1:b3:e5:5d:c9:c0:
99:8f:7b:5b:f5:37:2d:dc:b3:3f:82:02:86:37:d2:
68:73:40:c3:fa:76:6b:f2:57:b5:80:bb:e2:d7:b2:
e0:7a:ab:da:fb:0a:8e:bd:41:0f:76:90:18:cb:c6:
66:8b:eb:b0:fa:36:95:01:5d:11:65:ba:51:82:3c:
9d:e6:69:78:9a:bb:db:55:fa:8f:7c:40:a8:27:6e:
02:b7:b6:34:09:40:1d:c5:1f:31:3e:2b:75:6c:7a:
39:c4:28:41:63:d9:c1:e8:a1:47:0f:1d:d6:13:cd:
f7:8d:14:7f:ad:f8:a7:8a:13:79:c3:f0:ef:77:77:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C2:03:AA:AC:99:A2:98:15:18:98:5B:20:A7:B1:7D:CE:A1:CE:8F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AF1BD718096D11F095144654762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.88.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:04:83:37:de:e5:af:9f:f6:d5:b4:d3:b1:38:10:37:93:be:
f2:58:09:dc:ec:e8:22:98:72:ec:f8:f7:29:8f:1a:37:7b:ad:
f9:6d:81:a0:75:99:c5:78:de:78:f0:ee:9e:55:68:ca:8e:81:
28:b2:f3:26:c2:45:a6:9d:bc:f2:df:6e:06:46:ef:41:77:2c:
65:83:ad:f0:01:e4:7e:fe:5b:a0:7c:d7:33:da:f5:81:70:a7:
b0:38:86:6b:1d:e7:fe:8d:68:7e:3a:e5:19:5f:c6:ac:4d:56:
b8:2f:a3:54:ee:35:c0:13:29:5c:28:54:07:5d:5a:c1:d2:fe:
65:22:31:b7:fe:5d:4e:ec:13:63:78:38:01:bb:0f:d6:13:4e:
dd:50:ff:32:a3:1b:b1:47:da:25:35:c6:9c:8c:33:57:da:86:
a9:18:af:ac:fc:0b:ee:33:08:09:dd:f7:75:e0:c7:0c:e2:59:
e5:40:f3:1a:43:ee:9f:67:d9:fe:30:51:a1:3d:a7:aa:31:e5:
12:47:9b:23:5a:37:cf:58:fa:b9:e5:85:a0:97:6c:ea:1c:9a:
f2:ac:05:ff:3a:b7:69:d1:7b:13:62:13:47:0d:cd:a3:50:35:
dc:1f:d9:db:b0:4d:00:d8:69:6d:44:5f:44:9f:67:e1:1b:32:
8e:40:3a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:02 2025 by rpki-client