Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B9984380D33911EF9F6E9CB3762E951A.roa
File: B9984380D33911EF9F6E9CB3762E951A.roa (raw, json)
Hash identifier: fV22DHPfXS3v9mwhGcHNppQwtn3BaNufpVto6/Bp/E8=
Subject key identifier: 9A:E6:47:FA:EA:CD:AA:9E:34:64:21:D5:D1:70:10:52:14:90:5D:6F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 056C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B9984380D33911EF9F6E9CB3762E951A.roa
Signing time: Wed 15 Jan 2025 12:10:35 +0000
ROA not before: Wed 15 Jan 2025 12:10:31 +0000
ROA not after: Thu 15 Jan 2026 12:10:31 +0000
asID: 53356
IP address blocks: 102.135.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1388 (0x56c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 12:10:31 2025 GMT
Not After : Jan 15 12:10:31 2026 GMT
Subject: CN=6787a5bb-cdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:cd:f3:b5:9c:4e:07:c5:12:7f:6b:57:6d:
9f:45:a3:a8:22:0b:b1:47:37:f9:30:50:61:e4:68:
35:5a:81:7c:0f:d6:1a:8a:1b:00:33:4e:a1:c6:af:
18:56:44:fa:35:30:69:9d:7b:22:27:1a:79:ee:0c:
f1:00:38:8e:0c:c9:48:b6:ee:f2:ba:05:8a:bf:3b:
f7:03:da:90:7d:40:83:b0:f5:cb:ca:54:02:9e:85:
af:23:c5:8e:80:62:e0:85:39:5b:95:9a:7a:a8:1b:
07:b4:df:0a:a2:c9:9d:91:d5:3a:15:8d:59:6e:5c:
87:b8:73:67:02:f9:35:5b:03:7e:a7:b3:21:a9:cc:
20:ac:49:09:35:9f:c8:2a:fd:ed:b4:11:83:6f:7a:
6b:cd:46:b5:e3:aa:4d:2a:8b:83:62:56:ef:34:c7:
90:3f:38:b9:e2:8a:e6:c7:e2:f7:a7:db:6e:6d:a5:
f2:14:eb:36:0e:a5:81:5a:a6:bb:1a:f5:5d:80:3e:
75:17:27:d6:c9:e4:cd:cd:10:52:32:84:aa:59:9c:
1d:99:be:71:74:c0:eb:cd:10:a6:c4:ee:e0:2c:d8:
06:9c:38:02:11:86:06:94:cf:a6:c8:bb:bd:1c:36:
a6:f2:13:38:04:96:bb:41:74:bc:1b:59:47:2a:0e:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E6:47:FA:EA:CD:AA:9E:34:64:21:D5:D1:70:10:52:14:90:5D:6F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B9984380D33911EF9F6E9CB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.51.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:5b:a6:a5:70:60:c9:13:c5:34:ab:80:bd:df:9f:fc:fc:d0:
f5:cb:65:d7:06:bb:03:88:ca:a3:c1:5f:75:08:3b:67:54:ee:
f1:29:00:19:81:8c:86:5f:b8:d9:09:91:a3:a6:d7:6b:ce:8f:
02:9a:a1:d8:1d:21:1c:62:4c:75:20:dd:74:a0:0e:af:18:4b:
4c:21:48:da:9b:9a:ed:67:63:b8:40:b2:3e:c0:6c:81:f3:91:
58:0b:08:91:e5:ac:f6:bd:b9:f8:a9:a3:93:54:2b:45:5c:a9:
ca:d8:79:a4:ec:da:ae:5c:e2:93:e6:29:94:31:47:ac:dc:ce:
2c:52:1f:75:59:4a:f5:bd:85:93:36:66:60:df:2a:82:d8:31:
4f:a5:2e:fc:fd:37:d1:a4:b8:94:24:f7:9f:7f:68:22:40:3c:
69:49:00:bf:76:9f:49:00:6f:fb:cf:50:9f:74:fc:3d:fc:d7:
af:23:e7:4f:66:18:af:49:a3:9a:fd:13:2a:9c:29:c1:58:b9:
84:26:e0:a6:12:e4:3d:63:4d:bf:2d:8f:be:49:39:84:2c:68:
cd:80:63:09:e7:0a:41:c6:3d:e0:b5:97:e8:64:18:1d:ac:47:
af:7c:76:59:00:d5:e0:1d:50:2c:2b:57:e5:4d:2e:ec:0f:d0:
79:e6:09:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:44 2025 by rpki-client