Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C9D1577A0A1411F0A7A1F653762E951A.roa
File: C9D1577A0A1411F0A7A1F653762E951A.roa (raw, json)
Hash identifier: onuc+4y4RkpHu/aMp5YqTbnNW009Q630RM4zPIMEBE0=
Subject key identifier: 01:CF:BE:7A:9F:66:64:DD:2A:4A:AD:40:56:7F:8E:21:45:6C:6B:67
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0882
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C9D1577A0A1411F0A7A1F653762E951A.roa
Signing time: Wed 26 Mar 2025 07:34:45 +0000
ROA not before: Wed 26 Mar 2025 07:34:41 +0000
ROA not after: Thu 26 Mar 2026 07:34:41 +0000
asID: 4766
IP address blocks: 102.135.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2178 (0x882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 26 07:34:41 2025 GMT
Not After : Mar 26 07:34:41 2026 GMT
Subject: CN=67e3ae15-9205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:52:cc:0d:fe:93:f5:9d:b5:27:77:8e:62:
fd:f8:ea:45:5e:cd:25:66:07:66:ac:74:b1:8e:68:
c3:0d:57:35:5d:64:68:8c:9b:90:8f:23:56:e2:5e:
46:17:6f:18:2a:fb:d6:e5:e2:cb:fa:21:c1:34:b2:
52:63:fc:a6:af:66:c1:dd:32:99:3c:0a:1b:68:e1:
34:2e:e1:19:40:44:96:99:3d:93:7e:70:28:60:cb:
e4:7f:fd:a1:bc:02:47:b8:6e:56:ba:26:0a:7c:3d:
a6:9b:25:58:67:8c:c5:95:8f:ed:28:bd:17:cb:4c:
3f:92:15:61:79:5b:57:62:c3:a1:62:0d:5d:24:ac:
2e:a8:3b:fb:59:8e:ce:26:f0:14:dd:b8:08:6f:24:
64:15:ac:94:db:03:dd:a3:f1:70:61:34:04:3c:2f:
dc:15:19:e3:76:72:ac:b9:2c:4b:24:75:44:78:d5:
76:00:27:50:d4:00:fe:02:c2:b9:4c:8b:56:08:21:
ff:ad:ee:2f:0f:cc:b6:11:36:4b:e9:8c:77:23:ad:
bf:32:89:30:9a:01:2e:53:6e:09:93:8a:6d:06:08:
02:f2:4f:03:6b:e6:80:e9:a5:6e:85:75:33:f6:f2:
2f:d2:4a:92:6c:45:e0:11:30:c6:f2:39:af:fb:dd:
9f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CF:BE:7A:9F:66:64:DD:2A:4A:AD:40:56:7F:8E:21:45:6C:6B:67
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C9D1577A0A1411F0A7A1F653762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.87.0/24
Signature Algorithm: sha256WithRSAEncryption
05:da:3a:f9:6a:74:56:a1:1b:fe:f3:46:ca:d0:cd:e1:51:f6:
7b:ec:69:21:c1:40:77:19:77:ea:98:01:fe:7d:df:68:2d:79:
5e:90:da:04:e7:fe:19:97:65:98:60:16:b0:69:ec:22:b7:23:
c1:ac:5e:04:5a:b0:87:02:59:82:60:fd:35:9a:ac:75:c6:9e:
6b:cc:62:b7:5b:3e:30:93:12:bd:7e:21:aa:fd:7b:ed:d8:2d:
b6:5d:11:89:c9:b6:1a:91:33:7b:59:f1:be:7d:19:10:14:79:
8b:3a:60:8c:b2:09:4f:c5:c4:34:64:fc:36:d8:0b:0f:95:39:
c0:8f:55:6a:a4:92:e2:19:b5:c4:f9:08:76:d8:8a:74:6c:c3:
a2:24:1a:40:7f:81:af:3b:95:28:26:89:1f:be:89:5d:00:1c:
6d:b7:91:3e:79:3a:ac:47:6a:25:cb:00:0d:cb:8a:ec:55:9a:
02:62:85:1f:f4:a5:3c:78:76:d6:7e:0d:09:09:aa:cd:56:77:
27:c3:49:f2:37:c3:33:ae:f8:02:84:7d:4a:de:f4:34:a6:60:
9a:27:86:25:11:de:ca:a3:6a:ce:7b:12:68:82:60:d1:d3:89:
e4:95:68:3a:3d:f8:0e:28:92:f7:37:82:97:3d:b0:af:54:ee:
7d:21:d9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:43 2025 by rpki-client