Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CDC24338061511F09B343C6F762E951A.roa
File: CDC24338061511F09B343C6F762E951A.roa (raw, json)
Hash identifier: l+o/vclLbBAOvpxyIiV+q869uzbIR0/ZMsEaSYwHPNc=
Subject key identifier: 91:CC:7C:D7:D7:11:2C:D3:72:2F:B6:8E:A4:33:65:FE:FC:BE:DF:50
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0784
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CDC24338061511F09B343C6F762E951A.roa
Signing time: Fri 21 Mar 2025 05:31:56 +0000
ROA not before: Fri 21 Mar 2025 05:31:52 +0000
ROA not after: Sat 21 Mar 2026 05:31:52 +0000
asID: 329007
IP address blocks: 102.135.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1924 (0x784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 21 05:31:52 2025 GMT
Not After : Mar 21 05:31:52 2026 GMT
Subject: CN=67dcf9cc-16d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:15:9a:f6:fe:91:fc:0e:53:ed:6c:e3:a2:
86:a4:c5:76:c6:13:ab:67:eb:45:e8:44:10:1e:0b:
a8:48:ae:29:2f:4d:e0:16:65:04:59:65:c5:c0:9d:
87:93:92:ac:85:a5:17:3e:2d:d8:1c:d1:66:d5:c3:
86:24:61:0f:b4:fe:56:e0:09:f1:19:7f:82:2d:ba:
31:f3:9d:fd:c7:75:4e:e5:64:60:16:26:4d:55:f2:
df:fd:38:e6:f5:ac:72:73:94:c3:5d:4c:d2:fb:13:
0f:4e:ef:53:9f:84:0e:70:c4:43:80:c5:97:c1:25:
cb:7b:f6:7e:ed:29:ee:62:bd:a0:e4:45:1c:6a:b4:
56:e9:f1:04:b0:d6:3e:8b:b4:17:6d:34:02:70:bd:
2a:84:c1:d8:57:e4:6d:9f:6a:b1:56:b0:c9:10:f5:
aa:1a:89:62:db:d6:80:da:b3:7b:f1:df:ea:73:09:
b7:81:71:ba:9c:9d:59:8f:58:7d:7c:e4:0e:c4:a2:
bd:2a:be:5f:9c:d4:4c:1d:74:8d:c8:f7:06:5c:4a:
09:e3:62:04:06:a3:0f:6d:48:82:6c:b8:f2:c0:75:
a3:29:25:1b:b9:d6:e9:57:9d:9f:38:cc:63:1f:73:
45:b7:d6:74:1b:66:cc:31:4e:0f:df:03:df:90:6d:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CC:7C:D7:D7:11:2C:D3:72:2F:B6:8E:A4:33:65:FE:FC:BE:DF:50
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CDC24338061511F09B343C6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ea:93:7a:cb:36:d9:e3:20:4e:d1:ba:bd:af:1b:e1:2c:59:
9f:97:89:e4:54:14:95:09:3a:76:8e:35:88:4b:94:ef:16:19:
9b:fe:79:19:f6:0f:d8:e8:e0:34:53:80:71:38:c5:a0:b1:84:
e7:96:1e:29:b2:e3:3c:fc:88:ee:88:96:59:34:d7:ab:24:a6:
10:5c:78:90:de:60:49:21:94:23:2e:ff:a6:ad:2f:52:a9:81:
5e:9f:ab:a8:2d:ef:4f:4c:24:1d:14:00:a4:20:8d:29:a7:71:
24:a1:37:ff:e8:bb:13:09:0c:02:0a:58:ad:ea:a9:e1:27:04:
73:c1:5d:bf:01:90:9b:e5:af:3a:1f:60:ff:8d:06:ca:a0:2f:
e3:e9:cd:2c:73:91:ae:c1:25:49:72:e4:3a:b0:60:f0:b5:e9:
c7:2a:e5:78:d3:74:bc:c9:b2:37:83:b6:c5:5a:2c:58:3d:ff:
f2:58:d0:22:80:0b:0e:65:ef:61:b2:8d:24:45:e9:0d:4d:4e:
0e:a3:72:17:88:16:bc:9e:8d:93:84:d7:a7:d2:da:eb:98:9c:
ba:18:e8:a6:8e:f2:48:5c:f2:82:c8:72:95:2c:56:0e:4b:e1:
8b:54:cf:79:cf:6d:3a:52:fe:19:d4:9f:fc:c8:3b:37:db:2b:
6a:6e:94:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:35:51 2025 by rpki-client