Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D06FAF700B9311F09AB50A6D762E951A.roa
File: D06FAF700B9311F09AB50A6D762E951A.roa (raw, json)
Hash identifier: duTX3joNP9E16gblcbrXII7M2GOB7osIrOOaaN7QyNs=
Subject key identifier: 20:04:2A:A2:60:E4:4D:D5:DB:95:18:76:B9:0A:14:BB:83:86:43:9C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 08A0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D06FAF700B9311F09AB50A6D762E951A.roa
Signing time: Fri 28 Mar 2025 05:16:33 +0000
ROA not before: Fri 28 Mar 2025 05:16:30 +0000
ROA not after: Tue 01 Dec 2026 05:16:30 +0000
asID: 136501
IP address blocks: 102.135.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2208 (0x8a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 28 05:16:30 2025 GMT
Not After : Dec 1 05:16:30 2026 GMT
Subject: CN=67e630b1-875b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:fb:e2:c9:f4:bf:13:68:74:c4:05:e6:89:
cb:b5:e4:65:7d:bc:e5:02:1f:de:d1:fc:46:d4:c5:
4a:98:25:b1:ed:4c:8d:21:d2:f3:54:a9:c2:ad:f2:
1c:c5:99:82:bc:27:f4:28:f1:a0:ed:c4:06:37:8c:
66:cb:c2:8c:5c:cc:c6:51:f1:89:73:09:05:93:5a:
38:1e:ab:ba:ab:6a:61:13:7a:78:31:bf:ad:d5:fa:
d6:e9:cc:0a:f1:f0:3f:dc:b2:e8:4c:47:7b:3c:7c:
28:ed:79:37:fa:17:27:6e:90:3c:02:8c:1a:b9:be:
6c:fe:4c:0f:78:e6:e7:59:34:9a:2b:5e:b5:8f:14:
09:00:c0:92:24:6f:c7:36:c1:2f:20:2f:2c:f6:c3:
a2:8d:4b:1f:25:88:02:7d:5d:63:c9:ce:a1:5b:e7:
cf:40:22:0e:ed:11:c0:d3:ee:8b:18:61:f1:f3:2b:
42:81:b7:67:78:d4:1c:ee:74:e0:60:c5:3f:1c:54:
77:0b:fe:36:45:28:3e:6f:13:1b:61:d3:b1:18:f8:
14:92:e3:03:42:10:2f:fe:f1:9a:b7:80:45:cb:b1:
62:72:fb:30:24:03:1a:29:06:c1:11:b4:4d:cd:99:
ab:06:a9:e1:b0:2e:a6:02:5d:89:69:af:c3:0e:3b:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:04:2A:A2:60:E4:4D:D5:DB:95:18:76:B9:0A:14:BB:83:86:43:9C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D06FAF700B9311F09AB50A6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.11.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1f:98:a6:82:4e:06:94:4d:47:00:9b:db:52:8e:b7:db:4e:
05:6c:62:73:87:64:8a:e4:13:40:4b:28:c4:32:d7:75:44:b4:
4f:29:3d:a3:88:21:44:34:e8:62:9b:f1:d6:ef:d5:e7:04:b1:
5c:98:2d:31:31:09:64:9d:39:a9:d0:6b:2a:d3:8a:22:bd:6c:
94:9e:04:3d:bf:a1:e9:f2:af:9c:3e:b6:ef:fc:d3:b4:8f:7f:
ec:eb:6f:ab:16:e1:a9:e4:c4:2c:3e:ef:d4:27:4d:03:41:af:
a9:ca:a3:3d:a6:a1:34:86:11:27:99:79:60:71:72:e9:eb:72:
c7:ba:7a:8e:ec:8f:7a:71:eb:f2:a9:c5:5b:32:93:8e:cc:54:
5b:81:0d:b1:f4:51:20:a8:c4:9c:5c:c4:f3:39:fd:96:65:5a:
1a:cb:92:7c:51:37:49:31:92:5d:d6:e9:1c:b6:f0:63:5d:ba:
6a:83:3b:d2:4f:4b:da:22:68:eb:3b:67:15:fc:f1:84:c5:b9:
66:e2:34:d4:1b:eb:4e:44:b3:80:f8:4a:b5:7f:a8:58:47:24:
26:47:9c:30:f9:db:0f:a9:6b:0e:19:89:6a:d1:e9:fc:c4:7a:
c5:94:55:91:bd:36:06:10:bd:fe:e5:d5:30:10:9c:c3:a1:a8:
36:81:2c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:27:02 2025 by rpki-client