Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D2323862D33711EF8640CEA6762E951A.roa
File: D2323862D33711EF8640CEA6762E951A.roa (raw, json)
Hash identifier: WkFGDxdMBvj4f56dyI1EJkxlK9UBh/7oeJ+NWCWsHV4=
Subject key identifier: 22:39:55:6D:57:F2:94:1B:B0:1A:3B:29:EC:3A:C4:AF:F1:3E:49:4D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0558
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D2323862D33711EF8640CEA6762E951A.roa
Signing time: Wed 15 Jan 2025 11:56:58 +0000
ROA not before: Wed 15 Jan 2025 11:56:45 +0000
ROA not after: Thu 15 Jan 2026 11:56:45 +0000
asID: 53356
IP address blocks: 102.135.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1368 (0x558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 11:56:45 2025 GMT
Not After : Jan 15 11:56:45 2026 GMT
Subject: CN=6787a28a-b602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:0f:c4:a3:e3:71:cc:1d:64:51:be:fd:25:
c6:33:34:6b:5d:51:de:39:a7:7c:a8:96:b7:3a:a9:
08:5c:3b:23:56:dd:5e:22:80:25:52:2a:ad:f4:f7:
59:95:54:49:40:a5:39:19:38:ab:69:a5:9d:79:10:
51:2f:47:c3:9a:f2:46:78:da:56:77:a9:95:13:c1:
3a:96:be:21:92:40:ab:db:a3:e1:7f:e8:c0:85:06:
39:94:52:a3:73:80:ff:8e:0d:8c:b6:d8:20:b3:33:
75:e6:20:20:cf:a3:90:dc:38:5e:71:ee:aa:5a:15:
d0:e2:50:d1:c7:b1:95:d4:25:15:8c:5e:01:1c:25:
8a:b0:c2:c3:c6:ec:73:50:ea:36:3b:bf:02:a0:c9:
7c:fd:f9:6c:81:67:da:4a:ba:40:21:45:47:9e:01:
c3:d0:55:52:ca:23:7d:41:d2:e2:c5:ef:45:84:e0:
4f:ea:8b:1a:95:b5:54:9a:e7:ba:42:f8:e6:12:28:
f0:13:c0:58:b8:80:0a:ee:54:4c:3e:12:3d:ad:37:
5a:18:72:fb:1e:53:d1:28:4a:75:b1:47:61:5e:70:
b4:d4:94:ff:f5:1b:21:8d:e8:8f:dd:30:15:a8:02:
d3:5c:b6:f9:a7:c9:37:bd:9d:24:84:2e:cb:21:6e:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:39:55:6D:57:F2:94:1B:B0:1A:3B:29:EC:3A:C4:AF:F1:3E:49:4D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D2323862D33711EF8640CEA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.58.0/24
Signature Algorithm: sha256WithRSAEncryption
26:7f:23:6e:48:dd:32:47:43:82:b0:e3:29:0b:0f:31:6c:23:
22:33:6b:40:2e:3a:15:4f:2c:ab:ad:45:09:73:5c:ad:fd:9c:
6b:f7:71:70:0b:94:9e:ea:17:cd:c2:68:7b:b5:60:4f:78:b0:
6a:9f:5d:df:13:17:0e:b4:f5:b8:b0:40:88:8f:af:40:a9:fc:
3b:81:fd:fa:f3:e6:e3:c1:eb:41:68:3a:cc:29:a9:4e:d2:ca:
6c:cc:3b:c8:2d:44:6f:ac:85:86:5b:84:b4:fc:ab:fe:a5:a1:
cc:44:db:23:8b:78:ea:cc:20:73:9b:fc:52:16:a9:81:d4:5c:
d9:8c:67:3a:12:01:d4:23:87:aa:cb:00:6c:bb:3d:d0:83:f2:
aa:65:bf:b7:93:00:c0:d5:d9:b5:ef:a4:65:14:1e:4a:87:cf:
c2:9d:16:a8:c5:74:7d:17:e1:25:d9:10:7b:68:6c:25:a7:eb:
12:3c:e8:22:d1:cf:ff:95:c8:e7:c7:ab:c8:05:d2:a7:09:cf:
6d:17:bc:ab:21:8d:69:42:22:79:49:71:d8:92:ff:0c:38:67:
12:6d:78:dd:34:c8:5a:67:e7:d2:c8:e5:c2:b6:01:5a:e7:80:
4d:47:f0:a5:ac:4d:6b:6f:19:b4:fd:81:52:40:c2:74:4e:63:
7f:45:ef:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:20:44 2025 by rpki-client