Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D2F7BAFEFF0311EF8209CB9E762E951A.roa
File: D2F7BAFEFF0311EF8209CB9E762E951A.roa (raw, json)
Hash identifier: w5yK36FsCCe3kqmH/YqT/1VJAPN7cW5zKFay6LLo7AY=
Subject key identifier: FA:80:0A:3E:6F:31:5D:7A:6D:4B:61:5D:C3:C6:7B:31:52:B2:56:D7
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 06F5
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D2F7BAFEFF0311EF8209CB9E762E951A.roa
Signing time: Wed 12 Mar 2025 05:35:36 +0000
ROA not before: Wed 12 Mar 2025 05:35:31 +0000
ROA not after: Tue 01 Dec 2026 05:35:31 +0000
asID: 395374
IP address blocks: 102.135.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1781 (0x6f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 12 05:35:31 2025 GMT
Not After : Dec 1 05:35:31 2026 GMT
Subject: CN=67d11d28-eaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:09:e6:11:fd:a1:8b:3c:3d:a9:fe:69:dd:
db:56:eb:fe:aa:b6:0b:34:c6:64:e2:c9:c4:cb:b6:
ad:8a:73:14:3a:99:b6:e5:0c:56:08:8d:86:2b:39:
fe:fb:29:fe:c3:4c:8a:d5:31:93:7d:aa:ea:df:4a:
58:fb:13:b0:56:23:cd:9e:33:84:57:a9:24:15:f2:
0c:2d:e1:e2:81:0f:1e:6b:5a:a2:4c:53:b7:45:36:
c1:e4:44:79:bd:62:fa:1d:6e:db:59:13:58:f4:eb:
f4:4d:d8:e6:a1:30:92:61:85:86:b9:3a:f2:26:e4:
8a:2c:5b:be:5f:9f:54:b7:22:78:70:a2:17:20:f0:
65:4c:20:fd:1f:1b:56:ec:f8:ab:a3:ca:60:49:67:
c1:30:c6:5e:bf:a7:5e:42:1a:d5:52:08:2c:cd:3f:
2d:ea:46:4b:ad:a2:62:8b:36:92:1a:d3:36:2a:d1:
a1:5a:ed:91:a7:05:b4:fd:06:a6:a5:fa:43:b7:b0:
f2:29:3a:64:b0:51:be:76:e5:8e:e0:2d:e6:04:55:
ff:e1:50:fe:6f:4e:52:6f:ce:b5:fa:cc:a3:20:c3:
dc:e9:d6:41:e0:a6:dc:42:e8:aa:71:f0:14:22:67:
c1:71:4e:f2:3c:35:61:cd:0f:de:f4:c5:ca:38:84:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:80:0A:3E:6F:31:5D:7A:6D:4B:61:5D:C3:C6:7B:31:52:B2:56:D7
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D2F7BAFEFF0311EF8209CB9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.18.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c3:2d:86:c9:9f:2c:7a:d6:3f:33:7b:c6:a4:1d:82:e1:ea:
8c:e1:d7:68:3b:2e:21:d9:be:62:79:5f:0d:bd:cc:a8:f7:dd:
3d:b4:77:20:ae:7a:7e:00:54:f8:ea:e0:df:91:a2:3a:5b:ab:
56:14:10:af:e9:68:7c:22:12:2f:b1:a8:3e:2e:67:62:40:19:
7c:4a:6e:3e:1b:25:6c:a0:04:86:4c:ce:87:40:45:9e:ce:c0:
1f:73:17:d1:56:e5:50:67:9c:b3:8e:5b:fd:32:a2:9e:70:cb:
ef:af:0a:89:57:af:4a:90:7d:02:40:b0:75:34:e5:90:12:e3:
dc:41:5f:cd:56:3e:fb:10:e4:02:bd:3d:dd:cc:82:dc:8b:a1:
5e:84:5c:aa:b4:45:9b:bb:d0:4d:66:16:e6:aa:8f:9f:ec:8c:
d9:37:18:cf:45:b0:f3:22:43:02:a5:f4:bd:54:2a:42:ae:ee:
f0:2d:bb:1d:eb:83:b9:1a:56:a5:43:34:95:0c:1e:63:b3:48:
c2:ec:d0:72:69:02:cd:e5:f2:2c:bb:cf:3d:15:ce:70:48:80:
5d:34:b3:ca:b5:26:6c:79:c0:c4:f1:41:52:d3:00:46:9e:cf:
a3:9b:a6:9e:1c:c9:b7:aa:22:4c:24:72:d6:ee:ec:ae:80:76:
ad:ed:a4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:24 2025 by rpki-client