Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D8F4D6D0D33411EF8CAC3F95762E951A.roa
File: D8F4D6D0D33411EF8CAC3F95762E951A.roa (raw, json)
Hash identifier: HEbXHJBllTeSDw6GW95E2p/gLLmAq1owGrHF20uTgDE=
Subject key identifier: F2:FC:A1:A0:06:68:DF:5C:31:AC:81:29:16:0D:F3:7C:87:B3:CD:21
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 052F
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D8F4D6D0D33411EF8CAC3F95762E951A.roa
Signing time: Wed 15 Jan 2025 11:35:40 +0000
ROA not before: Wed 15 Jan 2025 11:35:29 +0000
ROA not after: Thu 15 Jan 2026 11:35:29 +0000
asID: 53356
IP address blocks: 102.135.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1327 (0x52f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 11:35:29 2025 GMT
Not After : Jan 15 11:35:29 2026 GMT
Subject: CN=67879d8c-f344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:46:50:af:b2:63:4e:2d:74:20:8f:b7:84:
60:97:2e:70:7c:71:20:59:e2:c7:33:10:11:55:d4:
6d:b7:1d:0a:8c:65:0d:07:18:36:14:1b:6a:63:99:
f5:d8:5c:98:1c:a1:96:54:5e:23:4b:2f:55:5a:e4:
d4:bb:cf:ab:0b:4d:99:df:20:f5:a0:e2:8b:7c:cd:
71:37:7b:77:81:ab:70:df:22:db:73:47:4e:d1:f9:
57:08:db:44:5a:97:fe:57:2f:6f:ce:05:39:d9:e8:
ff:5b:f7:dd:a4:b8:d6:ee:db:f9:dd:ef:51:6f:48:
73:e2:8b:94:55:14:17:9c:c1:95:aa:62:32:56:bf:
f8:09:fa:47:e2:2e:42:ea:68:6d:c1:82:0f:ac:bf:
90:79:5b:51:9d:fc:e2:7d:52:9d:35:96:63:4f:e7:
d3:0a:05:39:0a:b0:1c:9c:42:41:18:1a:4a:80:02:
b0:bc:25:13:b1:3a:e4:7b:50:0d:b3:aa:2e:f2:36:
e2:17:c0:f0:48:c7:0a:27:96:5b:90:04:f7:74:a9:
f3:81:7a:2a:8c:86:62:a8:37:ce:c0:86:2a:93:70:
0a:f2:1d:50:19:45:db:10:e9:16:2d:63:3c:bc:99:
44:24:a8:52:84:ef:e4:dd:a7:9e:2b:dc:38:22:d5:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FC:A1:A0:06:68:DF:5C:31:AC:81:29:16:0D:F3:7C:87:B3:CD:21
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D8F4D6D0D33411EF8CAC3F95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.62.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c4:20:1c:55:c4:c5:10:b5:36:75:56:93:d5:92:53:66:04:
b7:95:2f:48:a4:d2:d7:81:7d:42:63:26:5c:10:de:7e:e7:5e:
cb:6c:59:97:3d:dd:57:1d:0c:15:5e:a1:42:30:77:be:8e:22:
8d:2b:87:39:9b:7b:a2:32:9c:90:71:74:e2:fd:e1:7a:a1:82:
03:4f:ee:e4:c1:55:d3:5c:8d:d7:2a:ea:2e:9d:3c:b5:07:f0:
fd:c7:77:59:89:75:8f:99:49:8b:15:d8:d9:f8:9b:c7:67:78:
74:1a:81:b6:f9:91:06:f5:50:b2:fa:df:28:7b:ce:58:35:39:
b9:33:ac:31:44:9f:73:96:2f:50:fc:95:1c:97:10:1d:57:8e:
a9:27:f7:11:aa:26:88:d6:27:7a:b5:1c:69:3e:6b:a2:77:be:
18:d3:98:0b:6c:0f:ce:f1:3c:d2:d0:6b:84:03:52:3d:0e:69:
ed:d0:1c:dd:57:7a:6e:e6:d5:d8:0f:be:32:ca:95:c5:5e:d1:
e4:29:00:32:e9:cf:19:de:91:9e:a9:9d:2f:ec:0a:cf:f6:ed:
52:b4:d6:26:99:c0:7a:e1:ab:60:17:68:a2:56:be:7f:c5:d3:
03:59:6d:cd:62:03:f5:94:f7:e2:cf:55:50:7b:c4:a6:bc:68:
cb:9a:d2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:50:36 2025 by rpki-client