Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E3C5A0C8017C11F08B443F85762E951A.roa
File: E3C5A0C8017C11F08B443F85762E951A.roa (raw, json)
Hash identifier: lOg3j4eCV2uOyx7kJCo0rzmrmqgOWlcqk76m9hl0ybI=
Subject key identifier: 1E:62:32:67:56:46:3F:D0:96:95:3F:AD:DA:5D:1D:BB:1D:AD:3B:EF
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0700
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E3C5A0C8017C11F08B443F85762E951A.roa
Signing time: Sat 15 Mar 2025 09:07:16 +0000
ROA not before: Sat 15 Mar 2025 09:07:12 +0000
ROA not after: Tue 01 Dec 2026 09:07:12 +0000
asID: 216183
IP address blocks: 102.135.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 15 09:07:12 2025 GMT
Not After : Dec 1 09:07:12 2026 GMT
Subject: CN=67d54344-2f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:9f:95:fe:89:b0:44:f4:27:c0:61:6e:92:
ea:6a:72:e1:01:72:c7:8a:28:06:5a:7f:50:3c:72:
6b:28:dd:fa:fe:c2:f5:bd:74:da:44:ef:68:1e:bb:
3e:1b:3a:ed:0f:ab:16:13:e9:4d:86:b8:f5:fd:9f:
ca:9a:35:a2:ef:5c:13:6b:47:30:a4:d6:5c:ad:21:
f9:47:a7:30:50:6f:32:bf:89:3b:8a:de:b6:ef:3f:
3b:00:b6:89:da:8b:f6:7f:56:e0:a8:0c:e4:9e:6a:
04:48:b2:4b:71:29:69:20:f2:61:49:94:65:48:b0:
90:d7:ae:2b:08:8f:8a:0c:7b:8c:2a:4c:fd:84:f8:
03:fc:01:d8:e7:df:31:b3:7a:57:c9:7c:72:31:8f:
fe:65:e1:19:40:59:d3:02:db:95:24:ff:bf:05:94:
71:d4:c6:76:e5:af:76:d1:eb:cd:08:83:6e:5b:72:
66:e4:7f:ef:1c:9f:f9:7d:01:ea:4e:94:09:ed:42:
c2:31:76:c3:29:fd:db:de:5d:22:63:ab:d5:5a:a6:
1b:a3:be:36:b6:a4:e2:9d:84:21:e7:41:90:73:7b:
9c:84:b1:db:5b:01:2c:2d:df:86:a0:60:c6:e9:fa:
cc:7a:57:2c:9d:4a:16:18:cf:67:ec:d0:cc:d3:a1:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:62:32:67:56:46:3F:D0:96:95:3F:AD:DA:5D:1D:BB:1D:AD:3B:EF
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E3C5A0C8017C11F08B443F85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.13.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0f:65:c3:58:38:59:28:50:2a:a6:19:af:00:6f:6a:d0:f4:
82:2d:a9:48:0d:64:8c:60:7b:77:f8:3c:f7:de:ff:4c:ca:4f:
23:33:d0:05:17:c5:9b:65:4b:6a:59:6f:dd:5b:d6:d3:5a:0d:
80:89:79:be:f0:77:b1:f5:64:20:bc:b6:53:fe:af:02:c6:a1:
42:ab:8e:d3:ee:53:d1:cf:97:1a:bc:9c:d9:19:43:aa:92:62:
e9:18:10:e9:ea:f3:7d:64:32:f5:6b:a4:40:76:8d:67:eb:45:
6e:93:b0:28:8f:4f:04:6d:14:a1:6a:42:15:77:6c:07:10:33:
8c:bc:83:12:21:18:91:d5:db:83:0c:66:99:d9:7f:f3:60:4a:
3f:0d:e3:d3:c5:de:06:16:1a:28:cd:50:7d:97:8d:a7:a7:f4:
f2:4d:b6:19:0c:b9:0c:40:9b:37:2c:ad:b5:3f:c0:8f:49:dc:
cf:6c:2d:3a:1b:fe:0e:f4:a1:be:80:bd:07:f1:d3:d2:01:b8:
16:15:d1:ef:05:57:5b:8b:64:ca:49:cc:7e:21:69:e3:34:c4:
28:90:8f:d5:ba:81:3f:44:15:80:af:08:ef:18:a7:c0:3c:fa:
18:bd:d1:9d:ad:de:7f:4b:32:06:8b:c3:bb:41:80:53:1a:4c:
dd:a9:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:22 2025 by rpki-client