Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EDEBE6E80A1411F0AC7DFD55762E951A.roa
File: EDEBE6E80A1411F0AC7DFD55762E951A.roa (raw, json)
Hash identifier: smbglLRroGkVzdyrVUC7Yj2eDDuz6Efcr/wkRqKmMc0=
Subject key identifier: 67:A3:37:4E:26:B0:0D:D9:57:07:13:F4:8B:1B:D9:FD:3C:3D:0D:44
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0884
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EDEBE6E80A1411F0AC7DFD55762E951A.roa
Signing time: Wed 26 Mar 2025 07:35:46 +0000
ROA not before: Wed 26 Mar 2025 07:35:42 +0000
ROA not after: Thu 26 Mar 2026 07:35:42 +0000
asID: 4766
IP address blocks: 102.135.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180 (0x884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 26 07:35:42 2025 GMT
Not After : Mar 26 07:35:42 2026 GMT
Subject: CN=67e3ae52-0041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:70:7e:61:e4:9b:d4:0f:ed:64:71:aa:72:
cd:b5:b7:1d:0b:47:47:a5:13:1c:84:46:5d:71:d0:
5e:96:58:0f:7a:dd:a0:85:8c:3d:00:4b:ed:eb:24:
dc:e0:ff:00:db:8f:d1:a7:04:15:04:0e:af:71:32:
44:07:56:3f:bf:55:5f:77:9a:72:99:28:0a:b0:c9:
e5:53:fa:9d:1c:05:93:ac:a9:54:1c:b6:03:27:53:
31:75:40:df:32:66:53:06:42:c6:1b:78:a2:00:e0:
4f:89:3e:78:14:f3:d7:2a:17:6f:fe:bc:6d:de:db:
d3:a0:97:d8:f6:4e:f8:bb:5c:3a:e9:87:25:c0:0a:
52:f2:98:a0:5f:f2:c9:8d:c1:ed:75:63:68:ea:e1:
0a:9f:b2:00:c5:69:6e:06:b6:d4:a6:b8:5d:ba:80:
52:77:59:5e:65:00:96:a0:de:14:31:20:0e:03:8c:
1e:02:52:1c:27:9f:15:df:2e:0a:9c:32:de:5e:4d:
3a:73:c7:bd:cd:87:a3:01:aa:0b:ac:80:be:ef:92:
39:0b:a6:c4:9c:9c:ad:28:46:f1:eb:d6:93:fd:93:
04:af:e2:37:ff:50:06:25:61:24:29:1e:18:c1:e5:
13:df:39:e5:96:2b:93:f5:e6:24:c6:bf:30:b6:3d:
75:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A3:37:4E:26:B0:0D:D9:57:07:13:F4:8B:1B:D9:FD:3C:3D:0D:44
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EDEBE6E80A1411F0AC7DFD55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.89.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:5f:da:88:c9:ad:65:cf:52:f8:01:c8:00:3f:c8:21:0b:de:
f5:a6:b2:80:e3:5c:92:46:9f:4c:76:9a:12:6b:7a:0b:1d:b9:
d2:0f:d8:aa:93:05:cb:22:6d:1c:4b:96:67:96:fd:8c:1d:d8:
1a:d6:7b:24:24:5e:b3:d7:d3:6e:5d:ea:17:dd:35:9c:8b:f1:
33:75:b8:b3:ab:12:ca:ee:cc:28:0c:d0:b3:2e:48:e4:4f:e6:
06:33:da:d4:87:9e:f6:22:a2:3d:6d:ac:39:69:55:29:a8:12:
38:12:2b:7b:d9:cb:db:6f:c3:a4:80:9a:28:a9:83:8b:bd:87:
48:63:8f:4f:33:5c:7c:d9:f3:da:12:38:15:3f:e1:79:b7:7c:
99:52:d9:d4:7c:a6:d7:c5:79:0e:55:ab:03:a3:c8:73:78:0c:
d7:59:d0:21:52:ca:07:54:4b:53:15:34:46:75:26:30:cb:a6:
f7:d3:88:a6:33:79:c4:4b:55:d8:29:54:49:69:30:8b:d9:cf:
43:a5:f1:2f:c0:58:00:a2:be:69:3a:19:87:a3:40:94:a4:f9:
79:78:fa:a3:6d:0b:c6:1b:ff:b8:82:2c:22:fc:a1:ac:80:a8:
bf:a3:0d:54:e1:8d:dc:f8:d3:4f:f8:98:4d:ff:13:2d:b6:65:
f6:97:9f:a7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjYwNzM1NDJaFw0yNjAzMjYwNzM1NDJaMBgxFjAU
BgNVBAMTDTY3ZTNhZTUyLTAwNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwn3B+YeSb1A/tZHGqcs21tx0LR0elExyERl1x0F6WWA963aCFjD0AS+3r
JNzg/wDbj9GnBBUEDq9xMkQHVj+/VV93mnKZKAqwyeVT+p0cBZOsqVQctgMnUzF1
QN8yZlMGQsYbeKIA4E+JPngU89cqF2/+vG3e29Ogl9j2Tvi7XDrphyXAClLymKBf
8smNwe11Y2jq4QqfsgDFaW4GttSmuF26gFJ3WV5lAJag3hQxIA4DjB4CUhwnnxXf
LgqcMt5eTTpzx73Nh6MBqgusgL7vkjkLpsScnK0oRvHr1pP9kwSv4jf/UAYlYSQp
HhjB5RPfOeWWK5P15iTGvzC2PXU/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZ6M3
TiawDdlXBxP0ixvZ/Tw9DUQwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0VERUJFNkU4MEExNDExRjBBQzdERkQ1NTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh1kwDQYJKoZIhvcNAQEL
BQADggEBADtf2ojJrWXPUvgByAA/yCEL3vWmsoDjXJJGn0x2mhJregsdudIP2KqT
BcsibRxLlmeW/Ywd2BrWeyQkXrPX025d6hfdNZyL8TN1uLOrEsruzCgM0LMuSORP
5gYz2tSHnvYioj1trDlpVSmoEjgSK3vZy9tvw6SAmiipg4u9h0hjj08zXHzZ89oS
OBU/4Xm3fJlS2dR8ptfFeQ5VqwOjyHN4DNdZ0CFSygdUS1MVNEZ1JjDLpvfTiKYz
ecRLVdgpVElpMIvZz0Ol8S/AWACivmk6GYejQJSk+Xl4+qNtC8Yb/7iCLCL8oayA
qL+jDVThjdz400/4mE3/Ey22ZfaXn6c=
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:17:26 2025 by rpki-client