Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EF0F8F7A041F11F0B746A459762E951A.roa
File: EF0F8F7A041F11F0B746A459762E951A.roa (raw, json)
Hash identifier: O6jXblPKMdCrwDwp+jAmmpGQIK8yWf/OVQGFewExiHk=
Subject key identifier: 1A:F1:35:31:6C:07:DA:A1:5F:FC:59:63:53:C3:1F:79:89:2C:91:5D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 073F
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EF0F8F7A041F11F0B746A459762E951A.roa
Signing time: Tue 18 Mar 2025 17:39:25 +0000
ROA not before: Tue 18 Mar 2025 17:39:21 +0000
ROA not after: Tue 17 Mar 2026 17:39:21 +0000
asID: 329007
IP address blocks: 102.135.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1855 (0x73f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 18 17:39:21 2025 GMT
Not After : Mar 17 17:39:21 2026 GMT
Subject: CN=67d9afcd-b39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:d9:a4:4d:03:17:86:a9:11:94:c9:c9:70:
72:5c:65:97:88:64:1b:3c:af:c7:31:c4:f3:47:b0:
40:91:cf:86:23:a2:28:fb:a4:59:30:a8:10:cd:7b:
07:0b:be:53:46:f8:39:a4:a0:a7:a8:9c:d7:0a:90:
2d:47:6d:8d:1c:80:07:5d:f6:67:84:a0:01:20:60:
1f:2e:5b:40:98:4c:3b:08:32:5f:9c:78:af:92:09:
16:17:3c:37:f0:62:e3:60:1d:ee:99:92:fb:55:ce:
f8:e4:cf:3c:6d:1a:24:d1:d6:47:d5:95:3b:7c:4d:
0e:cc:c9:42:e9:2b:92:39:f8:b5:63:36:9b:c5:dc:
29:ac:1d:41:e4:db:3e:4c:a6:5f:9f:4d:84:ba:7e:
fd:19:5d:18:ec:a7:59:ab:2d:b4:ac:d8:ce:2f:6b:
07:4d:83:8f:9a:20:fc:c8:ea:3b:ea:61:e9:32:cf:
b9:53:29:02:e3:1d:cc:0f:93:92:e3:b9:af:43:0e:
94:7c:7e:34:00:09:5a:89:9e:05:4d:86:8f:4d:95:
4e:e5:d8:a6:ac:3f:df:b4:f9:9b:74:a2:e2:3f:0f:
74:0a:c7:a0:d6:df:cd:67:c7:30:13:fb:35:7f:05:
4d:e9:e0:d5:93:fa:dc:d3:96:5a:30:f2:1a:d4:be:
ee:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F1:35:31:6C:07:DA:A1:5F:FC:59:63:53:C3:1F:79:89:2C:91:5D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EF0F8F7A041F11F0B746A459762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.75.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:f8:59:67:b7:68:59:66:2f:ce:47:e5:eb:45:df:a8:1e:ee:
10:dd:e8:6b:99:6b:df:e5:25:45:a4:fb:f1:c1:2c:71:ab:67:
cd:d7:ca:37:6d:59:16:7e:b4:8b:14:9d:9f:22:28:d6:91:51:
1e:d3:f5:e0:48:1c:a9:5c:dc:26:04:df:9f:17:44:8b:98:ff:
32:7f:be:20:ab:b3:d1:f5:06:70:f7:08:d5:40:cf:d1:17:f5:
85:a9:8f:3a:d1:85:6b:80:0b:6b:f2:80:3b:ed:20:33:b5:3e:
12:74:28:ac:1a:e2:9c:45:0a:ba:2d:f0:05:15:17:d2:64:8e:
5b:eb:96:6c:37:d2:de:59:f6:0b:ff:02:dc:02:cb:be:e7:01:
81:e0:df:7d:53:67:4c:df:15:cf:a5:f1:13:36:e5:72:26:a0:
82:21:cb:e1:8f:62:72:31:5a:62:9e:f3:14:bb:50:b1:b0:5a:
c9:8b:77:19:48:a8:c3:63:e5:66:24:fb:7a:8a:6b:1d:0e:79:
59:9b:38:39:26:cd:3e:54:db:2d:ad:8a:cf:9d:0b:53:99:82:
d5:a3:26:8a:74:7e:d9:55:b4:d0:0d:48:89:37:cf:14:17:b3:
e8:02:a8:4d:25:32:f2:56:a8:b8:1f:4d:a9:f7:47:f1:aa:74:
6f:6c:40:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:21:18 2025 by rpki-client