Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F5F3254E042011F085CD9C61762E951A.roa
File: F5F3254E042011F085CD9C61762E951A.roa (raw, json)
Hash identifier: OknpM1lsMLtQKvtcA7R5q2UfvVFm2tbceD3Jb2YD/CU=
Subject key identifier: E9:47:9E:4B:8B:AF:B6:AE:4F:F3:B1:AA:9D:6C:B6:7A:2E:3E:90:FB
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 074F
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F5F3254E042011F085CD9C61762E951A.roa
Signing time: Tue 18 Mar 2025 17:46:46 +0000
ROA not before: Tue 18 Mar 2025 17:46:42 +0000
ROA not after: Tue 17 Mar 2026 17:46:42 +0000
asID: 329007
IP address blocks: 102.135.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1871 (0x74f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 18 17:46:42 2025 GMT
Not After : Mar 17 17:46:42 2026 GMT
Subject: CN=67d9b186-ac6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:93:c1:86:6f:a4:fe:ec:86:da:23:d6:8c:
5b:0e:43:f1:fb:93:78:ce:d9:93:1e:f2:b4:b8:75:
d0:d5:e3:ad:e2:81:0f:f2:88:97:32:3b:5c:19:5f:
b7:76:76:45:06:44:47:bf:c4:7b:00:be:0a:d7:00:
ba:9f:64:1f:da:8a:c4:4d:76:ea:1b:2b:8d:76:df:
6b:9e:e3:f0:ef:fb:fc:59:35:6a:de:0f:49:8c:da:
f0:b5:44:09:18:8f:7f:a4:f4:0b:c9:64:de:14:11:
25:c8:17:40:24:eb:50:7f:2a:b4:f4:1d:8f:0e:86:
45:81:38:bd:79:a8:53:87:24:c4:47:db:85:1d:27:
40:14:43:96:bb:5e:c3:e9:45:04:55:55:24:10:87:
a7:82:44:4b:f0:72:3a:21:2a:50:9e:50:55:73:29:
88:20:8e:d0:e9:d6:c7:75:15:40:c3:9e:f5:22:a2:
49:f0:0a:c1:e2:d2:d0:28:55:46:93:2b:ec:95:98:
42:2f:ce:20:7f:26:6b:0f:7f:5c:bf:b6:ab:35:6e:
59:d8:22:43:6c:00:6c:d1:d0:7f:fe:ba:ca:b9:dc:
32:ca:f8:89:b4:ad:19:1f:e8:08:37:71:3b:85:77:
e5:35:73:98:60:3d:0c:89:fa:51:ec:ee:d5:73:37:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:47:9E:4B:8B:AF:B6:AE:4F:F3:B1:AA:9D:6C:B6:7A:2E:3E:90:FB
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F5F3254E042011F085CD9C61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.83.0/24
Signature Algorithm: sha256WithRSAEncryption
75:92:94:da:f4:68:45:eb:f9:df:6b:4c:23:d0:6c:6a:00:54:
97:81:aa:bb:85:ee:e6:0a:8e:36:0f:1e:0d:33:33:04:2b:8a:
29:d6:94:5e:93:f3:1d:ca:1b:63:b0:b1:ad:9d:b5:73:1b:f6:
84:40:a6:6d:32:f7:bf:d9:aa:30:be:bb:fa:92:11:3b:48:16:
fa:26:e4:ff:73:cd:89:a2:11:28:da:9b:45:28:cf:4b:44:1e:
37:2f:ab:80:06:f0:a7:b6:44:ea:5b:29:98:fb:ed:43:af:39:
02:24:55:4f:32:e3:fb:ac:9f:09:0c:2e:9a:8b:3b:02:28:af:
b4:1c:09:22:57:7d:ce:5f:6e:8b:f5:b0:c7:f8:9f:48:a2:e8:
12:95:76:25:1a:49:79:40:91:9a:d7:75:85:68:6b:9f:dc:dc:
f4:d5:90:46:06:dd:84:c6:81:f4:b2:65:56:3b:ed:13:94:00:
fb:e2:3a:4e:bb:f5:c7:82:4a:d5:69:a7:f6:a7:ee:87:63:4e:
fb:07:44:00:c1:9f:c1:14:d0:5a:df:65:02:12:17:4a:1a:f0:
9c:ce:38:9f:3d:64:1b:e8:7f:d9:77:3f:00:ba:1f:ad:d5:79:
dc:ae:0c:a1:45:f5:bb:5b:d8:54:8c:52:87:d7:be:5e:a6:19:
18:cd:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:49 2025 by rpki-client