Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F68C56BE096C11F099CCF24F762E951A.roa
File: F68C56BE096C11F099CCF24F762E951A.roa (raw, json)
Hash identifier: IttlRwkHn/DvQD1sId6ez0R/P7A8LW7fG9gfyUnmMys=
Subject key identifier: 89:4C:84:53:DC:17:FD:7D:18:9B:E4:6D:4A:C1:77:5F:FB:4F:F7:4B
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0824
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F68C56BE096C11F099CCF24F762E951A.roa
Signing time: Tue 25 Mar 2025 11:33:25 +0000
ROA not before: Tue 25 Mar 2025 11:33:21 +0000
ROA not after: Wed 25 Mar 2026 11:33:21 +0000
asID: 2914
IP address blocks: 102.135.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2084 (0x824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 25 11:33:21 2025 GMT
Not After : Mar 25 11:33:21 2026 GMT
Subject: CN=67e29484-7681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:92:1d:46:e3:35:29:32:96:5d:88:7b:f6:35:
77:fe:2c:72:29:82:21:c3:ed:7e:97:4a:20:b7:e0:
a9:27:89:d6:c4:b5:d3:46:0e:97:8c:0c:bc:f5:cc:
2b:2b:cc:06:60:67:9c:46:3b:c9:0b:81:fb:3d:d8:
e4:48:41:07:fc:be:38:58:69:af:fc:b1:08:e4:47:
47:3e:56:88:ab:4d:76:29:4f:9b:be:fe:b7:9b:14:
82:d5:75:31:13:be:b0:f9:2b:01:bf:2d:fe:5a:0a:
69:40:01:9a:11:83:2d:71:bc:67:db:fc:2f:b4:78:
47:29:74:6a:c6:97:e1:24:06:b5:db:7d:1b:33:f1:
9d:4d:a1:a4:14:35:af:31:ff:65:e5:70:85:4c:78:
83:7a:14:85:28:63:ba:ca:9a:bb:0a:76:4b:2f:68:
f6:12:ee:53:4b:60:d6:0c:36:e5:a3:72:38:f3:bb:
9e:36:ca:83:ee:cd:9f:ac:08:3a:e4:5c:30:67:57:
ed:da:81:67:ba:35:64:b6:e7:04:bb:59:59:22:02:
c4:3e:ee:1a:60:4f:8e:7a:65:02:25:9b:2d:14:2e:
c3:b6:9e:3e:07:c1:b6:3b:59:85:d2:5e:58:d3:18:
de:df:a6:4f:56:a6:6e:ba:fc:a7:f8:dc:57:72:19:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4C:84:53:DC:17:FD:7D:18:9B:E4:6D:4A:C1:77:5F:FB:4F:F7:4B
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F68C56BE096C11F099CCF24F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.77.0/24
Signature Algorithm: sha256WithRSAEncryption
af:f2:39:4a:e5:85:4f:ea:27:23:b0:0f:86:72:f6:b2:3d:cf:
06:3f:ac:28:08:da:72:18:85:50:01:28:5e:ce:4e:ac:f5:d0:
99:c2:87:87:d3:c2:d7:c3:e9:c0:20:86:23:1c:ec:4c:e0:95:
9c:65:8e:c4:af:35:11:ac:4b:f4:aa:16:e1:48:b7:a3:3a:d0:
c3:c8:c1:c8:73:78:02:4a:61:b6:3a:7a:b7:3a:77:66:38:d4:
20:c9:13:70:e6:28:bd:a2:c2:7c:d6:d2:f8:fd:93:aa:fb:77:
c1:bb:85:b8:5f:d1:38:3d:ae:4f:39:56:58:04:02:f7:81:3f:
57:87:6c:c2:ad:2a:42:22:10:b9:79:1a:f3:0c:95:6f:64:0e:
5f:68:42:5a:78:59:17:6e:2d:15:76:bc:7a:22:c8:fc:22:c5:
38:15:60:9d:ab:e4:64:f2:88:27:25:13:b6:26:52:6e:b8:ba:
8f:b7:f3:9d:1a:4f:29:81:63:97:ed:9f:8e:a0:31:62:cd:ce:
a5:17:1c:28:58:da:b6:ae:4f:bd:73:2d:81:00:dd:44:b8:5c:
e2:b5:77:8c:f6:df:98:08:90:ed:fc:04:ea:aa:ff:ad:03:17:
e8:3a:a6:29:90:09:3b:fd:24:f9:70:68:52:2e:10:32:5f:1c:
d3:59:8b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:22:36 2025 by rpki-client