Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F6B0BE160A4111F0A91CAF60762E951A.roa
File: F6B0BE160A4111F0A91CAF60762E951A.roa (raw, json)
Hash identifier: fIu1VJMNhogkfgpdmiHxlpJ5hpI8vU+z81U9F+pYR9o=
Subject key identifier: 6E:5B:6D:7A:3C:0B:D8:20:99:8E:DC:ED:B5:61:F0:0A:8E:A8:93:02
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 088C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F6B0BE160A4111F0A91CAF60762E951A.roa
Signing time: Wed 26 Mar 2025 12:58:08 +0000
ROA not before: Wed 26 Mar 2025 12:58:03 +0000
ROA not after: Thu 26 Mar 2026 12:58:03 +0000
asID: 136501
IP address blocks: 102.135.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188 (0x88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 26 12:58:03 2025 GMT
Not After : Mar 26 12:58:03 2026 GMT
Subject: CN=67e3f9e0-92e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:b9:61:6f:08:6a:fc:ed:b6:ba:46:2c:80:
52:54:73:30:7b:95:83:a2:fc:c1:e3:fe:d4:d9:fa:
c6:42:b4:3b:51:d8:f0:f8:aa:50:0d:df:7a:27:cc:
c3:f3:07:83:66:3c:4d:01:a1:7f:76:02:95:5a:e1:
11:ea:29:19:d8:2a:6e:cf:c3:4e:34:f1:8a:c2:40:
1c:a1:44:c0:f2:40:c0:82:b2:c4:2c:01:b8:83:57:
92:8a:f2:49:fb:f0:47:30:46:47:ff:2c:59:8d:b4:
a9:eb:83:53:25:00:8f:5b:01:ac:07:d7:27:29:6c:
18:92:76:d9:7d:09:d3:31:b6:96:6d:8d:1e:e1:c5:
57:6d:d5:e0:ba:04:71:8a:30:db:2b:a5:49:d6:e4:
d2:ef:0d:1c:b5:d3:dc:c6:3e:75:0b:88:60:0d:87:
25:dd:ed:73:d9:be:5d:b5:4e:17:88:66:d1:5a:dd:
6b:27:2b:3f:4b:ca:e7:61:85:8e:d7:4b:1e:77:8b:
0c:a4:a8:46:dd:56:ea:e6:10:b6:7f:96:3b:85:ea:
71:b5:20:2d:bc:3b:49:bb:b1:c5:2b:06:80:41:c6:
cb:ee:c4:bc:7f:1b:fa:92:b1:c9:4d:9b:2b:5b:69:
4f:f5:45:a2:ed:ca:92:d0:fd:54:2f:d9:f4:e5:ff:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5B:6D:7A:3C:0B:D8:20:99:8E:DC:ED:B5:61:F0:0A:8E:A8:93:02
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F6B0BE160A4111F0A91CAF60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.11.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:65:cf:67:51:aa:4d:10:24:28:b8:33:51:7c:7f:1f:e3:8e:
78:56:54:94:65:e0:e4:c9:d0:d7:e2:a6:ee:35:07:58:95:e8:
63:56:6f:61:f5:a5:cf:49:42:4c:cb:b9:7b:ac:3d:51:91:88:
6d:b0:cf:d9:c6:19:df:9c:f8:f3:f5:94:c0:64:a8:92:90:bf:
9a:5c:4c:a7:52:11:b9:6c:0e:48:0f:b3:3d:04:20:2c:02:c9:
ee:ef:e5:79:33:a3:17:7e:2e:e5:de:f8:ee:b3:65:96:48:96:
74:1c:6e:d4:c1:3b:87:ab:70:0c:6f:a0:77:a7:16:87:95:2f:
69:43:9f:5a:07:cd:45:5e:a2:9f:3b:23:5c:f3:9e:f6:bc:5a:
9c:1d:55:ec:56:55:3b:f7:ed:1a:ee:29:5f:50:63:a2:89:fb:
89:26:0a:fd:5d:a0:d8:fc:0f:1d:fc:9e:56:4e:ef:3c:13:d3:
3f:b4:6a:a9:5b:5a:1d:7a:fe:50:20:d3:bc:1c:7b:a4:51:6b:
c6:14:54:19:2a:80:a3:b4:8e:76:e3:3a:eb:03:e0:b5:e7:1b:
60:3c:e1:1e:07:fc:18:34:67:94:73:11:2d:31:90:2f:16:13:
c3:2c:b2:aa:e5:ff:d4:7f:05:2f:1d:26:6d:01:1a:e1:cf:0f:
fd:93:c6:86
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCIwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjYxMjU4MDNaFw0yNjAzMjYxMjU4MDNaMBgxFjAU
BgNVBAMTDTY3ZTNmOWUwLTkyZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuYblhbwhq/O22ukYsgFJUczB7lYOi/MHj/tTZ+sZCtDtR2PD4qlAN33on
zMPzB4NmPE0BoX92ApVa4RHqKRnYKm7Pw0408YrCQByhRMDyQMCCssQsAbiDV5KK
8kn78EcwRkf/LFmNtKnrg1MlAI9bAawH1ycpbBiSdtl9CdMxtpZtjR7hxVdt1eC6
BHGKMNsrpUnW5NLvDRy109zGPnULiGANhyXd7XPZvl21TheIZtFa3WsnKz9Lyudh
hY7XSx53iwykqEbdVurmELZ/ljuF6nG1IC28O0m7scUrBoBBxsvuxLx/G/qSsclN
mytbaU/1RaLtypLQ/VQv2fTl/1RRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUbltt
ejwL2CCZjtzttWHwCo6okwIwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0Y2QjBCRTE2MEE0MTExRjBBOTFDQUY2MDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhwswDQYJKoZIhvcNAQEL
BQADggEBAMFlz2dRqk0QJCi4M1F8fx/jjnhWVJRl4OTJ0Nfipu41B1iV6GNWb2H1
pc9JQkzLuXusPVGRiG2wz9nGGd+c+PP1lMBkqJKQv5pcTKdSEblsDkgPsz0EICwC
ye7v5Xkzoxd+LuXe+O6zZZZIlnQcbtTBO4ercAxvoHenFoeVL2lDn1oHzUVeop87
I1zznva8WpwdVexWVTv37RruKV9QY6KJ+4kmCv1doNj8Dx38nlZO7zwT0z+0aqlb
Wh16/lAg07wce6RRa8YUVBkqgKO0jnbjOusD4LXnG2A84R4H/Bg0Z5RzES0xkC8W
E8Mssqrl/9R/BS8dJm0BGuHPD/2TxoY=
-----END CERTIFICATE-----
Generated at Thu Apr 10 21:21:33 2025 by rpki-client