Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F7E73BCCF80611EFBC1CBBA1762E951A.roa
File: F7E73BCCF80611EFBC1CBBA1762E951A.roa (raw, json)
Hash identifier: hP3P+wyl8CWcQfLlBzxjmiPezNGloQPO4s63ifm8+hc=
Subject key identifier: 4A:A6:54:5E:08:6C:64:55:5A:9C:50:0F:63:24:C5:59:0E:71:D6:C3
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 06D5
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F7E73BCCF80611EFBC1CBBA1762E951A.roa
Signing time: Mon 03 Mar 2025 08:10:29 +0000
ROA not before: Mon 03 Mar 2025 08:10:24 +0000
ROA not after: Tue 03 Mar 2026 08:10:24 +0000
asID: 329007
IP address blocks: 102.135.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1749 (0x6d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 3 08:10:24 2025 GMT
Not After : Mar 3 08:10:24 2026 GMT
Subject: CN=67c563f4-b792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:87:76:0c:33:08:f6:fc:9c:32:b0:5c:3b:
10:a2:79:89:e7:9b:1c:bc:f3:72:b7:c3:f3:26:cd:
72:4f:8a:42:2d:38:37:07:58:41:ab:06:81:03:0b:
9e:b4:b5:af:4f:93:be:54:70:4e:67:70:d8:36:f7:
b3:a1:fe:e9:53:5b:2e:6c:2e:8b:a5:29:f2:8e:24:
42:bc:58:a4:68:db:40:bc:7e:59:19:7e:75:ce:e4:
ec:87:9e:37:35:74:da:e3:96:f3:8e:16:9d:f2:ef:
29:1d:33:82:3f:73:b9:49:77:aa:e5:b0:01:ed:c3:
ab:73:f0:83:68:e2:45:80:52:73:ad:24:36:23:52:
f9:ed:07:56:8c:ff:b5:fb:06:f2:55:ca:a4:c7:f5:
48:ab:cc:33:24:ff:d3:9e:ef:68:d2:be:2e:5a:7a:
b3:df:4f:39:d4:2c:76:45:31:49:d3:5e:26:6b:11:
30:75:20:70:d1:6c:48:89:a8:ff:ec:42:72:5b:3f:
39:b3:1c:27:0f:f3:51:89:a0:c0:d2:a6:34:ef:0a:
d7:12:2b:16:05:4d:10:4a:18:b1:06:45:4b:b5:c0:
aa:96:03:70:c6:89:9f:46:67:af:3d:50:e2:a4:e0:
22:d3:8a:6d:1d:03:d0:43:99:50:ba:da:f3:a0:87:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A6:54:5E:08:6C:64:55:5A:9C:50:0F:63:24:C5:59:0E:71:D6:C3
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F7E73BCCF80611EFBC1CBBA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.95.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:dc:f3:7e:6c:05:7d:48:95:2d:cd:b0:dc:b7:e4:b2:61:b2:
fa:5d:ce:2d:a1:e4:4f:7d:68:82:2b:f1:29:57:f1:70:25:a9:
52:32:01:6d:d3:98:c2:41:ee:37:c9:3e:20:55:f9:05:c5:0f:
e6:a5:a7:a5:79:61:38:c5:d2:6b:c3:55:ce:e9:6a:a8:04:5f:
03:c2:4a:ea:f5:62:61:b4:fc:83:87:b7:3a:67:55:0e:67:54:
a4:45:14:22:81:0f:38:ac:3e:11:44:d0:a3:a8:b6:fd:f9:14:
53:40:50:8f:3e:68:8b:14:cd:b8:3d:48:52:81:83:56:97:49:
88:f7:af:d5:e8:ed:0b:36:03:78:cd:0f:a2:28:3d:c3:3c:89:
a7:d3:57:7c:bd:ea:23:60:07:53:c6:0e:42:06:88:7b:ca:5d:
21:9f:75:b8:b0:31:72:bb:bf:c2:6d:f9:58:3e:fb:13:2d:c9:
35:2d:b9:e4:ab:22:c5:bd:ee:f2:25:3c:b6:63:f5:eb:59:82:
f3:29:36:84:06:30:66:fb:25:cc:3c:80:c7:95:35:3b:6b:39:
43:99:95:a0:e5:35:5e:14:2c:0a:c0:19:e1:0d:9b:66:67:2d:
d7:e4:c4:2b:69:8b:e9:6d:52:5c:18:58:be:ae:f5:9d:05:92:
bb:f8:af:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:35 2025 by rpki-client