Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F8C02244F7F611EF8951A3B5762E951A.roa
File: F8C02244F7F611EF8951A3B5762E951A.roa (raw, json)
Hash identifier: sfAJrwYYRD2swYHdb+VLUpmNfiR0xC9U1qhz4PEZYWQ=
Subject key identifier: E6:03:A5:04:AF:B4:C1:14:43:6C:16:58:DA:2C:ED:49:00:C6:93:72
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 06B9
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F8C02244F7F611EF8951A3B5762E951A.roa
Signing time: Mon 03 Mar 2025 06:15:58 +0000
ROA not before: Mon 03 Mar 2025 06:15:54 +0000
ROA not after: Tue 03 Mar 2026 06:15:54 +0000
asID: 36352
IP address blocks: 102.135.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1721 (0x6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 3 06:15:54 2025 GMT
Not After : Mar 3 06:15:54 2026 GMT
Subject: CN=67c5491e-d331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:64:49:45:8f:4a:79:76:8d:c1:c4:66:a4:d6:
58:13:3b:08:b5:fc:c0:3c:d4:ca:d5:fc:0f:1d:34:
bf:69:ea:87:1e:0d:c1:d6:4b:11:52:c2:ae:e6:08:
60:7a:ff:fc:4c:5c:ab:5f:8e:e3:b9:3f:2f:8a:c4:
f3:07:01:75:2c:ad:82:a6:31:9f:54:12:7e:5d:c3:
57:6e:e1:14:08:dd:cf:be:22:ef:8d:52:80:65:25:
64:17:0e:90:56:43:23:66:88:cf:b5:0d:7a:9f:d0:
0d:3c:08:c3:43:47:9e:c9:9d:8e:85:7d:20:59:8e:
f2:fb:f3:19:bb:1a:fd:c3:fb:43:2c:7e:40:2b:5a:
50:a8:4c:d8:33:64:d8:94:48:73:2f:fe:39:93:b1:
ca:5f:c2:cb:ee:6b:5d:c1:a4:fb:4f:ee:40:35:dd:
f2:36:a8:ec:1c:61:78:76:6a:a5:eb:6c:3b:f7:04:
07:56:3c:4e:bb:91:83:fb:e1:45:7e:19:f2:d4:67:
1d:85:bc:b3:97:35:b1:37:d3:be:75:65:e3:1a:e0:
8d:32:e8:75:b7:bb:eb:82:76:71:a1:f4:42:08:ee:
1e:75:97:63:a8:55:29:c3:e9:13:ab:50:ab:fc:3d:
2e:47:a1:f9:f7:95:ab:64:b7:03:d9:b6:0a:00:1d:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:03:A5:04:AF:B4:C1:14:43:6C:16:58:DA:2C:ED:49:00:C6:93:72
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F8C02244F7F611EF8951A3B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:bf:55:a0:5f:d8:81:49:ae:93:87:a5:46:b4:f6:a2:cb:33:
76:a7:25:34:a1:0b:a4:b9:f1:02:a5:81:4d:42:76:b6:6a:df:
29:9d:f4:fa:03:49:14:47:44:b3:26:b7:7e:92:a3:b5:96:4a:
6c:f0:09:32:e0:f0:6d:68:ef:07:7a:3d:f8:42:6b:b4:71:ce:
b4:85:43:ef:86:4b:05:1c:e5:b7:17:a2:98:62:74:cd:26:82:
c9:5f:0e:30:61:cc:99:4d:1d:64:ad:9f:de:ae:7e:9a:03:a9:
d0:e9:3a:d3:a8:1a:a2:cb:13:37:36:6d:cd:29:df:9f:26:b0:
ca:4f:26:7e:ca:26:02:df:b7:69:e9:1b:56:1c:b0:8a:bd:e8:
bf:42:ab:7c:f9:63:35:7b:11:5d:ee:08:15:33:92:95:d2:f4:
eb:e8:4b:68:39:88:c3:1d:45:3f:18:e6:fa:f0:5b:0d:ea:db:
17:f2:b4:04:89:c4:f1:6d:6f:c8:4e:2b:e5:82:c9:b7:3a:d3:
b1:66:10:dd:b1:7d:ab:cc:3e:64:31:f5:da:5f:fc:ba:4d:23:
8d:35:6b:60:ed:d8:82:88:7f:e6:da:f0:93:91:dc:35:b2:cf:
90:b4:31:ae:01:51:6e:05:19:27:3b:46:9e:bd:da:d7:c6:f7:
3a:52:10:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:53 2025 by rpki-client