Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FBDEF00ED33411EFB6E65395762E951A.roa
File: FBDEF00ED33411EFB6E65395762E951A.roa (raw, json)
Hash identifier: qF7EFEHZ9Wsh0nNoaU2B7v2N7lxOdaVjg/mApJo+f+w=
Subject key identifier: 7E:2E:4B:38:06:25:B3:C7:5F:81:CD:6B:16:01:0B:3C:4F:54:53:9E
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0531
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FBDEF00ED33411EFB6E65395762E951A.roa
Signing time: Wed 15 Jan 2025 11:36:39 +0000
ROA not before: Wed 15 Jan 2025 11:36:34 +0000
ROA not after: Thu 15 Jan 2026 11:36:34 +0000
asID: 53356
IP address blocks: 102.135.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1329 (0x531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 15 11:36:34 2025 GMT
Not After : Jan 15 11:36:34 2026 GMT
Subject: CN=67879dc7-e3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:20:e9:05:0c:85:9e:a3:04:9c:43:04:89:5d:
72:07:5c:bf:b8:82:65:f8:63:59:18:b5:2c:d3:8e:
b2:45:d7:27:65:19:8c:76:e1:ff:1b:02:6a:fa:e9:
13:1a:31:b1:60:23:46:dc:12:a2:35:a8:f0:2e:69:
d7:58:34:38:48:b8:3c:f7:c1:84:ae:90:ba:29:19:
ad:3c:00:49:8c:19:76:64:bc:c0:9f:07:7a:24:36:
30:d8:4e:1f:4e:f1:16:f3:bc:d0:db:eb:82:43:3c:
1d:6f:bc:55:75:81:e9:d9:1b:8f:90:69:af:4d:a5:
50:fd:ce:b4:83:63:6f:2b:60:79:b8:16:6f:fe:59:
d3:d8:8f:fa:a2:ae:37:2b:03:c7:c4:fb:92:ad:59:
f1:5b:77:e1:50:45:c3:1d:72:22:29:72:98:99:22:
c1:b3:51:ba:b5:d0:4b:ec:11:5c:35:f2:36:17:17:
2c:05:02:f4:94:a0:a8:64:a5:a7:12:17:d4:26:8f:
59:15:50:d4:4c:e0:00:c0:13:d7:37:f9:e1:41:fe:
ed:de:ec:4b:50:e1:0f:f8:e4:8a:f7:7c:ea:1c:c9:
61:84:a8:a4:96:86:97:fa:0a:f4:d6:09:67:a1:95:
26:50:b4:3c:7e:9b:c5:da:d3:70:d0:27:96:54:48:
92:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2E:4B:38:06:25:B3:C7:5F:81:CD:6B:16:01:0B:3C:4F:54:53:9E
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FBDEF00ED33411EFB6E65395762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.33.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:79:99:77:f8:22:8f:94:05:1c:34:e7:f4:5e:0a:cc:86:bb:
09:e5:8f:fd:d5:6c:2a:ee:9d:79:c4:a2:e2:c3:7b:be:b3:83:
54:86:19:55:90:8b:c0:3b:e8:25:01:a7:8f:21:29:aa:3f:90:
26:20:92:df:83:9b:23:13:de:3d:c5:f8:42:c4:b0:0c:4e:9c:
7a:1d:a4:5a:58:82:4a:36:4e:3a:38:1d:4d:b0:87:d3:e3:a2:
12:95:42:a5:d2:7b:15:f3:11:17:64:14:8e:87:f6:3e:47:6c:
fb:f2:bd:1b:a2:82:3f:e8:cb:99:43:d2:a9:1e:e8:2b:76:45:
dd:d8:1f:a6:30:78:af:97:d2:dc:46:da:f3:76:66:73:2c:c6:
e6:22:33:12:3e:2e:5c:72:cd:15:65:98:10:ea:03:bc:ca:e5:
ac:e6:73:52:06:e4:54:13:3f:2e:15:c9:d5:ba:cf:72:ea:8e:
99:99:89:31:98:35:46:ce:8c:cb:b4:65:54:7d:0c:ff:88:8a:
97:28:a6:db:ad:0b:9e:b5:f9:0f:d9:31:26:cb:77:56:b6:f5:
21:57:06:00:06:e6:c9:b8:9c:cc:4e:30:41:a5:f1:d9:bc:7c:
c0:2e:3d:18:6e:4c:69:67:30:f6:cd:be:1b:c3:30:35:70:f7:
97:64:6e:9d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAxMTUxMTM2MzRaFw0yNjAxMTUxMTM2MzRaMBgxFjAU
BgNVBAMTDTY3ODc5ZGM3LWUzYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDgIOkFDIWeowScQwSJXXIHXL+4gmX4Y1kYtSzTjrJF1ydlGYx24f8bAmr6
6RMaMbFgI0bcEqI1qPAuaddYNDhIuDz3wYSukLopGa08AEmMGXZkvMCfB3okNjDY
Th9O8RbzvNDb64JDPB1vvFV1genZG4+Qaa9NpVD9zrSDY28rYHm4Fm/+WdPYj/qi
rjcrA8fE+5KtWfFbd+FQRcMdciIpcpiZIsGzUbq10EvsEVw18jYXFywFAvSUoKhk
pacSF9Qmj1kVUNRM4ADAE9c3+eFB/u3e7EtQ4Q/45Ir3fOocyWGEqKSWhpf6CvTW
CWehlSZQtDx+m8Xa03DQJ5ZUSJKbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfi5L
OAYls8dfgc1rFgELPE9UU54wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0ZCREVGMDBFRDMzNDExRUZCNkU2NTM5NTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhyEwDQYJKoZIhvcNAQEL
BQADggEBAF95mXf4Io+UBRw05/ReCsyGuwnlj/3VbCrunXnEouLDe76zg1SGGVWQ
i8A76CUBp48hKao/kCYgkt+DmyMT3j3F+ELEsAxOnHodpFpYgko2Tjo4HU2wh9Pj
ohKVQqXSexXzERdkFI6H9j5HbPvyvRuigj/oy5lD0qke6Ct2Rd3YH6YweK+X0txG
2vN2ZnMsxuYiMxI+LlxyzRVlmBDqA7zK5azmc1IG5FQTPy4VydW6z3LqjpmZiTGY
NUbOjMu0ZVR9DP+IipcoptutC561+Q/ZMSbLd1a29SFXBgAG5sm4nMxOMEGl8dm8
fMAuPRhuTGlnMPbNvhvDMDVw95dkbp0=
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:15:55 2025 by rpki-client