Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/022EA978C6A011EFAC5F40A1762E951A.roa
File: 022EA978C6A011EFAC5F40A1762E951A.roa (raw, json)
Hash identifier: KtMs6WnLmuTXZ18t7watnluoCrVNzC5xMe3KKLDDeNU=
Subject key identifier: E3:42:56:4C:43:12:71:8B:07:04:9A:4F:52:39:99:43:AA:72:43:65
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 049F
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/022EA978C6A011EFAC5F40A1762E951A.roa
Signing time: Mon 30 Dec 2024 11:20:00 +0000
ROA not before: Mon 30 Dec 2024 11:19:57 +0000
ROA not after: Wed 24 Dec 2025 11:19:57 +0000
asID: 329007
IP address blocks: 196.251.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1183 (0x49f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:19:57 2024 GMT
Not After : Dec 24 11:19:57 2025 GMT
Subject: CN=677281e0-e148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:7c:29:f0:fe:ed:9f:64:d2:3f:84:f8:79:
e6:25:87:b7:c4:d7:41:29:6e:1b:fa:93:a0:01:ae:
9d:d9:59:a4:05:2a:d9:80:b8:42:af:2e:9a:c6:c9:
0f:e4:78:b4:7c:3b:6d:4e:32:96:48:0a:86:ee:fc:
4d:7f:f7:25:82:e8:61:96:11:42:f9:d2:83:d3:e7:
a5:c4:56:a6:51:4e:b1:39:8a:7c:ef:06:4f:f5:f2:
71:dd:12:77:51:33:38:73:1b:f4:10:78:0a:1f:f3:
53:b3:91:c9:68:40:7f:6e:7a:8f:75:24:61:41:09:
99:ea:c1:b9:b5:c4:e0:5c:8d:8f:5a:6d:83:79:20:
0d:56:fa:07:0c:25:8a:65:0c:b6:da:3a:96:27:09:
9f:1f:22:3d:94:d4:cb:c1:86:51:7b:97:7a:5f:22:
20:93:11:19:ba:ea:4c:cc:92:ff:a0:2a:d1:98:2f:
94:eb:7f:55:d5:32:c2:0a:53:2e:eb:47:5f:f3:74:
f1:b2:44:92:89:3c:64:d6:ca:88:2c:ad:61:72:bc:
26:c5:5d:a3:aa:4b:95:d0:7d:13:44:31:94:b2:78:
3a:8d:af:fd:3f:3e:62:e9:7c:9a:3e:21:ff:d4:77:
04:3a:2a:61:c9:d0:b9:cf:4c:07:21:28:0e:0d:cd:
9d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:42:56:4C:43:12:71:8B:07:04:9A:4F:52:39:99:43:AA:72:43:65
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/022EA978C6A011EFAC5F40A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.109.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e9:fd:b9:2e:e2:82:06:83:be:10:5f:7d:14:9e:4e:02:9b:
d3:02:9b:0a:3e:8b:0c:b0:0e:12:89:c7:30:5d:35:75:b3:a7:
6a:02:e1:c9:01:e6:c0:66:e5:bf:21:75:24:07:be:33:f5:b1:
64:d0:b5:8b:56:63:cd:ad:b7:7b:d7:20:64:04:83:38:1c:7a:
34:68:bc:38:38:3a:04:37:65:07:21:4b:fb:63:ae:dd:d7:08:
08:20:21:88:e0:fd:b9:ec:22:a9:88:96:59:77:ac:9c:81:4e:
1c:4e:63:0f:bb:bf:1c:5a:5c:28:e7:ba:1b:ca:20:07:05:40:
1d:17:62:8d:d6:6e:18:9a:30:07:c5:61:a1:31:ac:3c:27:ae:
d3:fd:95:0c:40:46:00:6c:5f:91:71:3f:53:45:7c:0c:b3:05:
3f:b3:1e:e6:a9:6c:d7:7d:a8:10:81:66:08:5e:68:e5:35:54:
16:07:2b:57:9f:95:94:c7:9a:4c:ea:07:c4:e8:9a:46:c4:3b:
a1:28:7e:21:c7:5b:d1:c1:81:51:b1:a6:1e:1c:a1:b4:8d:c1:
cf:89:c6:e2:e7:93:23:99:85:0a:bf:6d:90:cc:13:de:3a:7c:
7f:3b:6f:ea:f1:00:1e:0e:d2:c1:71:66:59:b3:75:2b:13:c8:
6d:27:de:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:55 2025 by rpki-client