Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/04F466EAE87C11EFBA3A0DAF762E951A.roa
File: 04F466EAE87C11EFBA3A0DAF762E951A.roa (raw, json)
Hash identifier: M7XJqUMdwU129O0bQ8KVykbjduSp57r21uN4HH0HSwU=
Subject key identifier: 89:E1:2E:00:2B:54:29:CF:5C:FB:01:AA:2B:45:5E:A7:87:5D:F9:E6
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 060A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/04F466EAE87C11EFBA3A0DAF762E951A.roa
Signing time: Tue 11 Feb 2025 13:28:03 +0000
ROA not before: Tue 11 Feb 2025 13:27:59 +0000
ROA not after: Wed 11 Feb 2026 13:27:59 +0000
asID: 401120
IP address blocks: 196.251.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1546 (0x60a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 11 13:27:59 2025 GMT
Not After : Feb 11 13:27:59 2026 GMT
Subject: CN=67ab5063-3b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:42:de:e0:9c:61:3d:10:39:95:f3:56:f8:
1f:2a:ef:65:78:a8:42:17:8c:5c:8a:a9:f2:32:41:
0d:ea:6f:a4:d6:32:21:01:7d:42:d0:53:75:c6:94:
23:31:28:27:b5:71:7c:1c:9e:17:9b:27:d3:30:66:
b6:d0:b1:82:0b:0b:a3:c9:9c:14:7d:b5:d9:b8:dc:
81:67:a0:53:24:17:a8:61:88:4b:2f:13:f3:50:f6:
12:95:12:bd:c5:0c:94:1e:8d:a0:18:10:54:06:f7:
78:f1:34:63:b8:21:75:51:12:60:32:ce:19:69:33:
54:f9:cc:51:88:1d:63:a6:89:64:c1:b5:b0:02:40:
5e:46:a8:d1:dc:3a:1a:cd:a7:c7:17:57:67:3c:08:
28:ec:b2:86:a7:d6:1b:83:77:3c:c5:56:f3:21:a3:
34:9b:31:6f:2b:c4:15:fa:ed:36:19:a8:21:fa:a6:
61:b9:45:28:01:f8:67:c4:a4:fe:82:73:ed:bd:16:
a9:9e:16:7c:d2:c3:35:62:30:61:e4:c1:eb:54:24:
63:ff:12:33:7b:aa:ad:ee:86:fd:ad:5a:d5:60:e0:
50:34:9b:7c:2c:65:1e:0b:f2:68:68:85:48:40:3a:
4d:e6:82:26:df:0f:57:75:b7:99:ea:41:9f:0d:2c:
aa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E1:2E:00:2B:54:29:CF:5C:FB:01:AA:2B:45:5E:A7:87:5D:F9:E6
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/04F466EAE87C11EFBA3A0DAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.89.0/24
Signature Algorithm: sha256WithRSAEncryption
db:fa:a5:ee:cb:02:a0:92:9e:d2:0e:01:1e:38:37:37:8b:c2:
7b:89:a0:55:01:01:5e:b3:ae:62:08:0c:83:57:79:be:f4:fb:
c0:aa:c4:ae:9a:e4:55:2b:23:18:24:92:30:c6:bf:6f:eb:5c:
dd:f0:a6:e3:98:88:a6:ee:7e:3c:9b:83:2a:e4:48:9c:d9:1d:
a8:b1:bd:02:71:9f:28:68:c8:1b:f6:5a:c6:ac:47:44:9e:34:
98:80:bb:00:db:5b:44:ad:cd:f0:73:cb:d6:09:36:94:04:d3:
e6:45:7c:f3:45:1f:a5:f0:56:6b:57:0d:31:6e:f4:6f:f7:65:
be:60:fe:37:88:de:51:ac:f4:fb:51:fb:30:85:a3:4b:1e:ae:
12:17:01:c8:83:8e:c2:b6:c2:22:07:68:39:9b:07:64:2b:05:
88:58:78:66:0d:d1:70:25:c8:05:35:cb:85:ff:c0:e7:5b:18:
31:2b:5a:a8:c3:df:2f:2b:3a:be:9b:5f:eb:ef:2b:b5:4a:0a:
d9:b9:95:e7:b3:55:7f:0d:96:1f:16:40:6e:27:5b:89:76:e0:
5d:bc:55:71:9a:a1:60:b7:33:96:79:03:41:da:49:9a:36:b8:
b8:09:20:cf:b6:ad:60:bd:8c:e5:81:e6:4b:86:dc:f5:f5:19:
37:2b:35:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:36 2025 by rpki-client