Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/194677A4C1D111EFA07F3389762E951A.roa
File: 194677A4C1D111EFA07F3389762E951A.roa (raw, json)
Hash identifier: cChw+RK68/jfAyku45xtel2Zy7LsM7XEn2NgaF0MP/4=
Subject key identifier: 2D:22:2B:B8:11:17:D2:25:E3:BF:3D:79:F5:D2:03:B7:BB:80:38:61
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0441
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/194677A4C1D111EFA07F3389762E951A.roa
Signing time: Tue 24 Dec 2024 08:28:49 +0000
ROA not before: Tue 24 Dec 2024 08:28:45 +0000
ROA not after: Wed 24 Dec 2025 08:28:45 +0000
asID: 329007
IP address blocks: 196.251.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1089 (0x441)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 24 08:28:45 2024 GMT
Not After : Dec 24 08:28:45 2025 GMT
Subject: CN=676a70c1-6f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:15:7a:b2:97:5e:cf:e1:16:1c:4b:ff:b8:
ce:4b:86:91:a2:4a:6b:97:e7:a2:f1:87:bd:8f:99:
0b:8e:e6:54:a4:9d:5f:6b:de:60:2d:40:2f:0a:31:
ee:98:27:da:26:df:db:74:60:cd:18:20:ef:1d:ea:
1f:90:fa:34:ce:20:92:d8:7f:33:7e:df:b1:9b:6d:
df:b7:36:75:87:4f:57:8a:33:c4:ba:35:2c:e5:36:
dd:dc:e1:bd:82:e7:37:76:67:c2:e1:4a:05:f9:53:
9a:71:1c:90:96:26:4b:79:0c:67:24:4b:b6:fa:12:
29:b5:82:63:d6:c3:95:f4:5b:87:97:1e:00:99:9c:
db:0c:32:06:94:77:26:ca:b5:7b:57:4b:9f:eb:e3:
fc:85:75:36:85:f3:42:6f:70:aa:85:f1:0e:0d:a6:
f3:0d:ae:0f:e8:ff:6b:e9:f6:ac:c5:17:39:77:91:
26:d1:19:5a:5d:43:5f:db:64:18:25:97:f4:0f:12:
c6:bb:30:51:5b:0d:30:c1:3d:dd:c5:35:d2:1a:5a:
0f:b4:9c:74:75:a2:e7:00:e5:1e:42:34:2f:e3:f3:
ca:22:3c:1d:bd:79:cd:15:ee:0a:53:0e:90:d1:43:
fd:d8:fe:0f:51:15:ed:c8:1c:b3:b1:61:7b:a5:04:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:22:2B:B8:11:17:D2:25:E3:BF:3D:79:F5:D2:03:B7:BB:80:38:61
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/194677A4C1D111EFA07F3389762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.72.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:34:db:35:66:63:c1:4c:fb:b2:e2:08:81:72:d3:2e:62:52:
48:05:00:ec:a4:76:7c:55:7d:e7:b7:d5:fe:dd:91:bd:34:a2:
85:16:e4:eb:72:b5:0d:0f:fc:ae:e4:19:4c:ca:8e:61:01:7e:
d5:33:7d:1f:b3:f3:d1:f0:fe:e1:d0:b2:46:5a:db:89:02:8f:
55:a3:59:52:02:87:00:28:b3:21:2a:34:82:3b:53:4d:59:fe:
56:39:bb:55:2b:75:29:bc:84:34:de:bf:05:ef:e2:27:84:1f:
e8:34:43:80:1b:de:7c:ca:96:b6:e9:f1:b4:c6:8e:b1:04:a5:
7a:99:ca:03:bd:e3:f7:7e:7b:c8:bc:d4:04:f2:88:46:c1:9b:
28:fb:99:c1:9a:2d:72:73:99:da:28:be:05:48:ab:cc:91:81:
ac:6d:7b:7d:42:0b:d3:b5:49:c7:ee:71:5f:5a:7b:ce:1a:4a:
2b:85:c6:cf:92:6b:da:35:9d:e1:3d:81:b2:14:df:0a:cb:69:
24:68:14:19:9c:da:69:36:5b:3a:a8:e5:c1:a0:fb:ab:35:f0:
ae:66:bc:cf:8d:79:16:dc:78:f4:ed:19:52:78:29:70:1d:b2:
87:0f:b7:5b:9a:59:a2:aa:93:f5:49:4f:1d:a9:5c:80:ea:b2:
4e:f9:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:15 2025 by rpki-client