Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1A5A9998F28911EF9CC209AC762E951A.roa
File: 1A5A9998F28911EF9CC209AC762E951A.roa (raw, json)
Hash identifier: cNvnq2yH5HQvxzlD527f5LKcvJ+SNRVelCxUGQo0cVU=
Subject key identifier: 13:61:1D:07:9C:B0:AF:63:E2:6A:E1:D3:02:FF:2A:B8:84:50:45:90
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0695
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1A5A9998F28911EF9CC209AC762E951A.roa
Signing time: Mon 24 Feb 2025 08:26:54 +0000
ROA not before: Mon 24 Feb 2025 08:26:50 +0000
ROA not after: Tue 24 Feb 2026 08:26:50 +0000
asID: 9009
IP address blocks: 196.251.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1685 (0x695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 24 08:26:50 2025 GMT
Not After : Feb 24 08:26:50 2026 GMT
Subject: CN=67bc2d4e-503b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:15:76:c3:ba:15:d6:69:31:59:8a:73:ca:
e0:28:cb:71:34:86:69:f5:92:c7:14:28:27:4f:63:
a7:a2:35:e1:10:53:36:c8:b3:db:83:4e:94:b1:24:
86:33:de:99:a4:a5:a7:67:0c:5b:23:b7:a5:84:35:
73:12:b6:3f:82:69:89:94:7f:b0:c7:e5:fc:70:79:
3a:63:cf:9b:48:08:c5:68:66:55:9e:76:f6:b6:5a:
5a:d7:a1:bb:78:77:c5:0f:a0:5c:78:b5:ec:6a:be:
b7:34:5f:bb:cd:21:01:16:d2:d7:10:5c:ae:80:f6:
fa:12:62:ff:76:fa:c0:d0:4d:c5:c3:1c:1d:35:8e:
7f:df:f2:52:e9:89:a9:d9:77:cf:88:56:6d:b9:8d:
a5:e0:72:26:4e:2b:d7:cb:54:a5:f6:15:fd:c4:e1:
45:e0:9c:52:f9:04:04:b7:60:7a:58:d9:9d:95:26:
86:45:de:3e:58:b1:d8:0b:88:93:09:0b:19:8b:ca:
9f:67:e5:1a:18:4f:49:80:ff:b1:44:cb:f6:78:c1:
10:4d:33:92:da:7b:49:57:e7:96:a2:83:94:bc:68:
1f:cd:e5:c3:f1:37:10:2c:98:f4:2b:60:68:48:cc:
20:89:92:b9:d3:46:20:9c:46:0b:33:33:3a:5c:8c:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:61:1D:07:9C:B0:AF:63:E2:6A:E1:D3:02:FF:2A:B8:84:50:45:90
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1A5A9998F28911EF9CC209AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.104.0/24
Signature Algorithm: sha256WithRSAEncryption
90:d0:94:08:08:a4:3f:1f:9a:44:a9:54:fc:40:71:c6:7b:31:
d9:e8:68:df:d7:3d:29:4a:fb:4a:e5:1c:81:a7:fa:7d:1a:38:
66:c2:17:b3:2b:f5:18:e6:eb:50:d4:74:de:06:ff:b9:b0:7f:
4d:eb:67:62:94:22:79:93:2d:b4:72:aa:fe:2a:cb:4e:c6:0e:
ec:ed:7a:0a:47:be:34:d9:10:d6:bf:03:dc:83:be:3e:15:a9:
ba:f7:47:0e:6d:b7:4a:cd:1c:57:c2:bf:73:1e:05:64:10:47:
10:e5:78:bc:3b:62:97:20:ea:72:11:02:bb:34:b8:37:92:5e:
64:3a:58:69:e8:a2:e2:0d:b1:c9:74:c1:50:bc:77:41:66:93:
40:1c:84:c3:a3:21:76:ae:81:8c:db:1d:04:5d:3f:00:6f:0e:
08:ce:a0:54:06:2f:8f:72:8c:b9:36:06:68:ab:b2:5f:76:ea:
a9:fa:31:00:33:61:68:41:e9:3d:fe:d3:1a:01:39:da:2c:64:
cb:82:9a:ac:55:cd:e0:b5:68:19:a3:b9:4b:bb:ba:d6:ad:5e:
f7:b5:20:d6:c0:43:90:07:e2:6c:e9:c2:dd:32:da:cf:15:2e:
e7:97:22:63:18:81:3b:64:47:20:a7:33:99:f6:75:2a:06:85:
c4:65:99:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:37:34 2025 by rpki-client