Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2B8188B2D17311EF8633F86E762E951A.roa
File: 2B8188B2D17311EF8633F86E762E951A.roa (raw, json)
Hash identifier: dcdZxy3m/S+GJ1G+WWj89rKjj99iQnq7tq9C9qhD8uM=
Subject key identifier: 05:AE:10:E2:8A:E4:EF:B4:B5:73:46:E3:8E:76:9E:22:44:84:03:3E
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04F3
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2B8188B2D17311EF8633F86E762E951A.roa
Signing time: Mon 13 Jan 2025 05:56:45 +0000
ROA not before: Mon 13 Jan 2025 05:56:42 +0000
ROA not after: Tue 13 Jan 2026 05:56:42 +0000
asID: 329007
IP address blocks: 196.251.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1267 (0x4f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 13 05:56:42 2025 GMT
Not After : Jan 13 05:56:42 2026 GMT
Subject: CN=6784ab1d-ad9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:c9:d9:0d:be:f0:9d:9b:70:79:79:59:6a:
fd:f8:26:d8:71:bb:d2:95:b8:15:94:ca:79:37:9e:
c7:23:68:b3:c2:a9:cf:26:be:91:e3:27:2e:15:0d:
6e:47:fb:8e:91:c1:e8:fc:5c:d5:6d:27:07:34:6d:
c6:77:ad:e0:77:23:45:ec:0b:6f:5e:3f:18:f1:e4:
21:40:22:48:6b:97:b5:95:c6:6f:63:44:68:2b:69:
a3:11:b5:01:93:5f:d6:d2:cb:58:7c:08:04:c3:cd:
c6:7b:92:27:69:66:f9:de:5a:f1:54:e3:57:4d:99:
c6:1b:59:db:54:8a:a4:01:df:73:3d:25:75:8e:e2:
24:7e:f4:84:c5:26:e7:9a:e0:08:c3:17:a6:02:96:
88:0f:85:b5:37:6f:98:4e:d7:86:ef:13:cb:39:f2:
c9:f2:01:32:80:7e:71:f0:64:e0:58:7b:ba:b2:94:
c7:5a:bc:4f:d1:9d:1f:33:94:4d:40:29:60:4e:70:
f5:fc:ff:cf:97:c8:89:19:1b:ad:91:1c:d4:3f:21:
17:23:6e:7e:8c:3a:c4:fc:fd:09:c9:2f:2f:25:e1:
2c:2e:43:8f:e9:a7:d9:31:88:dd:bb:4c:4a:93:48:
c9:62:e5:de:1d:b8:1f:45:a8:fd:76:9f:f6:f8:b2:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AE:10:E2:8A:E4:EF:B4:B5:73:46:E3:8E:76:9E:22:44:84:03:3E
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2B8188B2D17311EF8633F86E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.66.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:38:71:18:eb:8b:8f:59:02:40:7b:4f:29:15:34:47:cf:80:
bf:65:78:8b:8d:9e:5c:32:a0:08:16:3f:4c:1b:05:22:ab:6b:
e0:24:ad:c7:88:d8:7d:87:a5:cc:15:fe:94:98:ba:94:10:5c:
3e:c3:57:cf:6a:3e:87:3e:bb:e9:24:40:68:bf:84:d7:b6:f6:
58:f1:6e:18:0a:27:0e:2a:89:10:41:6d:7c:4a:91:84:e2:1a:
b7:42:5c:53:80:e8:9f:e2:fe:86:2c:69:6f:a5:00:35:9a:58:
96:32:bc:93:32:2a:cb:06:06:fe:2b:c1:81:54:19:ad:e7:42:
cc:19:91:ad:b6:41:2a:b0:21:ab:80:fa:58:c3:44:78:30:ce:
7a:e5:61:69:13:dc:00:49:9d:f3:1e:2b:4d:e5:bb:c7:61:97:
b3:f7:75:4b:8b:c3:11:25:c6:d0:b6:3c:78:8e:14:02:ba:7f:
1e:33:aa:55:eb:51:83:19:7e:f6:27:99:e3:e0:e0:06:ba:93:
89:31:c8:5d:61:c7:25:97:45:e8:62:dc:b2:e2:29:88:53:1e:
21:41:8e:1b:35:70:f7:7f:8e:1f:e3:63:8f:c3:66:13:4c:b6:
d2:c5:28:65:b7:8b:57:ac:13:53:e9:fc:79:c8:05:cb:6c:60:
59:e0:06:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:14:10 2025 by rpki-client