Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/363FC212E87C11EFB6EB7CAF762E951A.roa
File: 363FC212E87C11EFB6EB7CAF762E951A.roa (raw, json)
Hash identifier: pnUgG9/0C4qsuZ0scSZjF6daay4FRSxS2q7CcxaJKjo=
Subject key identifier: BB:25:F2:1B:E7:D3:E3:5D:6E:46:B7:41:EE:DD:5B:21:27:9D:B2:9D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0612
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/363FC212E87C11EFB6EB7CAF762E951A.roa
Signing time: Tue 11 Feb 2025 13:29:26 +0000
ROA not before: Tue 11 Feb 2025 13:29:22 +0000
ROA not after: Wed 11 Feb 2026 13:29:22 +0000
asID: 401109
IP address blocks: 196.251.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1554 (0x612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 11 13:29:22 2025 GMT
Not After : Feb 11 13:29:22 2026 GMT
Subject: CN=67ab50b5-3d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:38:75:de:ed:82:93:cc:1c:91:4f:6b:5e:
88:fa:52:7b:08:96:97:6e:ad:4e:8b:6d:f6:e0:67:
e0:02:b2:74:89:58:8b:80:9a:5d:b7:e0:1e:02:06:
30:2e:ee:aa:d7:84:00:90:a8:b2:8f:ac:4d:1b:33:
49:ed:52:6c:c7:33:87:11:33:e1:0a:99:21:6d:05:
bc:94:78:90:ad:f6:87:01:4f:cc:87:30:89:4a:5d:
65:e3:4a:d3:77:aa:ce:f7:9a:43:af:ce:3f:a8:50:
3f:e5:6c:66:77:2d:7e:52:29:0d:6f:c6:38:cf:81:
e2:48:e4:11:8e:16:33:ba:7e:21:73:e3:15:57:89:
1e:17:b5:e4:40:ed:56:e1:4c:2c:5e:10:97:fc:da:
3c:24:b7:e9:39:55:a5:b3:6e:72:7d:08:97:e0:d8:
bc:ba:bc:1a:be:f3:ca:7f:6f:c6:d0:d9:f1:ad:78:
a6:ca:b8:7d:16:32:6c:f0:b2:68:d6:fa:45:b0:25:
2f:57:d0:73:0d:ed:75:12:6d:20:09:5b:a0:ad:47:
b5:f1:71:d6:4b:0b:31:91:45:98:29:93:90:72:27:
d4:cc:70:7e:a0:7a:61:2f:90:ed:f3:0d:c0:6b:ad:
a0:17:94:04:45:af:20:04:20:e3:c6:72:ca:e2:75:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:25:F2:1B:E7:D3:E3:5D:6E:46:B7:41:EE:DD:5B:21:27:9D:B2:9D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/363FC212E87C11EFB6EB7CAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.99.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:84:ed:ef:ad:9c:56:c9:d0:bf:5f:ce:8e:fd:de:b8:49:c9:
5a:7b:84:61:e2:d8:af:48:86:40:48:fe:2f:2f:91:3b:03:a4:
86:b4:ce:b3:0e:13:82:8e:75:3c:e2:ed:2a:26:d3:cd:c7:d8:
60:6b:8b:79:ed:80:fc:ee:30:3e:02:c9:98:e6:ca:27:52:af:
0f:a7:f2:eb:b9:bf:45:c0:6f:c2:4b:2b:87:a5:28:1b:cc:f6:
d2:14:80:7a:44:54:2a:02:2c:2f:c1:83:f2:53:3c:de:f2:f4:
fe:19:56:65:3c:bd:75:5c:1f:f3:a0:f7:fe:93:ab:e0:fd:54:
f4:4f:57:61:bb:12:65:8f:1b:77:8e:ca:39:8a:87:c6:97:1b:
4e:3e:f5:47:b6:25:ad:3d:3f:e7:5a:1a:2c:da:95:be:6c:d3:
3c:c5:0e:6b:f3:54:bc:74:d7:4f:04:87:f5:95:c5:91:7b:4c:
f0:97:d7:98:a3:43:ef:09:3c:22:53:d1:5f:33:50:df:ba:06:
ab:b2:66:76:4d:12:42:17:d6:f7:09:38:64:8e:d3:d9:ec:51:
fd:87:47:a6:3f:4b:f1:8f:a3:38:3d:64:2e:dc:02:7e:05:77:
1c:f0:d3:e7:1d:a3:c5:ed:0b:f1:ea:34:35:79:54:ea:c2:b3:
f1:fe:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:39:27 2025 by rpki-client