Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/40DA6B6AC36E11EFB74E705A762E951A.roa
File: 40DA6B6AC36E11EFB74E705A762E951A.roa (raw, json)
Hash identifier: Dx5vv2JDswwnkG6ap58QqmasBMsiNi6HpuKDqL03q7o=
Subject key identifier: 46:24:63:F4:B6:53:FD:11:10:0F:C3:B6:E5:2F:D5:A4:51:3F:3B:BB
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0476
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/40DA6B6AC36E11EFB74E705A762E951A.roa
Signing time: Thu 26 Dec 2024 09:46:17 +0000
ROA not before: Thu 26 Dec 2024 09:46:14 +0000
ROA not after: Fri 26 Dec 2025 09:46:14 +0000
asID: 329007
IP address blocks: 196.251.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 26 09:46:14 2024 GMT
Not After : Dec 26 09:46:14 2025 GMT
Subject: CN=676d25e9-37b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:f9:67:26:86:c4:11:17:7f:3d:9d:6d:c1:
c6:c2:60:84:d0:f8:24:a2:5d:c4:dd:bc:be:7e:54:
f3:8c:20:47:3c:7d:03:52:2e:e0:1a:a0:18:27:2e:
cc:b5:a4:c0:0f:4c:d8:43:23:79:f8:f3:3a:7a:ba:
f5:34:4f:9c:b4:7e:e6:a4:8d:32:9c:b4:bd:54:09:
26:04:a3:e0:3f:17:82:37:e1:78:2b:61:af:85:a2:
6d:b8:ac:1d:ca:06:99:3a:be:84:60:2b:0c:34:a1:
f4:c4:04:ec:9b:13:be:9c:57:f2:1a:f9:98:59:ea:
73:68:1b:13:05:72:d1:82:28:35:fc:dd:07:9b:29:
90:a9:aa:b0:33:0e:94:a8:a3:f0:66:d2:e6:1e:ec:
ad:e4:72:b6:be:62:b0:23:fd:8c:8f:4f:85:fe:ff:
b7:9e:d9:6c:5c:cb:36:5b:92:0c:3d:f4:0d:90:db:
44:08:2a:cb:99:d5:3d:12:7a:7f:a4:78:4e:db:a2:
87:04:99:69:87:45:7d:66:25:ef:cf:43:b3:63:4a:
24:03:97:64:73:47:7b:50:d2:f3:70:e6:83:fd:e3:
2d:e4:5a:56:c8:4a:a9:f6:b8:78:53:aa:c9:80:d0:
43:6e:04:21:1e:15:c2:8b:4b:73:cc:f5:2a:10:27:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:24:63:F4:B6:53:FD:11:10:0F:C3:B6:E5:2F:D5:A4:51:3F:3B:BB
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/40DA6B6AC36E11EFB74E705A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.81.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:9d:c2:56:7e:86:33:e1:a7:9d:ac:fa:95:c9:69:2b:16:44:
5f:5c:96:2b:b5:05:f2:ac:16:9d:7b:71:92:7c:48:74:c9:11:
e9:43:d6:f1:dc:84:03:42:f5:40:b5:09:08:39:81:cd:0c:73:
77:2c:bf:ec:12:32:15:69:6b:0f:60:3c:49:68:be:03:62:15:
c4:34:6d:bb:74:c8:f0:85:53:62:44:19:aa:ff:5c:0a:a4:a5:
df:0c:8c:a3:ed:4e:ad:24:7e:22:e9:e2:c1:c2:7c:53:dc:b2:
80:ce:8f:a2:37:91:85:29:6c:f5:24:0b:61:87:5d:05:ab:53:
07:86:8e:59:bc:19:b2:0d:00:d8:46:bf:f6:f7:5d:c4:12:e8:
fe:04:dd:91:38:dc:f3:d2:36:cc:50:27:58:09:fa:63:49:62:
4b:1b:ee:8f:06:e1:14:b1:0a:e5:7b:21:c5:63:ee:4b:30:b8:
ef:be:bb:55:26:35:40:6d:bb:4d:f3:d5:57:73:fb:2b:72:13:
b9:44:c0:0c:fe:89:2d:a8:99:79:b4:37:0f:1d:9b:94:e0:46:
02:5f:ae:fd:2b:38:36:2e:74:1a:a6:66:f3:b8:c6:51:54:4e:
c9:43:82:81:08:a0:17:de:c3:fc:25:d2:2c:e3:98:4e:32:07:
6e:42:7a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:14:24 2025 by rpki-client