Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4FFB2568C6A111EF994B3CA8762E951A.roa
File: 4FFB2568C6A111EF994B3CA8762E951A.roa (raw, json)
Hash identifier: j92NTUGEv1d4bt//2evXWYI86avA4Wk2mTnQzHSWvRA=
Subject key identifier: 4B:7D:4E:15:5E:4D:B8:C2:49:2C:A2:EB:4C:2D:DB:8F:27:38:BE:37
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04C1
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4FFB2568C6A111EF994B3CA8762E951A.roa
Signing time: Mon 30 Dec 2024 11:29:20 +0000
ROA not before: Mon 30 Dec 2024 11:29:17 +0000
ROA not after: Wed 31 Dec 2025 11:29:17 +0000
asID: 329007
IP address blocks: 196.251.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1217 (0x4c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:29:17 2024 GMT
Not After : Dec 31 11:29:17 2025 GMT
Subject: CN=67728410-3233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b9:ee:dd:a8:6a:71:e9:ea:e4:f3:39:85:b2:
af:ce:d7:6c:39:aa:42:8a:07:3d:1e:57:85:85:90:
41:15:5b:85:33:91:06:f8:86:60:e0:cb:5b:52:9f:
aa:13:bf:b9:87:22:d3:51:a3:ab:37:65:f1:92:9c:
1e:5e:1a:d6:d9:71:cb:d0:1e:a1:c7:9e:16:61:7a:
26:9b:96:92:ac:af:3f:77:b0:66:9f:d3:e4:4f:12:
a6:66:20:f0:66:1f:6f:db:c4:70:9c:fd:ef:af:fa:
38:a2:d7:2a:e0:fe:56:d9:5e:70:a2:c0:dd:a5:ae:
bb:f0:70:67:4d:da:f3:df:25:e6:35:e0:96:be:cf:
9e:57:3f:e5:c2:ad:3c:35:7c:86:b0:ed:49:f5:f1:
43:d2:7d:0e:13:07:cb:97:96:39:2a:c2:64:cb:99:
7d:ed:1e:6f:84:72:55:1a:08:53:70:8a:39:88:0a:
2d:2d:14:30:b1:22:38:84:bb:91:15:f3:f5:9a:9f:
7e:f9:f6:9c:de:96:54:98:82:1f:6d:b4:90:a7:b1:
ea:16:61:9a:ea:6b:38:6b:48:c5:57:d5:85:e3:a4:
53:ee:87:89:26:b5:04:09:f9:2a:99:f1:22:bc:87:
9f:56:d4:fd:25:d4:42:f9:09:4c:c4:5b:e6:e7:30:
be:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7D:4E:15:5E:4D:B8:C2:49:2C:A2:EB:4C:2D:DB:8F:27:38:BE:37
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4FFB2568C6A111EF994B3CA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.98.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:49:ad:c9:41:d1:e0:17:28:6d:f8:99:44:58:ab:c9:a1:23:
fd:44:be:b8:35:2a:9d:71:36:4c:fe:a2:bf:71:16:4d:82:ff:
32:7a:0a:0c:7b:52:fe:bc:84:93:2b:b8:b7:35:99:21:70:3f:
61:33:ba:e5:a1:ac:0c:a0:ae:12:6f:a4:b2:3a:b6:d9:5e:8c:
be:52:a8:90:1b:64:8f:79:c2:96:84:7b:3c:3b:96:09:79:6f:
2b:36:2f:03:71:fa:44:70:0c:ec:08:b5:05:6f:6b:a4:ff:8c:
0a:0c:19:3c:86:28:72:4d:c1:68:cd:92:76:88:62:44:58:4a:
04:74:26:8a:89:5a:08:59:27:31:1f:3a:36:05:9d:8b:da:b5:
d3:e1:e4:5c:1a:0f:f1:40:e6:ad:72:80:f4:f1:f6:fa:29:44:
3d:78:de:20:34:c3:92:ba:61:6a:75:24:ef:3d:c5:ba:74:f6:
5f:9e:d2:9b:06:c1:3f:ba:35:47:b1:21:4b:78:fd:b8:23:34:
b0:71:ec:2a:46:75:31:ae:4f:f7:98:b8:b7:7d:84:4d:97:d8:
93:80:da:46:51:2b:84:9e:9b:1e:1a:98:1d:5c:33:76:30:90:
b9:a9:57:bc:84:ec:b5:41:95:4b:49:83:90:e5:36:f9:01:24:
53:56:56:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:56:55 2025 by rpki-client