Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/582CFC30C6A011EFB204F0A1762E951A.roa
File: 582CFC30C6A011EFB204F0A1762E951A.roa (raw, json)
Hash identifier: IZwuz9uMKCCwe77uckOVvCXLKyKWJ97IeTC/aNQotw4=
Subject key identifier: CD:E8:F4:C0:B0:71:F1:C7:CE:57:98:C0:45:C9:A2:98:B3:61:FD:D8
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04AA
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/582CFC30C6A011EFB204F0A1762E951A.roa
Signing time: Mon 30 Dec 2024 11:22:25 +0000
ROA not before: Mon 30 Dec 2024 11:22:21 +0000
ROA not after: Wed 31 Dec 2025 11:22:21 +0000
asID: 329007
IP address blocks: 196.251.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1194 (0x4aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:22:21 2024 GMT
Not After : Dec 31 11:22:21 2025 GMT
Subject: CN=67728271-3c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:69:27:33:77:52:92:31:ab:54:5a:c5:9e:
44:49:99:dd:a2:56:2e:97:54:ab:bb:8a:e5:18:f9:
00:cd:60:b1:5c:2f:8b:76:fa:23:6e:b4:fa:cd:a5:
7f:9b:9c:c6:67:2c:b4:ca:4a:7d:a1:15:2d:36:d3:
40:ad:b6:ee:fe:11:b3:e0:a0:f5:14:be:71:22:8f:
16:fd:64:28:4d:cb:3c:80:4d:67:fd:e0:c8:64:7b:
4f:93:97:1c:2d:d6:9b:6d:b8:ef:fd:f3:6b:0b:9e:
8f:b9:f7:c4:7c:4a:d7:ae:2e:22:17:a3:be:9a:18:
28:ba:8d:a1:e0:f7:16:3e:1f:85:5a:a7:1b:99:47:
c9:7f:18:47:1d:38:f4:be:8d:8e:42:ce:6f:5f:7d:
19:fd:c6:a0:5c:80:b8:da:54:af:66:a9:44:f3:80:
93:87:b6:6d:e1:05:c5:85:8b:78:af:be:60:82:9c:
33:ab:e6:3c:60:ba:44:67:10:f3:52:1f:4b:77:e8:
23:06:68:e2:c0:2b:13:74:d3:51:d0:4f:46:6e:32:
e9:a0:d4:50:78:a9:e7:1f:84:42:9e:51:58:dc:ae:
1a:99:e2:cf:1d:c9:d6:4f:82:91:6f:b1:be:f9:71:
56:0a:4c:fe:0d:1e:c7:bf:8d:a3:ce:10:e0:02:94:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E8:F4:C0:B0:71:F1:C7:CE:57:98:C0:45:C9:A2:98:B3:61:FD:D8
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/582CFC30C6A011EFB204F0A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.93.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:ce:24:43:eb:fc:43:db:18:e2:bc:7f:36:2b:e6:e5:e5:b6:
5c:11:5c:90:b8:9f:4b:2b:eb:c0:52:4b:b5:e2:20:87:46:6d:
55:cb:41:bf:b9:97:ef:9c:41:a7:0a:1e:a0:be:4e:c9:a0:3c:
a3:2f:a8:ec:14:f2:fa:89:dc:8f:2f:42:9b:8d:52:47:98:04:
eb:c0:76:ee:04:8f:85:75:ce:95:f5:01:a1:59:ce:8a:9c:62:
e4:33:d9:e9:c8:7c:01:d4:f5:d7:17:64:32:29:b7:b3:f2:e6:
99:3f:b8:e3:3a:18:5a:e2:41:34:92:fd:e6:11:a7:8b:25:83:
fb:80:2a:17:05:1d:46:56:71:63:2f:c7:f6:1c:a2:81:0c:fd:
b7:aa:fd:7a:2b:0f:0c:ad:e5:f8:b9:69:62:4b:2d:90:9a:d8:
25:33:8f:61:83:73:76:ae:fc:6e:93:41:04:d5:1b:16:37:84:
cd:3a:e4:e0:ab:8c:92:44:2f:ed:c9:00:af:62:d9:b2:40:ec:
6c:02:2a:63:fa:96:09:e7:d5:c0:ab:90:23:6d:58:1f:fd:e8:
43:7a:e4:77:6f:a1:7e:82:7c:98:b4:d1:8d:89:3a:07:e6:27:
d7:e6:fa:8f:e9:bd:a3:fb:ef:5e:3b:8b:7d:c7:9b:ee:5b:a4:
17:60:ae:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:40 2025 by rpki-client