Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5E56273EC6A111EFB6276EA9762E951A.roa
File: 5E56273EC6A111EFB6276EA9762E951A.roa (raw, json)
Hash identifier: JO+ecK6558KdToMsG03pcDFbQ0ieQtNs94FJXIG43TM=
Subject key identifier: 5B:B7:BF:42:68:F2:72:E9:A4:0F:0D:F6:57:EC:AD:80:AC:10:2A:1D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04C3
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5E56273EC6A111EFB6276EA9762E951A.roa
Signing time: Mon 30 Dec 2024 11:29:45 +0000
ROA not before: Mon 30 Dec 2024 11:29:41 +0000
ROA not after: Wed 31 Dec 2025 11:29:41 +0000
asID: 329007
IP address blocks: 196.251.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:29:41 2024 GMT
Not After : Dec 31 11:29:41 2025 GMT
Subject: CN=67728429-2819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:08:bb:a7:71:f1:2f:4a:ad:76:d8:00:09:
b4:85:de:c3:96:65:45:e7:37:74:5a:8c:7b:05:f3:
ef:fc:38:71:ce:6c:93:d5:11:e4:d1:25:d5:37:7b:
3b:99:35:39:81:b3:ff:c6:85:11:7e:9a:b2:04:b5:
cb:f6:ab:14:80:5a:08:4a:a4:1f:07:cc:80:85:73:
84:0d:b5:13:76:d3:e0:3a:34:ca:32:fe:2d:0b:e1:
df:a0:4f:59:6b:b3:4a:8e:a1:1f:d8:56:3d:ca:c4:
69:7b:62:c9:a3:cd:f5:49:19:f1:36:74:fe:34:e2:
95:44:48:5f:67:7b:bb:b6:b5:3d:05:79:67:ab:97:
8b:cc:2b:2c:c6:35:75:8e:dc:ed:66:0d:a6:5c:51:
ba:d5:6e:f3:34:d0:40:09:4a:3b:f4:1b:da:f5:d5:
ac:e5:95:2d:24:02:70:2b:38:8b:a9:c4:56:74:66:
e1:45:e0:0e:8c:35:6f:fe:dc:fd:cb:c2:c5:6a:69:
95:83:7f:42:49:d8:61:86:18:0e:ff:d1:70:d5:71:
f4:04:e7:15:80:f2:55:f8:2c:35:09:86:7e:52:b5:
34:5a:d3:ba:78:5f:2e:49:1e:ca:83:24:4d:26:5b:
a9:30:a3:80:64:33:3a:48:69:e1:18:35:82:4c:ea:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B7:BF:42:68:F2:72:E9:A4:0F:0D:F6:57:EC:AD:80:AC:10:2A:1D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5E56273EC6A111EFB6276EA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.99.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:10:c3:bb:a3:af:0b:df:40:b9:87:cc:d0:03:27:07:77:19:
7e:13:8b:4a:91:3d:9a:4c:0c:f1:45:91:e9:16:ed:73:1d:90:
7a:ab:d5:6c:2e:47:7c:2f:87:e7:f9:7a:a6:50:6a:9a:35:c5:
00:ab:dd:42:56:f3:0f:6f:31:3b:54:f1:ce:6e:77:01:78:de:
32:63:d5:0c:41:fe:86:32:c2:f7:e6:a5:ab:96:b3:98:bb:89:
9d:e3:93:d0:27:e9:dd:97:d9:aa:c1:f7:7d:33:43:78:99:9c:
11:ec:8c:07:d3:f8:0e:f1:1a:3a:43:75:90:44:c2:ee:da:17:
33:84:c0:fd:4c:ed:70:85:dc:69:93:99:5a:05:14:60:da:28:
b2:79:de:8d:3e:84:7b:e2:82:77:b5:0a:82:63:02:e0:cf:7a:
bf:20:2b:1d:e4:a7:8d:6e:56:b3:27:a5:10:7e:23:15:ab:12:
34:db:14:14:42:f2:ee:59:4f:4b:c7:94:4a:79:26:ca:a1:51:
97:89:14:9e:a4:6d:84:5e:7a:fb:4d:df:7b:8b:f0:c3:36:20:
90:fc:47:eb:28:75:3a:86:3b:29:02:bd:04:6f:d2:4b:ef:ad:
60:e0:63:5c:00:57:e2:1b:a9:96:c1:e7:33:95:52:78:09:f7:
ea:ed:06:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:21 2025 by rpki-client