Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6E8D2242CDBD11EFB7504E69762E951A.roa
File: 6E8D2242CDBD11EFB7504E69762E951A.roa (raw, json)
Hash identifier: DsiPYlykCj8tNNCmbsRYSXPPa2nby7oL9ouhwdQjbbM=
Subject key identifier: 33:8F:7E:41:F8:65:39:2E:AD:84:4C:BD:98:59:DC:E5:77:2B:22:F8
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04E2
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6E8D2242CDBD11EFB7504E69762E951A.roa
Signing time: Wed 08 Jan 2025 12:38:16 +0000
ROA not before: Wed 08 Jan 2025 12:38:12 +0000
ROA not after: Fri 09 Jan 2026 12:38:12 +0000
asID: 329007
IP address blocks: 196.251.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 8 12:38:12 2025 GMT
Not After : Jan 9 12:38:12 2026 GMT
Subject: CN=677e71b8-5287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:8f:5f:5e:76:01:7b:1e:e3:87:0e:67:a9:
21:70:03:ab:4d:14:20:df:fe:d1:9b:78:bc:17:d9:
10:51:c5:aa:1d:50:3d:42:9c:2d:a5:39:34:16:8c:
d1:dc:55:8b:25:ff:40:c7:d0:b7:1f:2f:d5:82:89:
7c:5f:c1:54:ac:92:7c:28:b8:14:53:09:b9:41:3e:
7a:59:81:45:d1:f6:8d:5e:b9:11:fa:38:f9:a0:75:
3c:bb:ba:29:d4:fc:91:13:2e:eb:ef:72:48:f2:29:
ea:d4:98:76:62:4e:74:94:98:a6:17:30:f9:8e:8b:
35:20:37:21:15:33:05:df:b1:21:0b:84:21:e0:42:
cd:96:7c:42:80:e1:0a:83:e0:79:c9:3e:09:2c:a2:
09:79:83:84:89:e8:b3:5f:64:1f:46:b3:9f:2b:67:
73:bf:b7:e5:2f:25:d7:18:b8:e9:7a:7c:7a:68:c5:
80:14:96:d7:04:07:75:04:bf:b2:97:b8:f5:11:16:
81:91:46:39:55:18:59:c7:86:30:ea:27:64:ff:4d:
3d:6f:f5:e1:72:70:8e:40:d1:35:19:5a:6d:f9:94:
45:75:ba:63:e8:44:be:60:2b:8c:c7:a6:d0:4a:ef:
36:c2:95:59:80:7b:5b:f8:2d:4f:ed:15:8a:76:73:
ed:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8F:7E:41:F8:65:39:2E:AD:84:4C:BD:98:59:DC:E5:77:2B:22:F8
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6E8D2242CDBD11EFB7504E69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.68.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:63:08:10:81:c5:ff:5c:74:b6:09:ed:61:2a:e2:37:85:10:
66:f9:1e:e7:9b:04:8c:ac:cc:32:06:78:3e:f0:98:05:a6:73:
d6:de:d0:7f:72:d5:a8:73:23:40:71:6b:c7:a5:0b:bf:df:e9:
95:8f:5c:8f:08:2b:45:bc:d5:eb:67:18:49:4b:5a:a6:42:af:
77:0a:28:ea:2f:6d:3d:21:17:eb:cf:b3:2c:b6:f2:72:c6:7b:
16:2c:16:f5:9f:f9:52:79:3c:76:5f:63:5d:64:93:6c:3c:5d:
04:0c:3a:39:4d:a8:8a:32:5f:ca:23:3d:0f:e2:71:19:d2:e7:
ba:83:27:21:fa:84:f0:65:b2:d9:23:10:82:e9:13:d0:08:74:
73:aa:a5:bc:c5:91:01:ab:91:5c:3d:08:e6:bc:22:df:da:8a:
35:65:0b:a1:37:c3:0c:c8:da:86:7b:35:b4:58:01:14:e5:4b:
a7:7e:98:9d:d7:a0:13:03:49:9b:f9:f9:22:76:9b:90:0f:5d:
3b:4e:4a:38:e7:87:72:7c:e3:32:7d:09:6e:48:77:d2:10:32:
01:f4:7f:35:89:98:7e:11:d3:ed:95:1b:8e:7f:8e:c6:41:96:
bb:a9:0d:34:b8:90:62:63:d8:2a:03:89:ad:a5:b0:0d:4d:e9:
8d:af:ba:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:58 2025 by rpki-client