Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/72D7889A08A211F0BF9C3979762E951A.roa
File: 72D7889A08A211F0BF9C3979762E951A.roa (raw, json)
Hash identifier: DOoaaNdTY7xivdO5XuAg1+2yEdw/c/EjOhu+rzr9luk=
Subject key identifier: AE:A0:C5:9B:0A:20:5D:12:71:97:7B:9D:9D:10:6A:C0:D2:4D:09:C9
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07E2
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/72D7889A08A211F0BF9C3979762E951A.roa
Signing time: Mon 24 Mar 2025 11:23:45 +0000
ROA not before: Mon 24 Mar 2025 11:23:42 +0000
ROA not after: Tue 24 Mar 2026 11:23:42 +0000
asID: 2914
IP address blocks: 196.251.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2018 (0x7e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 11:23:42 2025 GMT
Not After : Mar 24 11:23:42 2026 GMT
Subject: CN=67e140c1-e6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ee:48:53:9c:38:f1:50:bb:dc:d1:17:2a:83:
c7:58:ad:e0:a3:e6:68:95:81:87:0c:13:bd:0e:5e:
aa:40:d3:a9:b3:bc:d1:4d:ca:e9:04:af:4d:be:00:
5a:e8:6a:31:be:2f:6c:d5:ac:d3:d3:f3:fd:83:a0:
81:86:ee:b5:bb:cf:d8:80:f4:5e:b8:8a:0a:c6:d5:
e8:57:2e:2d:ff:97:35:19:8c:10:90:6a:bc:74:02:
97:dc:70:cb:dd:48:bb:be:e0:f9:f9:b5:42:be:7f:
34:70:61:c6:24:3c:3f:ca:67:7e:0c:7b:ae:48:40:
9c:8d:dd:d3:36:ec:5a:85:c2:58:f1:40:e4:6c:a1:
4f:11:8e:0f:33:07:e9:fe:2c:65:38:de:bf:75:e9:
01:12:ae:9b:61:54:2b:5e:51:9f:ff:bd:36:be:e1:
fa:11:86:ca:2b:23:3f:3c:1a:14:73:68:55:32:41:
e0:b2:33:88:f3:93:14:84:db:73:25:a1:62:a9:a4:
e6:cc:a9:a6:98:5a:2f:ac:4d:03:78:32:74:e6:83:
e0:20:73:7a:fb:26:a8:e2:97:f3:fe:65:d4:f2:49:
98:8e:50:01:23:77:58:63:0d:a3:06:32:34:fa:e3:
d4:2a:a4:8f:0f:95:38:a7:f3:07:96:04:63:f7:ca:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A0:C5:9B:0A:20:5D:12:71:97:7B:9D:9D:10:6A:C0:D2:4D:09:C9
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/72D7889A08A211F0BF9C3979762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.109.0/24
Signature Algorithm: sha256WithRSAEncryption
af:4f:7a:5b:15:cd:3e:2b:08:05:29:4c:7d:8b:1f:28:e8:a9:
36:7d:bb:4b:80:26:2b:c3:9c:e8:f2:1b:89:2d:ba:7d:11:82:
6f:1d:f1:59:b4:5e:c8:f0:e7:e2:13:49:22:ee:3c:cb:5e:e5:
51:b1:39:04:c7:ab:69:35:a4:ae:f1:c0:50:09:ec:46:d4:2e:
03:c7:9c:21:05:0f:99:a7:ac:a3:9f:ea:2a:9e:46:71:19:96:
16:c0:1d:64:12:38:dd:92:01:b3:3a:b5:7e:09:f8:ef:3e:cf:
e0:70:c9:f7:d6:46:b1:b8:d9:77:ee:8c:75:bf:7d:aa:13:e3:
1a:e2:c0:27:3e:9c:3d:b8:2e:26:97:7b:90:58:99:51:d6:b6:
23:32:1d:23:10:e0:c3:13:47:4b:33:88:a5:3c:c1:ff:a5:b0:
55:1a:2e:a7:63:8f:fb:07:23:7f:51:61:94:97:b8:fd:0a:fc:
71:59:02:a8:0b:bd:39:e6:04:a0:1d:91:d0:ca:95:e4:26:dc:
13:09:f8:9e:3c:0e:46:87:ec:e3:ae:5c:b6:fc:43:bc:61:e9:
a9:82:d4:b7:27:2a:36:80:d4:97:1d:81:ee:01:e2:77:b4:7c:
47:96:ec:00:f7:0b:59:23:c8:68:3f:d1:ea:f4:ca:67:ea:f3:
27:70:74:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:38:19 2025 by rpki-client