Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7719ED8602ED11F0878AC84A762E951A.roa
File: 7719ED8602ED11F0878AC84A762E951A.roa (raw, json)
Hash identifier: nQw29Rf5OB8Io6t5kGwFQyCEO6w6LtzdeFyjm7e9ry0=
Subject key identifier: 31:85:82:DD:4F:88:45:51:CC:EA:3C:EF:02:0F:8C:7A:2F:11:4F:B4
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 070C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7719ED8602ED11F0878AC84A762E951A.roa
Signing time: Mon 17 Mar 2025 05:05:38 +0000
ROA not before: Mon 17 Mar 2025 05:05:34 +0000
ROA not after: Tue 17 Mar 2026 05:05:34 +0000
asID: 401120
IP address blocks: 196.251.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1804 (0x70c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 17 05:05:34 2025 GMT
Not After : Mar 17 05:05:34 2026 GMT
Subject: CN=67d7ada2-3ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1c:63:47:20:73:fe:5a:c6:39:d5:1c:b0:fc:
63:59:f4:72:4a:b4:f6:b1:b0:ae:1f:ed:74:e8:f7:
42:bd:1b:59:76:94:d0:a0:e3:0c:16:c7:a7:15:d0:
a9:a3:0b:8d:ef:3a:18:58:fb:89:89:4d:fa:d0:2b:
82:16:4b:5b:1b:c9:7f:7c:3f:01:2b:d6:d0:4b:1f:
75:6a:8e:cd:c0:6f:2f:df:d7:0e:3c:d9:cb:50:08:
aa:16:63:b5:70:2e:29:d3:23:10:87:9a:d0:3b:55:
cd:c2:7d:ae:4f:6e:3a:59:fa:50:6a:11:79:3c:33:
33:0a:9a:9a:2c:ce:38:d9:e9:e3:21:c0:56:a1:9e:
f3:0c:d1:1e:f6:88:ec:3b:b2:76:20:f1:21:a1:d9:
26:a6:e5:94:d2:20:40:ae:0c:75:74:c1:65:ba:d5:
66:a6:eb:dd:0e:ff:da:6b:2b:de:d3:25:a9:cf:b9:
30:22:f0:58:73:d4:75:c6:32:ca:b8:41:24:1a:fe:
54:f4:e1:72:c1:57:8e:3b:b8:a3:aa:29:91:d9:80:
eb:e7:2a:a0:62:89:a1:b1:5b:40:73:87:df:7b:96:
38:31:df:cd:cb:a6:eb:ae:08:79:d9:cc:35:eb:22:
56:58:46:99:8f:c6:91:fe:f0:2d:6f:33:5c:2c:ac:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:85:82:DD:4F:88:45:51:CC:EA:3C:EF:02:0F:8C:7A:2F:11:4F:B4
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7719ED8602ED11F0878AC84A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.71.0/24
Signature Algorithm: sha256WithRSAEncryption
98:fc:ba:8b:e0:48:0c:96:a6:f9:65:f1:5a:c1:d1:46:e8:f1:
57:29:b2:25:75:c4:fb:03:0e:a5:f0:23:61:ea:8e:86:b9:26:
83:90:43:5f:73:d9:ff:6a:fa:e9:60:19:da:30:de:8b:e4:df:
ef:52:00:4c:a4:d2:44:df:e2:b0:fc:bb:92:6e:86:bd:86:67:
19:b0:a2:d2:0a:b1:32:80:d9:2d:d2:07:89:95:c8:3f:d7:87:
9d:34:48:55:c0:86:b3:8f:ed:4b:4d:d4:93:f3:0a:c4:3a:f9:
a9:d0:6a:df:e5:5d:79:0e:41:08:ea:00:a2:6f:4e:f5:0a:2c:
71:00:72:0e:27:24:91:b7:1b:12:61:37:9a:59:26:13:0f:88:
a5:94:67:78:d0:97:d3:0e:a5:3e:95:a0:a0:02:49:37:27:f5:
45:83:ba:ca:b2:e5:21:cf:b6:d4:71:e3:ff:f5:a1:c3:c6:8a:
fb:8b:3f:ac:a0:2c:bc:78:fd:9d:ff:2f:4c:6b:2b:34:66:8c:
e7:38:1d:62:90:25:79:2b:e4:1e:9d:77:cd:dc:75:c8:3b:61:
bd:a6:7b:54:d8:2c:76:70:78:f9:62:fd:a6:b1:2f:cd:d4:3c:
ec:c8:50:c7:2a:21:62:ba:c3:6d:de:e1:80:aa:59:ff:91:34:
8b:ee:cf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:26 2025 by rpki-client