Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/829CEE16C36D11EFA3B1FC55762E951A.roa
File: 829CEE16C36D11EFA3B1FC55762E951A.roa (raw, json)
Hash identifier: v+HFHt/A7WEeCb9zZTlUTO3RvqZ1qDYEJYsSta8IoGw=
Subject key identifier: FA:83:CD:48:0D:F6:4F:8E:05:D0:42:3F:17:C0:DB:73:9B:B4:9B:92
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0472
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/829CEE16C36D11EFA3B1FC55762E951A.roa
Signing time: Thu 26 Dec 2024 09:40:58 +0000
ROA not before: Thu 26 Dec 2024 09:40:54 +0000
ROA not after: Fri 26 Dec 2025 09:40:54 +0000
asID: 329007
IP address blocks: 196.251.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1138 (0x472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 26 09:40:54 2024 GMT
Not After : Dec 26 09:40:54 2025 GMT
Subject: CN=676d24aa-27bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:84:ad:7f:92:95:97:48:65:24:73:89:68:
33:c0:33:12:2d:7f:4d:9f:77:c6:88:e9:9b:7f:31:
cb:30:f0:09:58:85:5a:11:0a:09:75:b6:54:5c:2f:
08:44:c5:00:16:0c:6b:9e:0c:f5:4d:3e:32:40:97:
f0:f9:83:16:2e:07:9d:33:29:f4:a4:59:9a:91:3d:
e5:f3:31:0e:fb:b5:f3:27:59:28:3b:3b:e1:77:7c:
3b:40:c0:f1:a1:a0:f4:f8:04:7e:9d:dd:79:ea:0e:
86:ca:2a:88:2e:e5:d0:d2:e8:8d:5e:43:bd:31:00:
ec:07:29:68:0b:27:8c:c7:af:22:ad:ae:f1:89:fe:
c9:1f:33:83:2d:11:e0:ec:85:33:6c:63:07:c0:44:
3b:e7:44:70:ae:a0:8a:0c:0c:5a:b1:d0:c8:16:47:
4b:91:a2:2f:c7:18:1a:2a:bd:53:37:fb:bb:ec:1d:
32:14:01:2f:df:5c:23:7e:02:c9:84:61:3e:53:8b:
5a:e6:27:97:98:50:d2:a0:11:31:d3:d8:70:67:75:
46:73:2c:5c:e9:4a:bd:72:49:a0:ee:5b:5b:c8:0e:
6b:22:e8:1a:33:d7:e5:79:bd:87:05:b4:fb:70:b2:
ed:24:c1:1b:c0:47:c3:d9:08:13:7b:12:4b:e5:bb:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:83:CD:48:0D:F6:4F:8E:05:D0:42:3F:17:C0:DB:73:9B:B4:9B:92
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/829CEE16C36D11EFA3B1FC55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.79.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b4:87:1c:14:e9:2f:45:ec:43:4c:24:19:2f:40:65:98:bc:
99:e4:39:b5:29:28:5c:1e:b1:42:4e:90:d3:1a:c8:1c:b7:3f:
05:7a:28:09:30:0a:ba:f0:d5:f9:96:93:27:ad:8b:9f:1d:08:
aa:2d:9c:47:2e:8f:4d:02:89:30:51:c2:9e:81:cf:cc:c4:89:
21:69:6d:ea:9c:34:79:8f:43:01:21:66:24:ab:91:e4:a5:32:
1c:57:88:ae:d7:48:46:5f:cf:f1:6c:8d:df:5a:c1:18:81:4a:
e8:6a:57:53:78:87:b6:ff:39:8d:c7:64:40:ba:be:56:a5:a2:
26:a3:86:7c:15:c0:6f:5c:d4:5a:4e:e2:5d:03:78:fa:8a:66:
9b:25:c2:bf:d5:bd:6b:95:94:28:ac:9c:64:27:2a:08:96:aa:
19:5b:9d:19:c1:e5:92:d8:32:9a:aa:00:82:ab:1d:23:c4:3c:
9a:78:05:cc:09:77:8a:d8:46:2a:1d:1a:33:3d:f0:3c:e3:ed:
f9:46:57:ee:f7:02:0f:b3:a4:33:5f:ab:32:42:a6:81:90:a3:
e2:89:0f:c7:a9:b1:b0:b7:7e:77:88:d2:d3:bd:f4:49:c0:47:
8c:1c:d0:88:b7:75:74:98:a9:00:32:32:17:0a:77:70:ce:b4:
b9:2c:14:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:46:05 2025 by rpki-client