Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/92B5ED60D70F11EFB27A14B2762E951A.roa
File: 92B5ED60D70F11EFB27A14B2762E951A.roa (raw, json)
Hash identifier: 8Njjc8DXWBIYEbxauUVGZY131ApSZONro/k2raTfsTs=
Subject key identifier: 50:E1:6C:70:71:E2:0F:0C:4C:86:80:1E:49:DE:96:76:25:5A:AC:D2
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0587
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/92B5ED60D70F11EFB27A14B2762E951A.roa
Signing time: Mon 20 Jan 2025 09:18:56 +0000
ROA not before: Mon 20 Jan 2025 09:18:52 +0000
ROA not after: Tue 01 Dec 2026 09:18:52 +0000
asID: 329007
IP address blocks: 196.251.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1415 (0x587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 20 09:18:52 2025 GMT
Not After : Dec 1 09:18:52 2026 GMT
Subject: CN=678e1500-cd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7d:4b:83:7a:d2:66:37:ac:09:d4:bf:b8:19:
41:11:9a:86:f7:ca:ee:d2:8d:c1:49:c3:8c:49:3f:
8a:b7:87:bb:5d:97:bc:76:aa:c9:0f:66:2d:2f:bb:
fa:d6:12:fe:c9:21:1a:45:80:16:0f:0d:2e:49:fe:
0c:b6:2b:33:c4:de:23:26:c7:eb:7a:50:f8:fc:94:
6f:63:d2:fb:bc:93:ff:9b:53:98:86:56:b6:86:93:
64:0d:9e:e6:b4:fb:7d:e9:e6:af:37:ff:a4:13:64:
43:a9:4c:b4:4e:7a:00:6e:7e:a3:b4:b0:11:15:05:
cc:3e:c5:31:67:15:8e:92:18:0d:2d:74:e7:ce:d7:
bf:15:63:bc:b2:20:34:16:25:49:ac:e7:1d:b0:84:
75:c4:da:b7:93:b6:b2:f5:4f:74:7c:46:c2:bb:60:
a8:e2:d1:9d:bc:b7:cb:64:f7:36:c0:6d:fa:f5:67:
48:79:88:e3:f8:e7:11:91:72:47:ba:7f:73:c7:59:
ee:1e:b5:52:88:5b:7e:f3:bb:17:09:34:e9:6b:14:
50:d5:ce:90:81:74:8b:85:dc:cb:61:93:06:aa:c0:
8f:84:71:6d:48:b8:06:f5:15:8d:06:29:f9:ac:82:
a4:0a:91:81:41:e2:a2:5a:21:1a:4e:e2:c4:bb:28:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E1:6C:70:71:E2:0F:0C:4C:86:80:1E:49:DE:96:76:25:5A:AC:D2
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/92B5ED60D70F11EFB27A14B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.76.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:7f:2b:4b:67:2b:02:b2:82:58:56:a0:22:d2:cf:96:7f:3b:
38:d5:c3:67:14:29:36:fd:e1:93:10:27:2e:62:6b:84:b3:84:
24:ec:c7:7c:58:3a:63:3d:1d:bc:a5:90:a3:37:ef:fc:69:e8:
36:4f:ac:70:6c:56:04:25:de:9b:ef:23:ce:94:1d:e4:e7:df:
98:ab:7c:25:81:3a:22:7e:7b:58:c9:51:e5:93:80:cf:30:cc:
1c:eb:ec:c1:4e:47:34:b8:83:7f:25:cc:9a:ed:66:aa:20:8e:
a3:95:84:d8:c0:62:cb:99:89:54:fe:dd:a1:09:e5:91:37:6f:
90:1f:dc:99:8f:a5:74:73:fb:33:1c:31:b8:1e:9c:c1:e7:f7:
1c:02:5c:71:5a:bf:cd:17:d5:7f:cd:e9:70:fa:6d:6e:12:6d:
f7:a3:6f:e7:97:02:c7:20:a9:b3:87:b9:cb:95:d9:28:74:9f:
ea:9b:a9:7f:14:87:11:99:44:eb:8e:9a:09:97:a0:60:34:4f:
11:d0:a1:6f:5e:95:a9:b9:24:58:6a:ac:5c:ba:17:74:b6:eb:
d7:f7:a7:54:94:af:3b:dc:4e:8a:aa:a1:0d:35:a9:c0:4b:24:
55:73:9c:87:8c:4a:c5:b0:01:7a:3d:91:22:52:82:d5:cc:3e:
07:38:70:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:33:35 2025 by rpki-client