Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9E9949CAD17311EFBC29CE72762E951A.roa
File: 9E9949CAD17311EFBC29CE72762E951A.roa (raw, json)
Hash identifier: XoUnmDg3sB/u2/Ih4/PKB1z4RqLtMzdrYWpAaT2bzUI=
Subject key identifier: 7D:63:7F:38:C1:97:6A:94:44:50:E4:A7:DF:1E:A9:D3:C2:5D:42:A0
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04F7
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9E9949CAD17311EFBC29CE72762E951A.roa
Signing time: Mon 13 Jan 2025 05:59:58 +0000
ROA not before: Mon 13 Jan 2025 05:59:55 +0000
ROA not after: Tue 13 Jan 2026 05:59:55 +0000
asID: 329007
IP address blocks: 196.251.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1271 (0x4f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 13 05:59:55 2025 GMT
Not After : Jan 13 05:59:55 2026 GMT
Subject: CN=6784abde-29b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:42:28:59:cc:29:cb:e3:55:73:84:82:15:
d2:2d:57:ac:8d:63:66:a0:a1:71:8e:6e:4e:d0:e4:
2c:de:6a:1e:23:61:42:75:b9:1f:c7:93:45:6e:6d:
94:4b:9d:85:b3:68:49:15:4d:7e:4d:56:40:e2:f9:
8a:a3:24:ec:cc:35:19:3b:49:3e:21:12:0e:08:d4:
b9:96:c5:7f:a6:6c:fe:30:75:e1:83:d6:8a:5f:72:
55:13:55:62:aa:65:63:d7:08:58:b6:c3:37:7c:d6:
99:55:bd:a5:d6:78:ab:4e:99:d9:1d:a4:05:05:4d:
e8:f7:19:d0:07:b2:2a:34:e1:c8:36:71:40:2b:a2:
4c:2f:a4:4c:f0:b7:0b:ef:06:49:ad:23:27:c4:79:
6e:2d:b9:ba:bb:0a:ed:da:3c:33:fb:88:93:29:ff:
dd:43:b4:4f:e6:53:7c:f9:d0:c2:e7:14:d9:9b:9e:
4f:e5:30:94:1f:69:37:1a:be:ce:d9:d1:69:60:7a:
4e:cd:00:f8:2c:cf:52:ce:06:80:39:b0:f8:ac:f3:
32:63:02:42:81:0a:66:d1:fe:58:8d:5a:a6:df:58:
ff:4e:d5:eb:e0:d7:64:00:7a:37:4f:c0:45:a4:64:
d0:bd:d7:a7:26:a7:28:ae:aa:29:77:af:8d:dc:92:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:63:7F:38:C1:97:6A:94:44:50:E4:A7:DF:1E:A9:D3:C2:5D:42:A0
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9E9949CAD17311EFBC29CE72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.68.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:37:34:94:f1:98:25:e1:ef:4e:74:5d:f1:f0:f1:fd:64:1c:
eb:76:ca:b4:22:20:62:0c:28:ef:5e:f0:64:87:1e:04:15:28:
bc:f6:97:6d:f1:f7:b3:01:a8:b5:3c:f0:71:fc:f0:f4:11:1e:
cb:37:5a:0b:9c:87:24:7c:f5:fa:ca:98:ef:14:af:21:3b:c0:
44:b9:d3:e6:ec:1d:4a:b1:e6:b5:ab:25:be:26:1c:ba:97:cd:
64:fb:2f:3d:64:21:f1:6f:a3:98:8b:d1:ee:30:d4:be:f7:4c:
16:fc:d5:04:a6:a3:04:7c:61:54:d5:32:40:de:6c:fa:4e:60:
25:ef:f4:8f:ca:f2:1f:7f:10:74:48:1c:c5:bb:0d:52:17:ae:
0a:a5:c2:cd:af:17:05:c6:49:f6:89:20:6f:c2:40:0a:6a:a6:
74:90:c8:fd:12:f7:6c:9c:2c:5c:a9:e7:d1:6c:e0:13:e2:c3:
99:f4:bc:c1:28:e7:41:ac:69:f7:18:44:05:e9:f2:5e:07:17:
cf:63:17:dc:e3:79:57:6d:58:b9:cb:92:dd:a2:9c:ec:cb:39:
5e:14:95:8f:99:ad:61:8a:de:22:0d:9f:da:fc:af:a9:1f:d3:
8e:92:98:26:d9:1b:75:75:22:73:32:cb:4a:7d:07:ad:ea:f8:
70:6a:d6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:35 2025 by rpki-client