Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AD388046C6A011EF9D2DA3A5762E951A.roa
File: AD388046C6A011EF9D2DA3A5762E951A.roa (raw, json)
Hash identifier: c5Lfo2O9lrNFtHcFv2IxW9ietO48hwNGmoUNtk5HRyQ=
Subject key identifier: 16:E2:F7:E0:A1:1C:95:C1:9D:7E:1F:C6:19:3C:8F:45:78:D2:79:9D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04B2
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AD388046C6A011EF9D2DA3A5762E951A.roa
Signing time: Mon 30 Dec 2024 11:24:47 +0000
ROA not before: Mon 30 Dec 2024 11:24:44 +0000
ROA not after: Wed 24 Dec 2025 11:24:44 +0000
asID: 329007
IP address blocks: 196.251.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1202 (0x4b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:24:44 2024 GMT
Not After : Dec 24 11:24:44 2025 GMT
Subject: CN=677282ff-7cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ef:1a:65:36:3d:10:b6:90:9a:c2:1d:50:36:
c5:49:84:3d:b9:29:84:45:11:88:25:03:32:e8:da:
4a:ed:93:e1:b9:52:be:d9:e7:de:ba:53:d1:fd:0d:
ce:42:85:b4:2e:f0:02:26:f3:c8:98:5a:d6:f2:48:
7f:5f:2c:b7:41:f6:30:03:85:51:25:92:e4:6e:47:
6c:8b:ef:a8:01:87:05:82:93:7a:b2:5d:7c:f3:f9:
39:87:88:47:a8:8e:08:eb:85:1b:10:3f:d5:a9:5a:
0c:12:04:02:5a:34:a6:7f:07:ea:af:d6:56:40:a9:
0d:c1:ef:1a:fb:cb:a2:da:78:8b:21:39:ad:37:b3:
01:4f:81:9e:59:67:a5:d1:bb:fa:9e:8d:48:38:58:
11:70:cc:75:7e:b2:dc:b9:06:f4:13:30:4f:ae:fd:
54:a7:c9:c3:68:b5:63:2e:aa:94:c7:b6:16:03:22:
71:1d:df:db:d0:aa:a7:f4:59:8e:83:70:13:26:ff:
f4:04:20:d6:69:b2:dd:02:9d:7a:e3:c2:05:52:c2:
36:73:4b:86:f6:86:92:f2:ad:ed:63:d4:f7:f6:c1:
ef:ea:39:ef:cc:21:ee:a8:15:7a:3c:c9:80:3a:3f:
ea:5f:0d:48:8a:06:62:c2:d6:8b:a9:96:ce:c4:9a:
21:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E2:F7:E0:A1:1C:95:C1:9D:7E:1F:C6:19:3C:8F:45:78:D2:79:9D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AD388046C6A011EF9D2DA3A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.114.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c5:2c:44:bb:3f:4b:a1:80:9b:ef:f9:aa:04:95:53:f6:55:
af:1d:62:36:39:52:70:e7:5e:d7:b9:70:bd:04:42:e9:f6:d3:
9e:d5:21:bf:cc:bd:6e:08:5b:e5:bc:e9:35:37:4d:3b:82:f8:
d4:c5:b1:3d:2c:a6:04:46:33:9e:37:36:01:85:59:2a:64:a0:
2b:c6:0a:04:67:cb:92:dd:1e:54:03:0f:58:49:63:7e:fc:d4:
7f:7f:0f:d3:01:4f:46:fc:42:3c:53:5d:3d:f2:c4:6b:ce:11:
53:fd:a6:b8:74:43:0f:f3:b2:2b:41:64:26:a0:0d:60:31:26:
3c:33:72:75:4f:4d:75:89:e4:af:fe:44:76:48:3e:86:ff:a3:
7a:3d:94:a9:f0:39:8f:23:32:6a:60:d7:5e:53:18:a1:56:89:
e2:27:31:80:ba:94:52:ca:a2:19:d7:18:9f:54:76:f4:c4:4e:
c7:be:13:46:6f:79:c5:bd:45:ae:43:04:f6:2a:de:35:a8:e8:
61:eb:6c:f4:3b:9c:ed:f2:1b:d0:d5:54:39:81:a9:bd:b4:c0:
fb:81:68:96:6e:cc:ba:d0:0f:8e:2b:25:b8:c8:61:4a:d9:c2:
2f:c1:f8:3d:c8:49:80:1c:5a:80:1c:e0:12:7e:5c:f8:4b:15:
e4:f9:a3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:39 2025 by rpki-client