Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AFF6BCF4C1E511EFB6A7B489762E951A.roa
File: AFF6BCF4C1E511EFB6A7B489762E951A.roa (raw, json)
Hash identifier: QgaupeQinKdtoiKqE7Z2dQIC3IgF54wMD9h3JVhgGnY=
Subject key identifier: 22:03:81:78:7C:AA:CC:A1:90:6B:5F:17:66:6C:57:2C:76:80:6F:1E
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 044E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AFF6BCF4C1E511EFB6A7B489762E951A.roa
Signing time: Tue 24 Dec 2024 10:56:11 +0000
ROA not before: Tue 24 Dec 2024 10:56:08 +0000
ROA not after: Wed 24 Dec 2025 10:56:08 +0000
asID: 43260
IP address blocks: 196.251.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1102 (0x44e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 24 10:56:08 2024 GMT
Not After : Dec 24 10:56:08 2025 GMT
Subject: CN=676a934b-277e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:74:06:c3:c7:07:9e:b2:fd:60:d8:74:4f:
6c:1a:94:7f:c8:e2:37:b9:f2:88:e3:c1:67:c8:43:
3d:5d:96:86:4f:7e:65:e9:aa:5c:0a:c1:0c:03:3b:
da:a0:63:ae:6a:63:d8:27:b7:80:93:bc:d1:6c:ff:
e9:42:aa:4a:92:4c:dd:20:7b:26:d0:46:a6:fc:d3:
25:64:a7:22:36:a5:1f:f5:ae:1b:4f:7e:7a:e0:fe:
5f:3a:e2:4c:b9:4b:63:d2:94:f7:0b:1c:82:1c:56:
48:33:fa:a2:1e:59:83:69:39:8c:58:be:87:a0:51:
c6:f3:e8:ce:c9:ca:bf:15:e2:10:fc:e2:51:5b:f7:
ef:0d:57:73:bd:55:53:91:cd:c0:eb:a5:9a:09:a4:
5e:17:a5:cb:5f:5d:98:79:4c:6d:c6:f7:69:55:29:
11:6e:93:11:f6:91:31:97:3f:73:d3:e0:f8:e0:f2:
b9:de:99:f5:7f:b0:c0:78:ce:44:bd:4c:48:73:4a:
55:d0:df:2f:e6:f9:1a:8e:b4:d0:f9:aa:f4:49:a7:
13:c6:58:0b:3e:dc:34:45:23:c5:1e:22:3e:76:dc:
4c:58:63:f5:67:2f:ad:e7:5e:2b:84:52:70:d5:84:
ff:1b:7d:85:d6:33:2e:d4:13:cc:2e:af:26:e4:0c:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:03:81:78:7C:AA:CC:A1:90:6B:5F:17:66:6C:57:2C:76:80:6F:1E
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AFF6BCF4C1E511EFB6A7B489762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.67.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ba:f1:9a:0a:9a:3f:50:3d:9a:be:f8:bc:85:cb:c7:5f:05:
40:d0:ce:23:84:ae:1b:eb:c3:85:98:3b:1f:42:df:45:db:6d:
56:21:15:a5:67:90:95:db:c3:1b:69:50:3a:77:90:d8:c9:06:
59:b3:e5:00:dd:df:d4:f6:1f:57:58:85:31:bd:29:06:70:21:
01:bf:86:70:34:9c:ed:7d:70:ed:76:29:fa:8f:b6:cd:41:8c:
d5:25:a9:28:e4:5a:8c:38:66:e5:87:b2:20:8b:88:d3:55:e5:
10:1f:f2:40:47:68:16:b1:59:90:e3:2f:85:d8:e4:6c:0b:50:
d2:d4:49:f3:a8:3a:d4:ea:c0:71:e4:b9:3c:99:7a:f5:c9:19:
49:47:f8:6f:4e:9b:b4:9c:50:47:f8:73:5f:eb:ac:8b:45:93:
7e:66:22:90:a2:e9:05:80:75:9e:74:15:f2:3f:37:c0:b5:72:
f8:a8:93:48:28:ba:3c:da:9e:76:04:d6:54:45:c2:41:46:6d:
3e:ee:cf:41:ab:00:7d:f5:54:ae:1e:75:03:2d:25:db:1c:03:
65:38:cc:ed:8c:80:05:ae:8e:21:24:65:d2:66:4d:e1:4f:9d:
ba:1b:ae:0b:a7:97:ec:6d:a4:37:f1:41:91:c4:17:d4:1b:9a:
50:b5:2e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:22 2025 by rpki-client