Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B398A250C69F11EF8969499F762E951A.roa
File: B398A250C69F11EF8969499F762E951A.roa (raw, json)
Hash identifier: fJXS3SSZ/VfQWMiD+b3V8EmKjaqUchwNjKW6zZP5MJ8=
Subject key identifier: E6:93:50:92:9A:E4:72:33:60:EF:E2:AA:8B:8D:C6:C0:A6:B7:02:3A
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0493
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B398A250C69F11EF8969499F762E951A.roa
Signing time: Mon 30 Dec 2024 11:17:49 +0000
ROA not before: Mon 30 Dec 2024 11:17:45 +0000
ROA not after: Wed 24 Dec 2025 11:17:45 +0000
asID: 329007
IP address blocks: 196.251.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1171 (0x493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:17:45 2024 GMT
Not After : Dec 24 11:17:45 2025 GMT
Subject: CN=6772815d-5ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:23:65:53:ef:d7:e3:f9:4e:52:c4:be:0f:
d9:6f:e7:69:f8:2f:4b:9b:ad:ab:dc:81:1f:ab:22:
57:9f:ec:fc:04:1b:9a:63:59:f4:2b:2d:94:0b:8d:
30:b5:e3:3c:24:f6:9e:05:f3:0e:d8:54:aa:1d:a3:
0b:b7:e2:6a:48:91:44:3c:5e:a2:9b:b7:06:54:03:
62:7d:fc:a1:5b:3a:a4:96:31:ba:04:bc:9e:c4:86:
8e:90:c7:7f:bb:83:15:6a:6e:91:f9:1f:34:40:98:
58:6b:2b:4e:a8:6a:a4:f6:27:e3:b6:51:e3:af:19:
79:dc:05:78:60:d6:a4:88:de:4c:cd:bc:c3:31:5e:
a1:20:d4:30:bf:f9:6d:a4:bc:03:82:bf:bc:58:28:
15:fc:80:76:09:ac:af:b5:23:62:29:23:31:d8:b4:
6b:87:a9:1a:f4:56:0b:65:66:66:58:4d:db:75:be:
17:7e:c8:52:a9:36:ff:92:8e:f5:b8:28:ba:28:c1:
0a:48:45:fd:56:b3:95:1f:1c:c7:db:ef:b5:a5:20:
2b:79:8e:6e:53:c9:ca:31:8e:f7:9d:c8:d8:24:ae:
e8:81:a4:5c:19:1c:4f:11:77:76:4e:84:25:9f:ef:
28:ab:81:3b:a1:5a:f3:51:8d:76:6d:81:c3:51:52:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:93:50:92:9A:E4:72:33:60:EF:E2:AA:8B:8D:C6:C0:A6:B7:02:3A
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B398A250C69F11EF8969499F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.107.0/24
Signature Algorithm: sha256WithRSAEncryption
97:74:e4:a1:34:9c:ba:f1:e1:6e:f5:b0:d4:0c:2c:50:62:82:
2a:38:8f:93:21:16:60:99:15:7a:4b:22:47:0b:ec:1f:8a:d9:
7c:81:8b:06:d8:1b:06:bf:74:91:c4:97:f0:fd:86:3a:fe:ce:
7e:0c:f9:de:2b:57:a7:90:5e:6d:be:c5:e3:d9:e7:7e:68:b3:
28:db:c5:e9:46:16:b2:59:1d:a9:b4:51:e9:15:7d:be:42:af:
99:9f:a2:3e:23:4a:d8:eb:3a:6a:34:3e:e3:62:bf:39:4b:73:
d7:11:08:6b:14:a8:1f:06:fd:52:38:e7:07:0d:5d:a9:3b:1d:
ba:0e:00:d0:ad:e7:43:ff:ba:53:3b:4e:de:8b:84:86:df:cb:
2a:50:31:d6:54:e1:de:d1:9a:48:cb:03:87:3e:69:ff:f3:5b:
f2:ba:3c:86:71:7f:da:bb:75:2f:5d:f4:3f:8c:2c:0b:86:e0:
93:1d:da:b7:b7:80:f9:d2:93:87:75:40:bb:3a:b2:a4:8c:8d:
69:c5:6d:ff:2e:e8:23:44:89:e5:06:23:c0:c6:67:4c:df:78:
d5:e7:a9:67:61:fa:ea:68:2e:e1:81:42:c5:7b:3b:85:d5:cd:
b9:f7:fe:4a:d3:f8:ab:c6:06:6c:15:74:5a:4d:cd:f7:c2:23:
be:58:0d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:53 2025 by rpki-client