Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B85CFD78EA0711EFA49F90BE762E951A.roa
File: B85CFD78EA0711EFA49F90BE762E951A.roa (raw, json)
Hash identifier: Yq7ZI8JyMLFDVzqfOLdYMIrfD6b0pOohzkAXgLcAlvw=
Subject key identifier: 34:D9:75:29:F9:F3:85:80:7E:4A:99:3F:E6:86:52:83:8A:E1:1B:8B
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0646
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B85CFD78EA0711EFA49F90BE762E951A.roa
Signing time: Thu 13 Feb 2025 12:40:35 +0000
ROA not before: Thu 13 Feb 2025 12:40:31 +0000
ROA not after: Tue 01 Dec 2026 12:40:31 +0000
asID: 197450
IP address blocks: 196.251.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1606 (0x646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 13 12:40:31 2025 GMT
Not After : Dec 1 12:40:31 2026 GMT
Subject: CN=67ade843-0421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:06:e5:13:fd:4a:54:b5:d0:f7:1b:7b:9e:7f:
f0:39:04:51:8f:f6:67:d8:a8:e1:a1:f5:12:24:a9:
3c:f5:a6:68:34:38:f7:08:f7:4e:b4:b6:8d:a9:bd:
b9:09:79:47:c2:c9:25:3c:95:bb:18:0e:3f:de:48:
38:99:02:a9:65:56:95:ac:99:fd:e5:49:87:4b:a3:
2b:7f:c9:52:1d:04:bb:d9:00:60:89:e4:9e:de:22:
f3:43:47:d2:bd:56:fb:1f:0b:15:e4:68:50:44:5a:
69:79:52:74:b4:10:c7:14:43:49:4c:1c:c1:94:77:
c7:e6:a3:c6:6e:4d:ad:77:86:93:1d:ca:1b:ea:07:
ec:ad:ca:33:9d:fe:fc:75:b8:2c:23:12:91:93:41:
8e:3f:e7:7d:9c:e4:08:ff:83:71:45:09:75:84:54:
96:0e:f8:73:35:0c:f2:39:a2:4a:ef:64:da:b9:f0:
4c:c4:90:11:42:f8:1a:83:d4:6a:9a:6d:27:a3:27:
23:02:05:2a:bc:cb:33:96:63:cd:e5:be:e8:25:50:
33:33:0a:19:a9:f8:ec:e6:ef:3b:23:66:18:c4:67:
10:3f:6b:30:88:4a:e7:76:e1:37:5d:a6:de:b8:9a:
e8:ba:95:52:e9:50:9b:ea:96:b1:03:c0:96:5c:18:
18:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D9:75:29:F9:F3:85:80:7E:4A:99:3F:E6:86:52:83:8A:E1:1B:8B
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B85CFD78EA0711EFA49F90BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.97.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:5d:fa:c8:f1:6a:78:52:bb:2b:fd:84:8c:f5:ca:10:e8:e6:
6d:3a:10:af:fd:26:0c:4d:ac:32:d7:c7:1e:db:b2:c3:75:40:
01:db:3d:eb:1c:6f:15:59:ad:36:68:da:88:4e:86:4a:0f:9e:
db:a1:df:1e:69:70:41:08:29:85:f5:84:cf:a7:fa:06:6f:1c:
fc:5b:aa:35:7e:48:39:ef:b0:37:11:e4:d4:09:34:b1:58:4e:
f8:06:bf:9e:d2:8a:18:24:1a:b0:85:13:18:de:1c:3f:d0:4d:
d1:b2:8e:79:f5:ae:9e:16:0d:34:3a:e1:7a:77:28:f8:2b:32:
75:a6:47:ef:fe:33:f1:20:93:69:20:ef:11:ae:11:af:39:c0:
e2:0e:a4:22:57:d4:af:9a:28:52:dd:25:ce:b7:7a:bb:1b:89:
c8:46:ff:03:ce:53:35:49:98:a9:7f:89:23:f4:d4:5f:0d:11:
f8:20:06:be:4d:19:06:9a:ef:2d:37:71:1c:be:44:6a:be:4e:
00:5f:b2:c9:5d:12:f9:69:0e:73:99:47:71:16:7c:73:01:66:
7e:09:20:98:93:f0:93:50:51:8c:2d:97:19:20:ce:d8:b2:c8:
3f:0f:0b:18:a9:7d:32:4c:ad:d4:1b:87:c8:a9:39:dd:76:e1:
c9:48:1c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:27:28 2025 by rpki-client