Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BD60EC94D17511EF85661881762E951A.roa
File: BD60EC94D17511EF85661881762E951A.roa (raw, json)
Hash identifier: O3DdPvoeR6er7udm2VI/Jctag9TqIMFrMSWvg6J2bR0=
Subject key identifier: BD:DA:E2:E0:A7:BC:93:D4:8A:AF:B5:34:59:A2:BE:E8:AC:ED:68:17
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0504
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BD60EC94D17511EF85661881762E951A.roa
Signing time: Mon 13 Jan 2025 06:15:09 +0000
ROA not before: Mon 13 Jan 2025 06:15:05 +0000
ROA not after: Tue 13 Jan 2026 06:15:05 +0000
asID: 329007
IP address blocks: 196.251.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1284 (0x504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 13 06:15:05 2025 GMT
Not After : Jan 13 06:15:05 2026 GMT
Subject: CN=6784af6d-091f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d5:f9:8e:6f:58:7c:a8:9e:a3:52:59:f1:15:
78:e6:3c:7d:79:e0:e9:4a:9c:60:9a:ed:1f:39:30:
c6:ad:58:66:01:e0:0b:c4:62:e9:16:13:3a:6c:2d:
df:78:ef:f6:13:a6:95:09:74:71:69:5c:00:31:49:
be:db:62:45:c5:00:3b:46:ba:ba:73:2d:ba:aa:90:
11:09:6b:87:2d:61:29:6d:c2:13:96:4f:6a:cf:71:
e0:16:43:df:3c:dc:23:87:b2:f4:11:88:bb:e0:f3:
9f:53:f5:85:cc:89:8a:88:2c:84:74:87:14:6f:00:
07:50:a5:3c:f6:e0:bc:1d:0e:69:5c:08:b3:22:07:
e9:f7:84:31:86:8f:95:a8:2f:92:e7:21:55:51:35:
9a:c8:d8:f1:f3:e6:59:2f:ae:b9:13:bc:d4:06:1a:
5f:31:d5:03:04:60:25:dd:c8:aa:1b:a0:fc:28:24:
85:0f:90:70:33:f2:5c:60:f5:2a:94:bb:3a:b2:14:
71:1a:33:9a:7c:f3:de:65:2d:3e:ae:1b:d7:8f:aa:
02:0f:c5:ad:ef:9f:93:6c:d9:e0:e9:7e:9f:40:67:
5d:a6:8c:69:6c:3d:c2:7c:c0:72:f7:65:d7:28:b9:
30:54:56:f1:3b:53:54:38:64:ae:ec:99:ed:85:96:
a5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DA:E2:E0:A7:BC:93:D4:8A:AF:B5:34:59:A2:BE:E8:AC:ED:68:17
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BD60EC94D17511EF85661881762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:a5:4b:7a:6a:81:e2:f6:1b:ed:ec:71:2d:01:50:71:39:79:
fe:13:41:8d:e1:c4:42:6f:2a:62:9f:78:35:50:35:2a:eb:3d:
7a:5a:ee:72:fd:ac:ea:6b:f0:9b:cf:b8:42:a2:ef:f2:50:8d:
2e:a6:10:1f:4a:4f:d8:7f:67:27:49:85:1e:52:97:5a:be:e4:
f4:6e:6e:34:59:52:26:7d:3e:b1:f5:36:a3:c3:dc:f7:55:31:
f4:b0:ef:df:dc:47:c0:46:2f:c7:bf:c4:97:fe:24:4f:50:ff:
11:56:1f:05:82:bd:a1:99:7c:f9:8e:85:3f:f9:a5:ab:56:f6:
92:1a:4b:58:df:1a:19:3a:63:63:be:fa:97:81:5c:ef:4e:f5:
af:23:9e:3a:3a:23:b2:7f:b8:1e:b9:c3:22:57:e1:19:e1:aa:
63:f0:c9:15:2f:5e:d1:6b:5d:61:be:63:96:4d:bc:ff:b9:d3:
7d:ff:59:93:cb:61:29:e3:ec:0b:3e:a4:f1:47:f2:b2:05:63:
52:9c:5a:61:47:ce:de:61:6f:9d:6b:f8:e6:26:b1:30:79:f3:
e6:f3:3a:2b:d1:2a:9d:42:ec:f0:6a:ac:2f:61:8f:23:fa:63:
ac:fb:76:9d:47:95:bc:50:b8:ba:01:0d:fa:51:2e:b0:25:3b:
51:ca:14:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:23 2025 by rpki-client