Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C9463232D17311EF9EAC2C73762E951A.roa
File: C9463232D17311EF9EAC2C73762E951A.roa (raw, json)
Hash identifier: GjBEGd/S2sobEFZA/l3i/okb8duHJE1zqT7QoTAxt14=
Subject key identifier: F9:D7:D8:67:68:34:BC:C0:89:FC:31:BC:38:BC:30:F5:F8:C6:A3:EF
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04F9
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C9463232D17311EF9EAC2C73762E951A.roa
Signing time: Mon 13 Jan 2025 06:01:10 +0000
ROA not before: Mon 13 Jan 2025 06:01:06 +0000
ROA not after: Tue 13 Jan 2026 06:01:06 +0000
asID: 329007
IP address blocks: 196.251.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1273 (0x4f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 13 06:01:06 2025 GMT
Not After : Jan 13 06:01:06 2026 GMT
Subject: CN=6784ac26-8290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:79:52:42:e1:c2:d0:5d:71:40:a9:8f:01:
bd:bb:bb:56:ef:74:bb:c8:38:c4:3f:f6:1a:af:2c:
49:02:90:b5:a5:47:75:da:11:85:d9:2c:b8:7e:a7:
a3:0a:c2:82:9e:8e:29:1c:3a:5f:e4:1a:0b:4f:42:
1f:6d:d2:56:9d:2b:c4:a6:3d:50:09:76:9e:d2:b8:
f5:e5:15:03:dc:0a:7e:11:5b:30:fe:97:a7:8c:e1:
40:e0:10:de:58:9c:c8:81:01:ad:ab:4d:cb:e2:cc:
a6:1e:15:37:79:66:4f:de:97:15:46:3b:32:34:90:
da:e8:36:f9:83:52:24:82:b2:3f:c8:92:62:17:0b:
9f:f3:36:1c:6f:6b:f0:83:21:0f:1c:7f:57:0a:46:
7b:dc:6d:00:cd:81:50:18:96:a8:e3:77:91:c6:c3:
f7:2e:79:e9:93:06:98:2c:2a:a7:07:9c:c1:c4:41:
b7:e6:31:c0:37:72:be:ec:09:8e:01:3a:a2:99:3d:
4e:64:da:1f:bf:bc:a0:dd:55:1f:63:47:bf:a8:4d:
d3:97:8b:62:37:e1:13:7c:ee:07:42:3d:f5:9e:a5:
91:68:49:58:fa:ee:e3:dc:54:8e:1c:67:6b:42:2b:
9a:e1:4a:23:dd:f4:be:85:0f:ab:22:0c:fc:b1:8a:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D7:D8:67:68:34:BC:C0:89:FC:31:BC:38:BC:30:F5:F8:C6:A3:EF
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C9463232D17311EF9EAC2C73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.120.0/24
Signature Algorithm: sha256WithRSAEncryption
34:32:d9:39:73:19:a9:48:7d:ec:b3:3e:45:df:09:75:11:98:
10:4c:08:3c:85:c6:87:09:dd:87:0f:cb:24:94:2a:b5:b9:f8:
7f:62:45:01:8f:6a:36:c6:91:fb:44:a0:de:e8:9f:4d:61:bc:
a3:7b:94:a7:3b:0d:87:98:98:3d:78:28:92:48:ae:f9:36:70:
89:a2:19:ca:f8:21:98:ae:76:97:96:70:84:0f:3e:84:50:83:
73:18:74:08:98:2b:9a:b3:34:5a:9b:af:e3:64:a1:11:3e:da:
69:bb:06:f8:dc:c0:19:a0:d0:1d:33:62:d9:49:2c:94:37:d5:
4c:d9:37:27:b1:1c:e7:9b:85:06:ab:3d:e3:07:b1:95:77:10:
2d:ce:fc:52:eb:f4:f2:96:53:18:be:80:07:34:f2:f3:36:04:
41:d4:1c:5f:25:ad:56:62:2b:78:b5:04:bd:19:b9:ef:9c:6b:
4d:4f:f9:54:aa:07:22:29:ea:e7:62:6c:47:be:ab:a7:cf:53:
19:88:b5:c1:79:8b:18:0e:d0:a8:a0:bb:88:93:a7:e3:41:d6:
0f:e1:e3:ba:f6:61:16:47:eb:d4:9d:37:a9:e0:d4:e8:fd:24:
f2:6a:00:67:1f:b9:a9:7e:09:af:90:ef:8e:15:6b:93:7a:6e:
0d:c7:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:43:24 2025 by rpki-client