Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CD31FE2C054811F0A6FF0D95762E951A.roa
File: CD31FE2C054811F0A6FF0D95762E951A.roa (raw, json)
Hash identifier: nqbWzx8bupW55EahHe27R7Y+aferMu1DDyH/fK1s8pY=
Subject key identifier: 7D:62:45:80:18:7C:F3:AC:06:C9:DB:A4:30:F4:8F:51:6A:53:B8:33
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0778
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CD31FE2C054811F0A6FF0D95762E951A.roa
Signing time: Thu 20 Mar 2025 05:04:29 +0000
ROA not before: Thu 20 Mar 2025 05:04:25 +0000
ROA not after: Tue 13 Jan 2026 05:04:25 +0000
asID: 401115
IP address blocks: 196.251.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1912 (0x778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 20 05:04:25 2025 GMT
Not After : Jan 13 05:04:25 2026 GMT
Subject: CN=67dba1dd-2592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:c2:53:ac:3f:53:3e:53:a5:6c:ac:f3:b9:
57:65:72:f3:a5:15:72:5f:88:3b:2f:26:86:ec:f2:
92:fc:19:73:ab:01:f4:68:f0:8c:b3:56:b1:f3:88:
82:c9:df:b7:d7:a9:15:b7:71:27:b3:f8:04:2e:34:
a1:15:70:04:e3:20:8a:7f:81:c6:a7:d0:34:b7:49:
af:10:41:c8:90:e2:09:52:58:ea:f3:d0:c3:60:02:
51:b2:0b:91:2d:c1:3e:39:f1:56:bf:e0:6f:fc:02:
07:f5:fa:8d:fd:d7:37:e2:91:bb:9f:67:ac:8b:cb:
74:89:8a:dd:9c:d1:b9:fa:07:f0:d8:fe:d3:f9:fe:
ae:32:63:6b:89:7b:ff:b3:27:96:57:cd:50:73:ba:
c3:b6:6e:3d:e2:66:ba:ae:ca:66:da:f4:46:63:46:
96:a3:66:f0:91:d8:33:b2:e1:47:e4:a8:00:af:cd:
e2:4d:26:3a:64:fd:c6:3e:7b:f7:87:3c:ec:f4:df:
6a:7f:d9:5a:4c:04:f4:d0:e6:67:9c:56:12:3c:59:
7b:f9:ec:e0:da:05:68:cf:75:0f:9d:88:4d:b1:79:
1d:81:5b:de:39:11:92:c0:5c:be:3a:dc:98:da:21:
84:07:ee:d0:2b:60:35:69:5e:c3:1f:a5:66:8a:54:
8e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:62:45:80:18:7C:F3:AC:06:C9:DB:A4:30:F4:8F:51:6A:53:B8:33
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CD31FE2C054811F0A6FF0D95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.72.0/24
Signature Algorithm: sha256WithRSAEncryption
02:bd:87:3b:ad:40:86:dd:00:c1:28:f5:fc:5f:a3:5a:be:48:
2b:3b:77:30:42:a2:c1:b2:3e:8c:2f:c8:d2:6d:d0:18:35:03:
db:e7:cc:76:ba:b2:f6:97:b6:fd:11:6c:89:35:46:9c:ee:d1:
aa:1d:05:4d:ce:cc:df:12:31:4d:50:f5:1a:a7:53:34:d7:77:
fc:c5:19:e0:e5:4f:6e:5d:29:77:35:a8:38:bf:6c:9f:36:af:
e4:1b:84:7e:f0:38:f3:4c:82:2e:7e:13:0a:54:ee:1a:61:29:
9b:2d:6c:ea:07:99:1c:f2:44:38:48:bd:74:6b:9e:25:8a:85:
47:74:d2:2f:25:ca:bf:3e:71:88:99:e7:8f:b6:04:ae:11:3a:
38:93:d1:91:fc:bf:51:85:e3:8a:e8:9d:c6:b7:e8:7d:83:1e:
cb:a5:ac:0f:70:be:9b:7e:03:ac:25:9a:48:c7:91:c1:c2:01:
01:46:05:0a:33:ce:5d:8c:a0:f8:95:5d:15:f6:9c:6b:b4:cc:
8e:fd:d8:19:29:e3:3d:ad:f4:36:f6:4d:2f:65:5b:cf:83:5e:
ab:d4:7b:90:06:64:49:e6:0a:99:be:a7:ad:1f:90:69:ad:cc:
d5:0f:d4:65:33:9c:3d:e3:d4:3c:58:4e:0f:82:19:7d:a7:a5:
fd:d3:b9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:02:16 2025 by rpki-client