Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CF6D9850C69F11EFB38E579F762E951A.roa
File: CF6D9850C69F11EFB38E579F762E951A.roa (raw, json)
Hash identifier: SSQRBiBEXIn+FZWR/OwkFIRVHIs4dc1dckgpKvnQa8U=
Subject key identifier: D7:CA:D4:57:49:1F:04:CD:EF:07:E4:95:F0:D4:9A:58:D1:8F:1E:C3
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0497
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CF6D9850C69F11EFB38E579F762E951A.roa
Signing time: Mon 30 Dec 2024 11:18:35 +0000
ROA not before: Mon 30 Dec 2024 11:18:32 +0000
ROA not after: Wed 31 Dec 2025 11:18:32 +0000
asID: 329007
IP address blocks: 196.251.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1175 (0x497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:18:32 2024 GMT
Not After : Dec 31 11:18:32 2025 GMT
Subject: CN=6772818b-ef66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:f5:2c:3e:f8:83:df:d5:c6:fd:cf:11:e5:
ac:1e:cc:fe:96:48:b0:7e:d1:96:6d:57:7c:db:d4:
f1:2a:f1:b2:60:de:5e:f9:21:57:df:05:e2:b6:1c:
41:5c:d3:55:5d:13:db:80:9a:ea:9d:5b:ec:e9:a7:
a1:32:3b:e1:05:6d:ba:bf:10:1b:4f:a8:48:39:c4:
b6:0d:09:d9:8e:d5:37:5c:c0:d9:48:89:06:95:f5:
de:b2:b0:db:86:c5:01:61:01:1d:26:1c:72:f9:c8:
c6:0e:e2:31:0c:2d:44:ba:69:ec:06:4f:27:9e:0b:
53:8f:61:28:92:10:26:df:9c:68:c5:5a:32:98:4c:
de:d7:d0:7a:b6:a5:f5:05:a9:8e:8a:ee:3f:b6:da:
f7:e3:2c:64:38:3a:d0:59:08:5c:a1:1b:5d:ab:54:
ca:10:d2:80:18:2c:a2:fd:3e:e6:e1:23:38:aa:a2:
07:c1:20:1c:4a:81:ab:f3:01:53:69:ce:98:a2:d9:
a7:9d:e0:84:8b:b7:1b:bc:aa:0d:ce:b3:94:4e:e5:
75:22:a6:29:3c:38:75:ba:e6:70:f4:bf:89:72:ce:
f3:7d:11:cb:f6:67:a5:0d:5b:19:5e:88:20:82:76:
61:57:d9:3b:17:3c:ed:52:65:eb:95:46:a7:b7:b7:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CA:D4:57:49:1F:04:CD:EF:07:E4:95:F0:D4:9A:58:D1:8F:1E:C3
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CF6D9850C69F11EFB38E579F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.87.0/24
Signature Algorithm: sha256WithRSAEncryption
43:8b:82:bb:e6:30:89:47:08:d5:70:75:48:4b:d8:4e:81:80:
ee:b6:04:d7:00:2f:14:5a:fb:3e:29:cc:d4:10:83:3b:00:40:
92:ef:c6:1f:54:50:df:4f:50:72:12:d9:b5:6e:fd:ab:14:54:
fb:d1:ee:db:c4:49:76:05:68:fd:50:0f:f8:45:9d:ad:57:30:
ab:4c:f5:b7:23:b2:6c:08:78:18:b4:ec:48:30:8a:1f:11:a1:
28:b8:c6:33:2d:23:b4:ac:cf:00:af:21:1f:43:7d:2e:02:44:
68:a0:24:3e:db:e9:1a:62:19:26:5b:fa:e9:88:62:37:66:91:
33:8b:e7:77:10:c8:65:a9:ec:af:f1:7b:20:c3:08:b1:02:01:
61:22:5e:6a:51:b4:24:b1:6f:6b:33:92:75:53:45:d2:99:e2:
18:f5:82:12:82:38:35:57:08:9a:44:04:5b:75:d0:a8:35:14:
a0:17:ac:42:0b:d4:ad:8e:2a:ce:a2:67:15:9d:65:dd:73:27:
e3:49:8e:bc:b4:50:38:ba:af:63:9e:fd:f7:bc:87:68:e2:37:
f6:36:14:9d:bf:8f:e1:1a:b9:bc:72:d4:99:ca:e1:11:c3:63:
27:92:b9:c5:fa:3c:9b:55:dc:67:0e:f0:49:33:45:f2:ba:8b:
ae:07:6b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:01:33 2025 by rpki-client