Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DF9B5458E87B11EF80372BAD762E951A.roa
File: DF9B5458E87B11EF80372BAD762E951A.roa (raw, json)
Hash identifier: 58CZht8ykr1UwxN/ibKQIw+/l0Fxr6ge79R+u6osxis=
Subject key identifier: 67:F9:4B:B6:DF:21:33:40:92:CE:A1:94:3B:EA:3E:1C:A0:6C:AB:36
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0601
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DF9B5458E87B11EF80372BAD762E951A.roa
Signing time: Tue 11 Feb 2025 13:27:00 +0000
ROA not before: Tue 11 Feb 2025 13:26:56 +0000
ROA not after: Wed 11 Feb 2026 13:26:56 +0000
asID: 401120
IP address blocks: 196.251.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1537 (0x601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 11 13:26:56 2025 GMT
Not After : Feb 11 13:26:56 2026 GMT
Subject: CN=67ab5024-cbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:35:ea:d8:bd:dc:ec:d5:fc:b9:77:8e:a4:
6c:df:33:e1:0c:b7:36:08:29:52:65:4f:17:71:fa:
2b:69:a3:ee:6b:bc:77:ba:fa:ac:ae:23:3b:99:f4:
bb:39:20:1d:3d:d4:e9:d3:62:a7:96:c3:96:9e:22:
e8:73:f6:08:92:c9:68:16:5c:d3:e6:5a:66:6e:75:
ef:0a:a0:30:c0:5a:0c:1c:27:a4:22:6d:fb:af:f6:
e4:e2:dc:15:a3:56:7b:ae:4b:98:fe:5b:c6:0b:b9:
94:0b:18:36:5a:af:1e:d9:bf:98:38:bc:2d:d9:61:
a4:bc:83:13:14:a4:66:98:9f:71:9b:16:63:2a:28:
8f:f3:a1:a2:46:30:45:8e:57:21:f6:6f:60:0c:15:
76:a9:cf:6d:bb:86:c5:81:00:f6:54:cc:4a:a8:03:
7b:f1:47:8a:60:48:45:c6:5a:47:74:61:b8:d0:9d:
c1:9c:c3:7f:49:de:d3:0d:62:ed:43:6e:ab:2b:7f:
6b:6b:8b:a7:c1:d3:82:eb:42:9b:6c:51:9b:d5:36:
89:a4:17:34:00:c0:27:d9:be:88:8b:f5:65:16:94:
e0:f8:10:1d:29:e3:5b:a1:ef:78:f6:f1:f4:68:65:
69:11:b8:82:10:50:fb:26:b8:2e:f1:5d:01:5d:1e:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F9:4B:B6:DF:21:33:40:92:CE:A1:94:3B:EA:3E:1C:A0:6C:AB:36
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DF9B5458E87B11EF80372BAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.86.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:50:bc:9b:48:4c:15:34:32:46:4d:92:c9:80:eb:93:b9:58:
5f:56:08:09:8c:44:79:8e:08:ba:23:c2:4a:57:55:60:45:7f:
4e:6b:36:c3:5f:c3:6b:ff:ea:aa:b5:84:5d:e4:fe:34:28:0f:
98:78:b7:4f:e6:d7:83:a1:bb:fd:72:ef:f7:d6:17:0a:2c:9a:
02:68:5b:28:a0:5a:d0:22:e3:af:82:33:21:20:e2:8d:53:ff:
28:16:c5:00:f1:d3:c2:a9:a5:54:2c:67:37:69:0f:f3:5f:e5:
d6:8d:b3:be:45:65:0c:f5:7f:15:0b:31:86:24:ff:b3:eb:d9:
0d:5d:55:8f:0e:6b:3b:42:a4:fc:94:8e:d0:ca:27:7f:45:0e:
22:53:e3:c2:e7:c6:be:b5:bb:d1:20:8b:cf:79:82:b4:48:1b:
c8:cf:fd:06:49:82:74:70:68:d8:cd:6e:11:3c:53:df:f9:76:
87:12:13:b6:ad:99:01:de:3c:43:96:f3:d1:78:38:89:01:cc:
1b:7e:7a:55:93:b0:11:8d:07:09:46:bb:dd:60:8e:96:0e:d2:
cf:4f:d7:d3:3f:fe:0f:8d:44:7f:9a:6e:27:16:47:8a:fa:5e:
82:0f:ed:21:db:b2:8a:ac:19:6c:b2:7b:26:60:b3:21:aa:a3:
98:d6:39:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:06:33 2025 by rpki-client