Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E0F57EDAC69F11EFBA90649F762E951A.roa
File: E0F57EDAC69F11EFBA90649F762E951A.roa (raw, json)
Hash identifier: wwvf6PNhJSlq5ZfenS8ncdW6qh7f1eJO9ePD8q/cuxI=
Subject key identifier: C8:18:53:7D:4E:9B:61:B5:2E:95:27:DB:22:6E:AF:70:79:6D:6D:DC
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0499
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E0F57EDAC69F11EFBA90649F762E951A.roa
Signing time: Mon 30 Dec 2024 11:19:05 +0000
ROA not before: Mon 30 Dec 2024 11:19:01 +0000
ROA not after: Wed 24 Dec 2025 11:19:01 +0000
asID: 329007
IP address blocks: 196.251.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1177 (0x499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:19:01 2024 GMT
Not After : Dec 24 11:19:01 2025 GMT
Subject: CN=677281a9-4570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a4:12:de:20:b5:94:d7:22:55:9c:f1:13:2b:
f6:63:b6:88:c6:a4:c3:95:3b:61:aa:f9:67:61:9e:
62:79:15:78:1a:8a:82:64:7c:ec:85:83:e3:b4:1d:
a1:8c:a9:61:3c:71:9b:5a:ff:5e:83:a4:b8:3c:d2:
7a:05:d7:ac:a0:2b:e4:7d:4c:77:ce:42:75:03:1e:
83:6b:79:5f:1f:b5:84:2b:87:43:d9:3e:e8:7d:e4:
5f:e5:54:b2:7a:c6:e0:75:e7:9a:bb:9f:83:5a:d2:
10:3b:13:3b:4a:97:66:72:34:5c:23:80:47:a8:a6:
9a:fc:d9:e0:36:40:6c:bb:fa:4c:b1:c0:fd:26:5d:
60:7e:98:b5:2a:e0:f7:ea:2d:1c:33:3e:93:eb:9e:
eb:70:38:5d:81:51:39:64:b0:19:7a:87:a6:3e:c3:
42:20:2e:06:be:f6:a7:be:fa:c8:68:cc:28:8c:22:
39:49:21:8d:e7:57:a5:92:92:58:58:0d:1c:57:53:
07:2e:8d:cb:e5:1f:02:e0:68:7f:ff:59:07:60:e8:
5d:5b:c2:b5:75:2e:bc:da:9d:1c:d3:a5:f9:13:b6:
51:a7:a6:99:48:27:6e:de:60:a3:cd:6a:2c:4f:3f:
85:79:eb:0c:2c:40:ab:44:5b:ee:01:32:d5:3b:b8:
28:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:18:53:7D:4E:9B:61:B5:2E:95:27:DB:22:6E:AF:70:79:6D:6D:DC
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E0F57EDAC69F11EFBA90649F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:4d:2e:bd:23:88:61:56:e1:3c:f7:5b:b8:b3:01:ad:43:8a:
77:61:86:bd:37:44:fc:dd:54:f1:b0:a5:e9:e2:05:12:2a:43:
eb:65:65:ac:84:39:9e:40:37:c4:56:a2:e0:2e:2e:e4:02:aa:
e6:82:5d:9d:b6:13:05:53:2b:f1:59:78:ae:9b:c6:05:c3:24:
11:4e:04:79:1f:e4:96:21:63:e3:09:0c:5b:d7:b5:20:99:54:
85:46:14:4d:6a:aa:ed:ab:f0:fd:b3:31:15:d3:ab:6a:df:ae:
7d:cd:7e:ff:77:f8:73:83:b8:d5:87:2b:4f:0b:b3:be:8a:41:
80:97:3f:03:e5:36:f4:63:68:03:ab:d7:ac:c3:77:47:a6:4a:
04:fe:82:c9:2b:34:ee:cd:85:89:28:92:d2:b6:68:2b:c0:03:
f2:4f:97:a0:0d:29:56:3c:66:95:f0:c4:a2:80:be:bd:b1:c5:
8f:8b:d4:0d:82:28:f6:19:d4:ca:77:2e:cc:45:c4:2c:a6:4d:
62:21:19:1f:e0:16:87:e2:27:30:f5:54:b5:7b:31:38:8d:67:
b1:89:23:02:a4:3d:dc:22:a0:09:16:ce:bd:f0:33:a8:67:fb:
71:95:77:48:fc:31:c0:ae:f3:c5:aa:c7:41:4d:02:4e:4f:96:
3d:da:e4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:38 2025 by rpki-client