Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EC8879C0E87B11EF9CE9F9AE762E951A.roa
File: EC8879C0E87B11EF9CE9F9AE762E951A.roa (raw, json)
Hash identifier: LdH0hcaPST5NSDf34vJOx9WhjP5yHhlzBLvHH+w2JRA=
Subject key identifier: 7E:59:F7:4B:98:5E:E1:6F:E6:2F:FA:86:49:3A:BD:78:32:B0:04:B5
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0605
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EC8879C0E87B11EF9CE9F9AE762E951A.roa
Signing time: Tue 11 Feb 2025 13:27:22 +0000
ROA not before: Tue 11 Feb 2025 13:27:18 +0000
ROA not after: Wed 11 Feb 2026 13:27:18 +0000
asID: 401120
IP address blocks: 196.251.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1541 (0x605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 11 13:27:18 2025 GMT
Not After : Feb 11 13:27:18 2026 GMT
Subject: CN=67ab503a-fcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:6c:c8:d4:3f:71:3b:bc:d1:3e:5c:23:b2:
eb:1d:4a:c5:81:0b:1c:19:2f:3f:67:60:ae:96:a2:
3d:9e:10:19:f4:ae:08:4b:29:7d:16:ca:9d:63:59:
d0:87:9a:fc:12:ae:93:05:90:f7:7d:50:4e:71:15:
c3:81:aa:1d:56:bf:00:f1:55:32:07:73:7f:09:e7:
fc:e0:64:7b:08:8d:4f:1f:c4:10:57:34:91:4b:e1:
a5:dd:ae:b8:ea:f6:a6:63:1c:90:73:de:c0:53:ea:
66:8e:ea:aa:a0:a6:be:59:34:39:b2:39:ad:1c:99:
e0:03:76:ee:65:00:7a:2a:0d:c3:6e:78:d4:fb:a8:
42:87:4e:9f:2b:de:b8:60:3d:91:12:11:3b:62:63:
1d:13:c6:3a:ec:68:16:e1:8a:3c:32:57:d4:fe:f5:
a8:45:58:d3:c4:de:a8:7d:5c:d9:4a:d1:4f:61:0b:
d7:06:be:38:5e:60:a8:96:c3:75:70:89:13:d8:a5:
9d:a2:cc:9e:59:b7:fb:81:42:da:3f:3d:63:63:d3:
8f:ae:16:7c:bc:0e:d7:2e:d4:63:86:61:bd:e8:0e:
5e:af:76:46:d0:a4:9a:49:ce:a8:ca:17:44:8e:47:
02:fa:1b:dc:de:e0:7f:da:e9:f9:9d:9c:a4:83:32:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:59:F7:4B:98:5E:E1:6F:E6:2F:FA:86:49:3A:BD:78:32:B0:04:B5
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EC8879C0E87B11EF9CE9F9AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.87.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c0:5e:d9:9f:71:c5:24:67:3c:01:d2:26:b9:bb:17:f0:e8:
12:fa:7c:cc:10:65:d6:16:22:ff:9d:47:45:4f:5f:8a:eb:0f:
c8:d1:35:42:0b:42:de:63:3a:16:5d:55:4b:6a:33:b1:9b:b1:
ca:4f:ad:ac:db:6c:6c:f5:f6:2c:bf:31:a7:db:45:84:60:56:
6f:d2:c3:d5:31:65:d5:10:e9:bb:1a:cb:28:d7:ad:e3:92:1f:
f3:57:ef:a5:80:36:b3:79:bd:66:e2:84:69:2e:dc:e9:19:50:
96:f2:01:58:e9:a7:50:44:36:15:84:3c:9e:34:be:80:1e:6e:
88:87:0e:73:bd:78:2f:fb:dc:ae:6a:58:cf:2a:20:bb:74:ef:
96:b6:7a:58:17:4e:0d:c5:80:43:00:1f:7e:e7:0a:c5:98:92:
d6:57:6f:d9:8f:98:66:a0:0f:80:c5:78:7c:da:30:36:24:43:
ab:78:cd:c7:16:8a:a8:ed:f8:0a:9d:1c:a9:79:80:95:e9:d0:
be:f8:d4:21:4d:b1:d1:68:d0:8c:ce:20:4c:d0:fd:37:13:d5:
70:19:55:04:3d:64:a4:a3:01:43:56:eb:d4:12:2d:5e:fe:5d:
06:6f:52:ce:a0:71:0d:d8:eb:ab:88:ca:f8:9c:b5:8b:bc:5b:
18:59:c6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:35 2025 by rpki-client