Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F28DA8E6D17311EF8A0F6873762E951A.roa
File: F28DA8E6D17311EF8A0F6873762E951A.roa (raw, json)
Hash identifier: 0oJNq1HBvaEhg7V5DkDQpeFd2IpiP5f7ETi9GklnfU8=
Subject key identifier: A7:FA:F4:59:C5:E5:02:E8:C5:E4:DE:E8:EA:66:79:C0:10:B6:FE:9B
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04FB
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F28DA8E6D17311EF8A0F6873762E951A.roa
Signing time: Mon 13 Jan 2025 06:02:19 +0000
ROA not before: Mon 13 Jan 2025 06:02:15 +0000
ROA not after: Tue 13 Jan 2026 06:02:15 +0000
asID: 329007
IP address blocks: 196.251.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1275 (0x4fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 13 06:02:15 2025 GMT
Not After : Jan 13 06:02:15 2026 GMT
Subject: CN=6784ac6b-8bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:21:14:2b:26:fe:e3:13:90:4a:e8:f5:f1:
bf:d7:e2:f7:99:bc:91:c2:25:e5:12:7f:25:94:9e:
7f:49:4b:3c:b6:43:7b:73:13:79:a9:70:e7:a8:9a:
53:f3:70:f6:53:35:6c:07:ac:a1:5c:a0:a2:2b:b4:
49:08:46:35:86:2e:66:34:09:70:12:a9:5f:21:85:
91:e9:2b:e6:8c:31:39:92:54:94:4b:4c:81:bf:9f:
3d:54:e6:f6:2d:63:77:69:2c:14:84:b1:d8:d2:6a:
32:76:e5:8c:b6:6e:b5:49:cb:c4:44:32:4c:c2:e7:
15:5b:57:b1:44:71:ed:3e:56:ae:0e:76:ad:62:75:
af:16:65:ba:a3:f7:a7:fa:f5:f0:4e:09:f6:43:b3:
f9:40:fb:c0:d1:69:c9:22:4e:aa:c9:23:94:87:72:
c9:d6:71:8d:fd:79:bd:17:bc:3c:35:2e:e3:9c:e2:
70:46:a2:8c:19:bc:60:f5:07:6c:b9:2d:34:d9:84:
71:03:82:66:ce:3f:73:d7:75:62:16:49:14:a7:a6:
85:35:51:f8:e1:1d:86:5b:52:93:d3:6e:61:e1:24:
00:cb:0f:76:0b:5b:b6:e5:e6:6c:d1:b6:c3:6a:c9:
ec:49:54:5d:01:ad:d7:0e:85:11:76:7c:c7:80:d6:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FA:F4:59:C5:E5:02:E8:C5:E4:DE:E8:EA:66:79:C0:10:B6:FE:9B
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F28DA8E6D17311EF8A0F6873762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.121.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d8:a7:00:d1:e8:07:ca:45:42:b8:81:7c:59:29:fd:62:f9:
aa:7e:19:ee:7a:bd:4d:b2:fe:97:37:f5:18:fc:d2:aa:64:26:
3c:76:86:7d:36:21:cc:89:19:fd:39:05:4c:51:12:14:af:45:
67:d9:17:07:13:4d:a1:0d:01:04:01:59:70:ca:c6:1c:74:fd:
86:61:b8:ce:e2:1f:7d:aa:84:c7:9d:76:fa:d5:5b:91:ea:b2:
2c:3b:04:3d:0d:f7:f5:65:7a:68:6b:03:9f:8a:15:da:42:8c:
0b:35:3e:55:62:dd:3f:c2:22:80:24:31:a4:a9:2b:ff:c1:1f:
a9:f4:b9:cf:d1:9a:7f:82:6c:ed:91:8f:43:2c:81:2d:68:93:
c9:a4:da:6b:b0:84:78:84:01:ef:00:ed:1e:3e:e3:4f:57:8b:
7f:23:a1:71:23:ec:e7:15:60:fc:57:a4:52:4b:81:56:40:6a:
29:1c:42:40:32:4a:b2:24:cf:f7:2e:7d:45:fc:b7:72:59:c0:
38:48:ad:fc:62:50:00:1b:68:e9:54:b5:78:ba:15:09:39:04:
03:5c:b7:ae:29:b3:5c:1b:e2:5c:3f:c3:24:28:f6:65:2c:db:
e6:b1:d2:75:86:47:0f:c7:e6:fc:b5:57:79:7e:3f:71:fb:a8:
97:f8:72:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:52 2025 by rpki-client