Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F864AAEAE87911EF85C1A2A1762E951A.roa
File: F864AAEAE87911EF85C1A2A1762E951A.roa (raw, json)
Hash identifier: VGrUT6tgkvMQ0mXxX+5Aq7a4583XQ/HF7VbIPzZcu5k=
Subject key identifier: 69:D1:C6:A3:1D:5E:A3:80:8C:D2:0C:23:57:2A:48:0C:35:67:8E:46
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05EA
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F864AAEAE87911EF85C1A2A1762E951A.roa
Signing time: Tue 11 Feb 2025 13:13:23 +0000
ROA not before: Tue 11 Feb 2025 13:13:05 +0000
ROA not after: Wed 11 Feb 2026 13:13:05 +0000
asID: 401115
IP address blocks: 196.251.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1514 (0x5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 11 13:13:05 2025 GMT
Not After : Feb 11 13:13:05 2026 GMT
Subject: CN=67ab4cf3-9188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:c4:90:df:f8:5e:71:51:04:9b:fd:78:ce:
01:74:51:78:75:11:c0:b5:4b:1c:58:4c:da:c8:8f:
94:ac:f5:7c:24:f8:74:72:aa:62:cc:6c:7f:f3:28:
f7:a3:85:9b:b7:43:ae:72:88:67:e4:fa:70:40:3e:
a2:05:9d:dc:4c:ed:de:97:e5:75:ed:a5:4f:0f:83:
a7:69:8e:64:f7:d1:5c:f6:ce:a5:b2:84:11:4a:32:
78:99:a3:8c:54:ed:ed:9c:c7:dc:53:72:4c:26:6f:
44:15:6a:a0:f7:21:30:e3:a6:4a:f0:ae:1c:9b:fc:
eb:d6:21:46:86:b2:44:3b:79:da:7b:43:a8:0c:45:
82:26:da:51:2d:4d:53:ac:3a:91:19:ef:89:a8:79:
0c:9a:12:a8:38:86:e9:12:af:4b:f4:43:2e:90:53:
a9:ce:69:cd:35:a4:30:2a:9b:93:03:60:0d:3d:48:
a7:c3:af:97:81:bf:02:27:ec:71:85:c5:c3:94:27:
0f:60:bf:3b:ac:af:36:19:7f:8d:d9:88:e4:96:e7:
f1:d1:d0:31:78:29:b6:7f:a6:ed:a8:a3:c9:2f:6a:
02:75:50:46:ff:d7:a2:c6:46:45:4b:98:27:d9:ca:
bc:e2:4b:87:45:57:51:8c:ea:88:4f:08:89:f3:82:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D1:C6:A3:1D:5E:A3:80:8C:D2:0C:23:57:2A:48:0C:35:67:8E:46
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F864AAEAE87911EF85C1A2A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.73.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:36:48:01:b1:0f:de:21:c2:d9:2e:34:3b:c9:fe:af:d2:4f:
ab:59:72:ce:3a:c3:1e:24:90:7c:7c:05:8a:8c:87:4b:7a:de:
98:62:1b:b0:a9:fd:be:bc:e4:01:8a:d7:e1:e4:66:4f:bb:a2:
d9:af:3e:71:27:08:83:fc:34:b1:3c:13:49:95:b2:1c:b8:dc:
93:20:14:0d:0a:6f:2e:e8:95:46:4d:d1:99:d7:e2:41:1c:92:
f1:64:9c:7e:99:38:62:4a:51:f7:f2:15:5f:3c:d8:98:65:fb:
68:05:04:fc:a8:d0:07:5b:66:4d:d5:41:c4:66:b2:72:a8:88:
1d:54:00:b9:72:de:67:41:bb:a4:54:2d:35:69:08:91:4a:ef:
e0:88:bc:45:78:7f:00:b5:c0:f2:41:7c:b5:2c:44:c2:3b:e3:
67:99:13:a9:3f:82:8b:bc:a3:5b:4f:e7:5b:5f:c3:aa:1d:ab:
e5:28:f7:bc:2a:bf:51:1a:27:fc:0c:7e:b3:b2:70:92:a4:cd:
3f:19:58:24:1a:c5:5c:c1:2e:f4:ef:8b:66:46:9d:e1:58:a5:
4e:24:a1:20:4d:03:18:35:6a:f6:89:df:d4:b1:62:b2:8d:cf:
30:ce:3e:63:55:61:37:e6:c8:1f:44:36:3c:43:a5:ae:9f:d2:
fc:61:2a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:43:56 2025 by rpki-client