Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F9475718ED2011EF8A46AE6C762E951A.roa
File: F9475718ED2011EF8A46AE6C762E951A.roa (raw, json)
Hash identifier: m1mZKSLl1nO1H65Qlv/uMLyclx0DPhZPkPAyy78YqlM=
Subject key identifier: F8:6E:90:03:7C:9E:1B:9B:29:88:3D:25:61:CC:CF:5F:FD:99:E3:E9
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0666
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F9475718ED2011EF8A46AE6C762E951A.roa
Signing time: Mon 17 Feb 2025 11:18:55 +0000
ROA not before: Mon 17 Feb 2025 11:18:51 +0000
ROA not after: Tue 17 Feb 2026 11:18:51 +0000
asID: 208485
IP address blocks: 196.251.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1638 (0x666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 17 11:18:51 2025 GMT
Not After : Feb 17 11:18:51 2026 GMT
Subject: CN=67b31b1f-be54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:3a:a9:44:bb:89:cf:c5:27:5a:bb:31:6f:
9c:02:d1:46:42:0a:6b:24:bf:83:a3:c7:25:98:b1:
b0:6f:a7:0a:ca:92:fa:d5:40:2a:b3:6b:bd:e9:bf:
c8:90:b2:43:d2:14:d2:0d:47:b7:78:a8:7c:9b:f9:
74:c1:eb:3f:3a:57:44:24:05:b4:57:e4:6c:d7:7f:
ef:ec:c6:79:3b:47:be:c5:60:c9:f3:24:a7:a0:64:
4e:5d:51:6a:e7:f1:af:28:a9:14:25:72:c4:51:68:
62:1f:44:01:85:b6:45:79:0c:95:18:eb:f0:6d:50:
2e:5d:aa:96:cb:60:eb:c8:ed:f3:d3:3c:9b:15:6a:
59:de:d9:d7:42:fa:0f:3c:52:97:1c:87:95:54:85:
5b:91:65:59:5a:86:fc:95:64:e7:a9:8f:bc:bf:c2:
dc:3c:2f:74:87:0a:83:38:dc:30:2b:83:5a:ef:0f:
d8:6c:09:73:6d:f0:4f:a8:c9:a8:87:5d:06:84:6b:
76:8c:8c:a3:0d:38:17:1a:3a:0e:4b:4a:12:ba:d1:
85:fd:a7:b4:d9:43:46:bc:59:fb:8c:86:d9:8f:4e:
49:ea:d8:01:4a:d9:f0:ee:17:30:3a:21:c6:be:d7:
da:9c:db:f3:17:3e:bf:18:33:e5:8d:59:f8:f2:38:
77:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6E:90:03:7C:9E:1B:9B:29:88:3D:25:61:CC:CF:5F:FD:99:E3:E9
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F9475718ED2011EF8A46AE6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.101.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:35:32:12:7c:2b:2c:e1:4f:5f:c4:d0:35:99:ce:df:80:83:
a3:e1:e5:28:82:ff:27:71:4f:80:e4:44:65:cf:5c:97:f2:1f:
b3:c4:f4:8b:5e:d9:6d:51:fa:44:39:53:28:50:6b:8e:22:a9:
e8:82:ef:b6:e0:f3:4f:06:23:41:d2:9e:36:46:7c:68:dd:56:
c0:61:e2:72:52:16:e6:7a:06:96:91:ab:58:d2:c3:13:f9:49:
6a:c8:59:4c:76:f0:da:56:4a:84:3a:ac:8f:12:31:8b:4e:c4:
56:06:1e:0b:ee:1a:90:bc:fd:fe:b4:f0:43:37:d1:96:9e:f6:
65:7b:01:6e:5a:73:19:1f:80:06:a4:2a:6c:46:3d:8b:d6:f8:
a9:f1:a4:e6:74:cf:dd:26:c9:66:e7:7d:77:5f:81:3d:48:45:
af:eb:75:60:cc:c4:bc:ec:1e:ec:ce:9a:5c:c8:35:81:1a:2e:
f8:3d:b3:b6:8e:80:73:65:07:1e:e6:cf:df:5a:f3:07:80:34:
c3:ed:e8:17:3c:7f:17:6b:0f:57:b8:96:f3:b9:94:26:fe:46:
ae:0e:7a:e5:db:3e:f3:7b:20:ff:d5:16:fe:85:a3:df:64:9d:
a0:ef:c4:2c:5e:52:3c:99:ad:26:4e:98:23:e7:6b:7e:43:43:
d4:3c:c5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:35 2025 by rpki-client