Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/09D379BC1A5B11EEACF0F06F4AD9E6FC.roa
File: 09D379BC1A5B11EEACF0F06F4AD9E6FC.roa (raw, json)
Hash identifier: XtwJZi03efMzPcuSCZQyZPuu9oEG2wFZ/I2Jmd50DHQ=
Subject key identifier: D4:8C:5C:A6:5B:74:CB:8D:75:E4:CD:D7:0B:70:C3:28:6C:99:14:59
Certificate issuer: /CN=F364814FAF/serialNumber=ABF9960C85BCF8938D58337F8CB7C5EB4DC4B3AE
Certificate serial: 0460
Authority key identifier: AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/09D379BC1A5B11EEACF0F06F4AD9E6FC.roa
Signing time: Tue 04 Jul 2023 11:08:00 +0000
ROA not before: Tue 04 Jul 2023 11:07:56 +0000
ROA not after: Fri 03 Jul 2026 11:07:56 +0000
asID: 36940
IP address blocks: 196.49.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1120 (0x460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364814FAF
Validity
Not Before: Jul 4 11:07:56 2023 GMT
Not After : Jul 3 11:07:56 2026 GMT
Subject: CN=64a3fd90-7c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:93:a5:34:a6:aa:ff:cb:fc:93:a1:77:04:05:
3b:2d:e7:ef:61:82:6e:e0:e6:ff:3a:ec:e6:09:6a:
34:c9:83:e8:51:21:0d:08:fb:15:f1:d7:41:1a:e2:
df:e7:2d:e3:fc:2d:c7:2f:e6:d2:ef:76:56:9d:37:
fb:ba:19:47:f9:c4:0b:8d:20:1b:3a:ad:db:a5:e2:
12:02:e8:08:5d:9c:8c:5d:70:35:55:6e:d2:ac:5f:
15:00:0c:4f:9e:a1:df:3f:b8:71:e1:e2:2e:6e:57:
e7:a6:ca:0f:11:05:da:74:14:f7:60:08:8d:6f:da:
ac:75:ef:b2:4a:38:c8:7b:9e:c4:78:25:84:6c:e9:
f8:56:71:c0:28:67:44:00:ce:82:a5:5f:88:e7:81:
b7:4d:df:e5:f6:93:50:96:3d:d4:df:a3:0c:18:65:
88:ba:ad:e7:65:e3:89:ab:2a:44:9b:54:73:a7:8a:
74:f6:c9:1f:a6:1b:7c:1e:48:b0:89:3e:52:d9:2c:
2f:57:17:ec:22:05:7f:52:0d:f3:8c:d9:95:5d:d3:
28:32:6a:76:89:16:db:41:db:ec:63:7d:db:bd:0b:
fe:11:67:26:ea:15:6a:c6:45:7c:73:98:19:32:02:
74:4b:4e:bf:4e:cb:56:65:43:7e:86:4d:31:a9:5e:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8C:5C:A6:5B:74:CB:8D:75:E4:CD:D7:0B:70:C3:28:6C:99:14:59
X509v3 Authority Key Identifier:
keyid:AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/09D379BC1A5B11EEACF0F06F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.26.0/24
Signature Algorithm: sha256WithRSAEncryption
09:62:67:de:55:ad:8d:c4:bb:85:a6:30:47:b2:79:34:80:93:
a9:64:d4:f3:46:a3:6d:ca:9e:5d:ea:e1:f2:c2:5a:b3:d6:0d:
eb:9e:bb:4a:ac:67:b1:f4:d5:82:97:d6:08:c6:40:db:74:6e:
a2:0e:87:d8:ea:fd:53:d3:b7:93:82:a7:df:c4:42:3c:17:3a:
89:d5:c0:6a:fb:6b:e3:72:05:76:da:44:14:9c:bd:ec:54:19:
b6:49:6e:43:d8:5b:1d:9d:9a:73:83:09:b4:ff:28:3f:f6:69:
c2:7c:a0:7c:40:ce:16:cc:84:ee:c3:e4:aa:10:db:ad:8e:cc:
84:37:7f:62:0a:ef:24:6f:8b:da:7f:96:f5:a2:c4:0c:5b:8c:
59:84:01:54:43:be:7d:4d:69:8e:9b:c5:03:69:78:46:68:83:
83:44:be:f0:3c:e9:fa:97:86:07:49:e0:9b:5c:e0:25:ec:1a:
d1:4b:ee:bc:09:63:05:22:d0:cd:58:85:19:3a:86:1c:9a:e2:
88:6a:d9:f8:f0:30:bb:84:63:32:15:ed:99:7a:0f:16:28:36:
8f:05:49:12:22:b9:97:f4:3e:b4:6a:15:c5:dd:09:7a:96:d9:
44:cf:34:eb:e9:3b:4c:7b:09:28:1b:ee:f1:6f:56:15:5c:a7:
db:73:05:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:46 2025 by rpki-client