Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/DB465DA6B4E311EFA8F972A4762E951A.roa
File: DB465DA6B4E311EFA8F972A4762E951A.roa (raw, json)
Hash identifier: 5Ro/c8k2EIEZwXt4asg5FxzHwnNASkytkLZTM9VOEcs=
Subject key identifier: DE:A4:1B:96:1E:41:83:23:83:AA:ED:10:F7:D5:F3:0B:7D:18:F3:34
Certificate issuer: /CN=F36663C2AF/serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
Certificate serial: 03F0
Authority key identifier: E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/DB465DA6B4E311EFA8F972A4762E951A.roa
Signing time: Sat 07 Dec 2024 21:40:20 +0000
ROA not before: Tue 31 Dec 2030 21:40:16 +0000
ROA not after: Tue 31 Dec 2030 21:40:16 +0000
asID: 56696
IP address blocks: 196.43.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1008 (0x3f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36663C2AF
Validity
Not Before: Dec 31 21:40:16 2030 GMT
Not After : Dec 31 21:40:16 2030 GMT
Subject: CN=6754c0c4-d1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:c4:4b:d0:ea:66:da:73:d1:00:e7:82:3b:
f4:3b:68:52:0f:3f:3e:18:82:86:e3:a6:03:89:36:
af:55:df:55:bc:ef:71:52:b6:16:0a:07:ae:65:04:
08:9f:2f:d0:01:37:22:02:98:90:71:0e:f2:8f:1f:
b9:95:d7:bb:a4:f2:1c:5a:7f:53:15:1b:77:ab:78:
9a:fb:62:f0:b4:55:af:0a:44:e0:82:33:f4:6d:68:
79:6b:a5:56:7f:aa:12:4b:12:da:91:d6:2c:cf:a8:
cf:88:2d:af:5d:61:b6:8f:98:46:8e:5e:85:72:22:
0a:93:4d:88:24:0a:1b:2e:45:b3:d0:05:ff:bf:74:
1f:92:47:32:f6:08:7e:d7:10:52:a3:fb:47:b8:fe:
ec:7c:34:11:ba:64:84:66:9b:88:99:f2:41:dd:e4:
f9:90:e7:bd:1f:42:59:46:c9:3b:85:46:77:ae:a0:
a0:8e:6c:08:42:67:e7:bc:80:c5:c2:7e:ad:c1:30:
4c:66:ae:30:5e:49:94:da:82:65:a2:09:ca:78:a8:
8f:ea:f1:40:f0:4f:cb:bb:6c:aa:4d:a0:87:77:54:
94:fd:b0:e5:f9:47:9b:51:dd:6a:9d:e4:36:86:0a:
eb:8e:fe:55:ec:5d:05:66:6f:09:ec:4b:27:94:cb:
4a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A4:1B:96:1E:41:83:23:83:AA:ED:10:F7:D5:F3:0B:7D:18:F3:34
X509v3 Authority Key Identifier:
keyid:E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/DB465DA6B4E311EFA8F972A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.125.0/24
Signature Algorithm: sha256WithRSAEncryption
36:2f:11:6b:28:34:11:a4:2d:cb:3d:55:b8:5c:55:68:65:17:
43:d0:d6:60:0d:46:da:e7:c7:1d:b3:ff:57:2a:9d:11:a7:84:
bd:82:47:32:f9:6a:96:68:36:52:48:ea:f7:3d:e4:57:0e:9b:
16:91:64:98:89:05:57:97:ff:b2:f4:ca:dc:51:0f:2b:d7:f0:
7b:6d:da:5b:e7:29:5f:91:d6:ce:d3:2a:0f:b3:68:27:b0:16:
12:53:fc:ef:63:ff:29:58:e6:43:28:7c:f3:59:e9:d9:2f:ef:
da:86:ff:e9:06:92:7f:04:97:6c:6f:22:9c:5d:2e:ba:f1:cf:
46:e5:56:c8:76:5b:d9:96:c9:95:f0:9a:57:52:fc:ce:08:a6:
88:42:22:8e:46:5a:3c:4a:0e:d5:50:90:e8:ee:4b:c7:e1:5e:
1c:1a:be:1d:9b:83:be:29:08:82:ec:4d:bc:d7:9e:86:58:b1:
90:d8:0b:0d:98:e5:ae:c8:28:a6:f3:0c:2d:b0:61:5b:18:9b:
46:3a:32:2a:a8:45:05:79:ab:c0:17:fd:37:57:6e:38:6d:4a:
f4:75:3a:b5:fc:a2:1e:f6:e0:d6:d0:9c:70:ec:b9:05:29:9c:
d5:dc:c0:7b:5f:6d:32:0b:7b:4e:61:30:7f:c8:72:f4:91:e8:
25:47:91:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:34:37 2025 by rpki-client