Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/05CEBEFCAE8D11ECA2B944855A40D577.roa
File: 05CEBEFCAE8D11ECA2B944855A40D577.roa (raw, json)
Hash identifier: ig2fcbZAMXyiWgWfut1/NXoxy/6fX+JZYNK6/uB95ac=
Subject key identifier: 26:65:14:05:67:B7:DE:A5:35:5F:F2:E1:23:75:93:75:9D:E6:D9:50
Certificate issuer: /CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Certificate serial: 01A6
Authority key identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/05CEBEFCAE8D11ECA2B944855A40D577.roa
Signing time: Mon 28 Mar 2022 11:48:45 +0000
ROA not before: Mon 28 Mar 2022 11:48:42 +0000
ROA not after: Tue 28 Mar 2023 11:48:42 +0000
asID: 328010
IP address blocks: 196.49.19.0/24 maxlen: 24
2001:43f8:b61::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366D2C6AF
Validity
Not Before: Mar 28 11:48:42 2022 GMT
Not After : Mar 28 11:48:42 2023 GMT
Subject: CN=6241a09d-772c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:54:f1:6c:b9:0b:32:b4:91:8b:a2:fe:49:
69:41:e0:04:52:0a:dc:7f:5e:7f:76:88:0e:3a:95:
17:59:34:3d:d2:6a:2d:0c:52:95:ab:47:46:b0:88:
71:19:ed:4e:93:e7:22:0b:1c:fe:ee:e8:25:5a:72:
66:d0:b4:39:f8:f4:c5:c9:c9:fc:b5:18:a2:f0:61:
fc:81:45:3a:c8:a6:92:15:4f:10:13:87:da:21:2b:
ef:40:85:eb:97:bf:f7:92:4f:3a:c8:a6:0c:af:0a:
9f:45:e0:53:38:ed:92:7e:aa:88:8c:5e:e3:3e:8a:
2e:01:ea:b9:b8:76:50:c3:91:96:df:b6:e7:e2:38:
5d:b4:db:99:6e:8d:29:1d:ba:ab:b3:d0:a3:68:42:
15:42:9b:2f:6b:c9:f4:58:ca:c9:c7:36:90:af:cf:
63:a5:83:0b:cd:ad:49:f2:1d:52:b4:a6:dd:18:89:
af:41:28:9b:4b:1b:3e:21:d3:bf:bf:b4:92:e1:06:
fb:0a:e7:c3:c3:5e:e6:0a:37:e8:f3:c0:51:76:a4:
68:75:34:7c:a8:35:d6:08:41:c2:33:93:7c:09:f1:
61:93:b3:fd:ef:8d:05:7c:40:c1:40:cd:57:5e:5d:
7d:73:4a:ec:f4:bd:86:ed:bc:8d:1a:32:ca:61:05:
06:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:65:14:05:67:B7:DE:A5:35:5F:F2:E1:23:75:93:75:9D:E6:D9:50
X509v3 Authority Key Identifier:
keyid:38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/05CEBEFCAE8D11ECA2B944855A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.19.0/24
IPv6:
2001:43f8:b61::/48
Signature Algorithm: sha256WithRSAEncryption
85:d5:40:12:2f:2b:2e:42:1c:ba:a5:f8:fe:8d:1b:4e:02:0a:
ec:30:89:45:19:ce:ca:1b:c1:25:2c:2d:68:6c:ef:c9:91:d8:
3d:3e:8d:05:87:38:99:fe:fb:b6:1d:e9:5f:8c:fd:2e:c7:a9:
e7:59:de:ef:91:f1:87:c2:d7:88:69:5c:7a:ee:0d:3c:4e:eb:
98:e2:c1:07:14:f1:66:82:71:ae:ba:8f:39:9b:75:17:00:51:
b6:88:f3:b5:76:a3:4c:b3:ab:09:a4:1c:0d:c1:7d:bc:87:b9:
e2:ab:a2:80:db:eb:88:3b:a2:e6:ef:6e:99:7b:be:76:87:3f:
1a:01:6a:65:39:1e:f8:87:a2:43:7e:bd:18:75:01:03:a2:9e:
64:d0:fd:83:5c:dc:4b:93:db:3d:01:55:01:49:87:46:c1:4d:
aa:d3:01:69:43:8b:61:73:f2:1c:7b:fd:96:03:d5:9c:50:7d:
1c:64:fe:cb:81:74:26:e8:26:5f:28:80:8a:8c:3b:75:0f:b2:
b8:48:9c:a8:e8:8a:36:4b:50:37:de:50:6f:d1:f0:e1:09:6a:
ed:bc:e9:a2:8d:6f:7c:67:4f:f0:36:2e:80:39:db:17:72:81:
8d:dd:19:71:1d:9e:30:ba:c8:12:e2:2a:8d:e0:f1:58:95:3c:
c1:df:c1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:27 2025 by rpki-client