Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/9339615AD8C111EF8DB7BF54762E951A.roa
File: 9339615AD8C111EF8DB7BF54762E951A.roa (raw, json)
Hash identifier: xc8dD33wlKno2arC4vZ6/xxvjUT574mqi0tlSEIj2yE=
Subject key identifier: D3:64:97:B4:C1:8A:8E:6F:29:26:BC:83:1A:CA:71:4F:95:5E:D8:7C
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 076A
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/9339615AD8C111EF8DB7BF54762E951A.roa
Signing time: Wed 22 Jan 2025 13:05:38 +0000
ROA not before: Wed 22 Jan 2025 13:05:34 +0000
ROA not after: Mon 31 Dec 2035 13:05:34 +0000
asID: 20011
IP address blocks: 197.96.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1898 (0x76a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF
Validity
Not Before: Jan 22 13:05:34 2025 GMT
Not After : Dec 31 13:05:34 2035 GMT
Subject: CN=6790ed22-2cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:e0:26:5b:eb:5b:36:a9:5f:9d:e8:0a:3e:
41:5d:68:51:6c:51:61:9d:d1:c8:61:1a:1a:d5:fe:
cd:36:7e:84:6b:e8:1b:09:c0:31:4e:f0:fb:d7:54:
50:d9:9b:13:1a:5c:96:04:30:55:24:d7:ab:b1:53:
b8:d0:74:8b:cd:04:85:e7:a9:28:94:20:b8:40:4f:
ce:f6:06:ce:f8:b0:6b:ec:97:e6:d4:60:b9:f7:b5:
ad:f4:e7:6b:13:e4:16:6d:6e:76:2b:0f:6e:df:ab:
12:ce:75:ee:af:9c:f6:a4:8c:d4:0a:3a:28:82:bf:
13:68:fa:59:48:37:6a:5d:3a:4c:1b:78:78:0a:d0:
f9:a5:5f:84:4c:97:25:94:54:5b:32:3b:b0:b5:6b:
6f:97:0d:43:e1:5f:37:75:bd:4e:db:7a:cb:b8:83:
b0:0d:1f:33:88:39:7a:d4:51:29:4b:c8:f4:22:b5:
0c:38:cf:8f:99:c2:46:42:03:10:45:e9:8f:ab:cd:
5c:d9:ed:de:62:0a:e4:8d:fc:21:a2:ef:9c:a3:b9:
da:c3:70:ec:0a:43:50:0f:e5:cc:fa:77:87:c8:4b:
28:8b:b5:2e:0a:63:79:67:a6:ff:7a:b0:11:ec:11:
28:21:71:57:69:8b:d0:22:60:c2:46:e2:48:42:31:
5c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:64:97:B4:C1:8A:8E:6F:29:26:BC:83:1A:CA:71:4F:95:5E:D8:7C
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/9339615AD8C111EF8DB7BF54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.96.0.0/13
Signature Algorithm: sha256WithRSAEncryption
c4:72:2c:58:e2:42:d6:d6:b9:45:0a:fd:9e:a5:49:e1:bf:7e:
a0:35:34:1a:68:29:df:8a:ce:50:92:58:59:f7:96:17:41:d8:
c3:44:7e:a8:77:88:52:5c:c9:8d:d8:1c:94:a8:77:b0:7d:f6:
f1:4e:fa:b7:04:e8:13:32:e3:dc:c8:9a:38:4b:e4:33:a3:1c:
0a:25:ea:d9:8a:b8:6f:31:5a:d4:84:5f:a4:62:5b:34:ec:18:
90:f2:b5:37:7e:35:ee:81:55:64:63:13:6c:67:65:6e:21:c3:
a0:80:14:d1:c8:f2:c4:57:8d:03:0f:f5:42:83:95:32:22:5c:
1b:78:db:3f:21:f7:01:0c:3e:0d:f8:bd:fe:dc:d6:de:ea:d3:
eb:40:c0:1b:61:de:a0:a7:c5:cc:c5:1b:b0:01:bf:52:e2:e7:
e4:91:b7:8c:b8:87:ff:c3:ac:00:af:41:13:04:ef:77:98:4c:
a5:90:63:09:1f:b9:4f:87:24:7c:c8:09:b9:7e:77:99:f3:30:
e7:26:84:f1:01:37:c3:a0:05:7c:e1:e2:6e:24:5f:39:50:5a:
a7:03:72:70:a9:0f:fc:5c:42:3d:0e:9c:d0:c2:15:b9:ce:e0:
d7:ed:14:ce:d3:0c:8b:97:a0:13:e9:a4:3e:0e:9c:c7:67:20:
a5:dc:48:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:21 2025 by rpki-client