Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/9B6E721AE3E411EFB934FF78762E951A.roa
File: 9B6E721AE3E411EFB934FF78762E951A.roa (raw, json)
Hash identifier: gBgcjfT/qrh95VoyMQ5KZbvh0uc6ei9HAXRDsRUsII4=
Subject key identifier: E4:84:0A:23:78:2B:F5:BC:B2:C2:42:7D:6D:AD:D3:92:EA:33:2C:35
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 02E2
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/9B6E721AE3E411EFB934FF78762E951A.roa
Signing time: Wed 05 Feb 2025 17:14:07 +0000
ROA not before: Wed 05 Feb 2025 17:14:03 +0000
ROA not after: Mon 05 Feb 2035 17:14:03 +0000
asID: 37597
IP address blocks: 196.2.124.0/24 maxlen: 24
196.2.125.0/24 maxlen: 24
196.2.126.0/24 maxlen: 24
196.2.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 738 (0x2e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF
Validity
Not Before: Feb 5 17:14:03 2025 GMT
Not After : Feb 5 17:14:03 2035 GMT
Subject: CN=67a39c5f-d514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:7b:e2:72:20:eb:fd:a2:27:23:81:f2:93:
6d:1d:d7:d3:04:48:86:be:0b:8c:d6:69:e2:78:68:
51:2b:30:b1:70:c2:c3:0a:04:ae:e0:76:47:de:67:
ff:19:3d:f8:9e:6e:42:ac:2b:bb:ee:7b:4c:55:56:
e1:54:93:34:de:f1:75:42:4b:74:eb:3c:0e:6b:7d:
eb:25:8f:d0:44:c7:6c:cf:4f:57:1a:a0:6f:e7:b8:
3c:81:87:1a:15:53:e9:27:24:75:93:be:11:4a:30:
8b:4a:20:a4:02:ea:a3:98:25:e2:c6:fd:61:55:4c:
7a:79:cb:89:22:5c:da:61:31:97:60:8d:d5:1b:46:
14:f7:9f:34:cc:17:7f:eb:33:a0:34:f7:9d:a5:81:
f7:5a:48:a9:55:5d:02:f2:f4:1f:0c:50:db:fd:c3:
89:07:7c:7f:59:14:cc:5a:70:cd:6f:7c:7d:11:cf:
7c:68:a0:c8:c3:46:2e:37:67:98:06:64:53:7e:c9:
82:e8:84:dc:36:aa:5a:1e:29:50:52:d1:f9:e9:7c:
b7:a3:33:e4:9f:9f:be:87:6d:e9:f5:b6:e3:82:08:
f2:ef:70:84:1a:54:da:5e:c3:64:03:11:34:87:e7:
93:da:68:78:0b:75:a7:d3:a4:70:0d:47:05:1d:3d:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:84:0A:23:78:2B:F5:BC:B2:C2:42:7D:6D:AD:D3:92:EA:33:2C:35
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/9B6E721AE3E411EFB934FF78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.2.124.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:e8:d7:c9:1f:6f:69:ca:1c:57:78:06:91:4f:c7:53:f1:2f:
47:36:94:6c:a9:7f:49:9c:da:79:a3:75:ab:9a:8e:bd:8e:c8:
96:7d:c5:c8:03:8b:37:36:25:4d:50:3e:0f:1a:b1:7d:6a:13:
d8:40:51:8a:69:aa:10:f6:cd:01:b6:c0:e0:35:4a:cf:ad:ac:
a8:44:ea:39:64:e4:79:bb:ad:ff:ce:20:b2:b0:52:d8:27:53:
89:03:a9:9f:64:13:8b:e9:ed:f7:d2:b1:ef:df:e0:7f:d5:19:
6b:b8:bd:d0:43:29:85:b9:fa:77:92:71:76:3e:eb:3d:70:24:
9a:2f:08:41:ac:55:09:6e:1b:96:6e:61:16:e7:f6:01:83:2d:
47:ab:b2:41:fa:c1:bd:a6:90:1a:82:ee:5b:3c:43:dc:20:f1:
58:97:20:a8:1b:86:ae:d4:7b:79:bf:59:11:18:7d:ab:44:0a:
12:89:b1:99:03:dd:35:c2:d0:4d:77:c3:62:a4:4b:6b:6c:83:
6f:ba:a6:6e:4f:59:e6:47:47:50:63:c2:0d:7e:b5:23:26:5b:
49:fc:10:9e:4a:33:c0:e8:65:30:50:bb:f0:9b:37:79:f0:93:
73:76:1c:21:30:02:4d:da:a3:7e:c9:66:59:e7:3f:46:92:70:
ba:ec:77:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:45 2025 by rpki-client