Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/A7A6264AFCAD11EF8068089B762E951A.roa
File: A7A6264AFCAD11EF8068089B762E951A.roa (raw, json)
Hash identifier: rW7LzojMuUG5spBMNnlWIM3kxFSqz8o4h8U+vR8ivoI=
Subject key identifier: D2:7D:BA:07:C2:B4:05:3C:B4:24:4F:FA:D0:BE:06:6A:70:43:45:D8
Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial: 0448
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/A7A6264AFCAD11EF8068089B762E951A.roa
Signing time: Sun 09 Mar 2025 06:13:44 +0000
ROA not before: Sun 09 Mar 2025 06:13:40 +0000
ROA not after: Sat 31 Mar 2035 06:13:40 +0000
asID: 33785
IP address blocks: 196.46.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096 (0x448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC80AAF
Validity
Not Before: Mar 9 06:13:40 2025 GMT
Not After : Mar 31 06:13:40 2035 GMT
Subject: CN=67cd3198-09d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:a1:94:61:e5:cf:20:7e:8e:da:47:ba:3d:
92:c5:59:ac:62:9f:b1:45:8d:c6:c6:69:89:6f:c5:
fa:21:99:40:86:ce:b1:44:f7:60:5e:6d:ca:25:ed:
0f:5e:aa:f9:34:15:8d:bc:6f:96:6f:53:00:9d:2d:
45:40:c8:48:8f:f4:ab:5d:3d:93:8a:a1:11:3d:e0:
7e:80:6b:82:9c:73:ba:76:ce:93:70:b8:d7:49:d6:
53:93:6f:cc:9e:75:ad:ec:56:e9:a8:47:5b:39:c8:
7c:19:5f:57:a7:79:12:c5:ca:9b:f3:1f:e2:1a:1a:
86:82:35:11:5b:8a:89:1f:54:a3:2a:40:00:8d:cf:
b8:d6:e7:65:46:df:69:28:6a:19:2e:b9:81:11:c2:
06:82:64:65:c7:6f:05:d3:58:6d:8a:f1:4f:b6:96:
8c:69:bb:1c:b8:c3:ca:ad:b5:4c:fe:5b:be:ca:0e:
c4:41:f4:54:07:1b:b5:42:11:c6:3c:24:3a:fe:52:
50:d5:31:59:3b:cf:95:2f:3b:56:7c:b7:7a:ce:c8:
b2:40:e3:2c:fb:28:70:f9:89:4c:0c:79:bc:5a:71:
9a:99:94:9a:25:ac:bf:65:b4:ad:e5:7d:84:c8:44:
cb:55:89:cc:f9:7e:30:36:59:a5:6b:bc:e1:42:52:
be:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7D:BA:07:C2:B4:05:3C:B4:24:4F:FA:D0:BE:06:6A:70:43:45:D8
X509v3 Authority Key Identifier:
keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/A7A6264AFCAD11EF8068089B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.46.188.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:9d:d7:35:64:7e:11:d8:b3:e5:8e:29:b8:4c:38:b9:28:5f:
f7:f1:07:0a:b1:ce:b4:7a:29:00:9e:b2:85:ac:fc:a6:fa:32:
58:68:ca:58:6d:cd:64:e2:c6:28:17:b5:81:8b:f3:a8:37:31:
a8:3e:22:97:a3:50:d3:3a:ba:88:76:60:3b:68:03:a3:91:36:
3c:16:63:46:40:ed:20:82:e0:96:8c:35:46:b6:f9:00:bb:f9:
37:8f:72:a8:be:1e:8f:3c:3a:f4:26:6c:67:fa:97:6d:2b:18:
b7:f2:99:46:b9:b4:b6:d3:a8:08:24:de:62:ac:56:bc:7f:63:
03:85:02:65:92:58:98:65:db:5f:6c:7e:61:a0:8f:f1:6e:aa:
57:01:de:79:35:93:87:65:3b:01:9a:0c:76:70:06:3a:1a:aa:
17:5c:1f:19:67:ba:04:43:59:6d:24:d8:10:57:2c:d3:4c:5e:
af:20:8a:76:3e:4c:f6:3d:23:6f:c9:2b:a5:e9:46:09:f2:30:
9a:b1:b3:92:02:f3:b0:40:a4:27:37:a3:28:c4:93:14:c0:57:
40:4a:e3:0d:d9:82:3e:60:37:73:7d:12:77:d9:8b:77:0a:8b:
05:77:4e:ce:03:99:0f:ad:5d:39:4a:58:88:e8:5d:54:7b:db:
8d:de:02:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:37 2025 by rpki-client