Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/4A3BF0B6E9F711EFB363B759762E951A.roa
File: 4A3BF0B6E9F711EFB363B759762E951A.roa (raw, json)
Hash identifier: qnWjHMa6krZFafky4BYIbSFj8GVyr5kF/yN3x6ht2sE=
Subject key identifier: 69:18:35:DD:F7:FE:0D:4F:0A:31:59:28:94:4C:54:7A:10:05:3B:85
Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Certificate serial: 015D
Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/4A3BF0B6E9F711EFB363B759762E951A.roa
Signing time: Thu 13 Feb 2025 10:42:58 +0000
ROA not before: Thu 13 Feb 2025 10:42:54 +0000
ROA not after: Sun 13 Feb 2028 10:42:54 +0000
asID: 37577
IP address blocks: 197.239.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CB1BEAF
Validity
Not Before: Feb 13 10:42:54 2025 GMT
Not After : Feb 13 10:42:54 2028 GMT
Subject: CN=67adccb2-e88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d9:4d:49:ed:a8:7b:87:13:90:1c:67:bf:01:
df:67:d2:80:30:a8:d0:96:14:a1:6d:53:40:af:95:
40:2a:61:6b:b1:30:a4:05:d4:b0:a3:85:ee:74:3d:
50:5f:85:7a:67:d0:3f:09:a7:a0:85:0b:ac:dd:fb:
e7:75:93:8f:e7:08:4c:bf:d3:16:38:0d:26:c8:34:
0d:ec:f3:ca:0f:2d:ab:03:ab:6b:9c:93:7a:3c:9b:
7b:56:65:69:e4:5a:fa:35:a4:b8:fb:8a:a5:5d:1e:
4b:63:a6:8b:6a:b1:ef:7b:a9:58:66:53:cf:a9:7b:
c1:82:78:20:5a:ac:d2:ea:2f:a1:13:7b:f8:3f:7a:
a9:c0:1d:a2:00:12:80:16:aa:14:d9:fa:a2:5d:d2:
4b:76:ff:0a:e6:2d:c8:bf:17:60:18:2e:7c:ad:9a:
0f:a4:ec:f1:86:e4:26:10:41:d5:8a:5d:e1:fc:24:
3e:3a:f1:e9:e4:99:e7:cd:88:f3:52:36:3d:86:b6:
a4:06:55:0c:53:db:07:ce:c6:3d:7b:f9:9c:0f:84:
13:e5:84:f9:78:23:ba:ee:da:d3:27:79:cf:90:e6:
4a:df:c8:68:51:2a:ea:30:6a:67:8f:4e:ad:48:12:
4c:19:f7:b4:e3:85:8e:d3:4c:49:47:97:51:f9:0b:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:18:35:DD:F7:FE:0D:4F:0A:31:59:28:94:4C:54:7A:10:05:3B:85
X509v3 Authority Key Identifier:
keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/4A3BF0B6E9F711EFB363B759762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.239.78.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:7f:03:d7:e1:6c:0b:d7:d3:5e:23:fd:6d:70:1c:bb:83:bf:
66:6e:00:39:2e:0c:c0:a9:c2:91:e2:80:fb:a7:f8:00:6b:d3:
a0:34:b9:b7:d6:71:e0:d3:48:d7:da:33:ac:c3:fb:6f:83:d3:
de:91:5d:b7:68:c9:d0:b8:da:40:ec:9c:81:24:16:5d:22:d5:
82:3d:3d:7c:b5:31:0c:11:7a:f7:c4:66:ad:cf:8d:33:02:bb:
cf:9c:44:f8:56:ee:05:67:b7:ea:26:da:3c:c9:d9:b5:08:ee:
12:26:af:c2:f3:d1:c1:00:2e:67:6c:64:db:79:8f:f0:15:5e:
11:14:43:3d:f6:e5:1e:c5:f4:07:22:f5:66:16:3b:63:9e:81:
ae:03:40:27:4c:ea:7d:3d:bc:84:14:b1:6f:f8:80:4a:8c:55:
5f:e6:ef:91:15:1a:e8:7f:eb:25:e8:db:67:83:aa:7d:97:b7:
eb:06:27:b4:80:f2:11:70:f9:39:60:7a:3d:a5:5b:c4:b1:39:
24:c7:01:2c:0b:04:3d:45:15:d0:72:e4:31:66:2b:22:2b:ff:
fc:d1:97:84:91:ea:2b:48:7d:2f:d0:d6:03:cd:fe:b7:3e:b6:
58:4e:3d:15:ae:6a:3f:af:fe:13:4d:83:72:4f:f6:cb:23:f4:
e9:52:59:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:39:47 2025 by rpki-client