Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/9054D8CACF8311EBA7FDD04BF8AEA228.roa
File: 9054D8CACF8311EBA7FDD04BF8AEA228.roa (raw, json)
Hash identifier: zMZDwXp6Lec5nxK6Avgkc85Ge6aqLU9VYeAvKw+2E88=
Subject key identifier: A5:67:7E:26:5F:45:85:97:59:61:8D:B4:72:81:B0:64:8B:CA:2B:D2
Certificate issuer: /CN=F36D518DAF/serialNumber=FC945B066AE879A61BDF6FCB18859C57A2E716D0
Certificate serial: 06
Authority key identifier: FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/9054D8CACF8311EBA7FDD04BF8AEA228.roa
Signing time: Thu 17 Jun 2021 15:49:14 +0000
ROA not before: Thu 17 Jun 2021 15:49:07 +0000
ROA not after: Sun 31 Dec 2023 15:49:07 +0000
asID: 22773
IP address blocks: 196.51.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D518DAF
Validity
Not Before: Jun 17 15:49:07 2021 GMT
Not After : Dec 31 15:49:07 2023 GMT
Subject: CN=60cb6efa-ad9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bf:de:b7:bb:0d:c3:17:6e:19:b9:f6:fe:d6:
c3:d9:ab:c6:03:f2:04:22:62:34:09:a1:33:80:9d:
1e:9c:17:a7:1c:9a:9f:70:6e:d9:89:1c:20:cd:bf:
11:c7:8d:ae:3f:d5:88:3e:33:8b:9d:6d:f1:b5:78:
d5:3b:c1:a6:71:8b:96:26:ad:aa:fc:c0:d1:42:aa:
b7:60:a8:e3:ee:4b:8d:e5:19:69:18:16:6e:07:08:
0f:13:f1:95:e3:f8:ac:9c:72:60:af:04:aa:a8:c1:
c1:02:ab:5f:98:24:35:d1:12:d5:90:a3:05:e7:00:
ab:e7:2e:ea:9c:68:c7:e2:28:71:4f:f5:35:0d:e0:
86:bc:d0:fd:da:7f:a3:9e:ff:89:e3:8f:9d:e5:a2:
bc:c3:56:cf:3f:b7:24:9a:de:aa:3b:bd:9b:93:ab:
4b:80:ef:9e:3a:71:f5:fe:ca:fa:01:c9:ac:b7:41:
41:10:98:1f:74:f1:29:c9:0b:57:67:51:5b:c4:ae:
16:07:6b:12:48:02:62:66:3e:94:5a:bb:1c:af:2e:
71:80:18:1f:56:fb:cc:eb:f8:b9:cc:36:32:9b:e5:
8b:7a:9a:32:00:eb:b1:c6:38:bd:6a:aa:a8:5e:c5:
e5:a3:cf:29:94:ac:6f:59:38:f4:0a:eb:44:0b:25:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:67:7E:26:5F:45:85:97:59:61:8D:B4:72:81:B0:64:8B:CA:2B:D2
X509v3 Authority Key Identifier:
keyid:FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/9054D8CACF8311EBA7FDD04BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.51.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:31:75:7f:74:6d:e3:00:d9:78:29:6f:f1:05:d7:12:14:09:
f6:ab:b0:3d:a5:49:22:2c:b2:2f:2f:91:18:14:b9:f1:2c:61:
a3:5d:1b:50:ee:ce:51:96:21:d1:7c:4e:df:8d:db:5e:3b:95:
5c:51:b3:54:dc:6c:1c:05:14:89:c4:4f:85:da:9e:55:a7:b5:
a2:81:c1:8c:f6:f1:5f:cf:d6:df:59:f0:a0:47:3a:69:07:fe:
e7:3b:c7:6c:8b:eb:ab:c4:56:4e:07:65:95:42:62:68:2f:fc:
b9:13:24:13:fe:04:3e:a7:07:7b:80:51:dc:95:d4:06:f1:d7:
89:48:ad:d6:f7:d7:20:67:dd:ae:ec:a1:c9:da:e8:0e:38:15:
e6:e7:c9:b1:98:f1:e3:4c:09:b7:7e:2b:4c:62:c8:e3:c8:f7:
d4:01:9c:e6:65:08:15:ab:6e:50:4c:98:4b:5c:65:95:55:b4:
93:88:8d:17:3a:53:0a:07:e5:da:ad:fe:1f:0a:c0:ff:4c:7d:
31:a1:93:a8:d9:f2:47:a4:e4:d2:20:b4:e4:ba:fb:54:cb:01:
27:20:a1:9e:3c:91:2a:11:de:cd:aa:50:b0:e3:71:9f:35:03:
5f:bb:8b:3a:25:44:75:0d:d5:89:56:9d:a7:7c:2d:76:bc:fc:
df:32:8d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:02 2025 by rpki-client