Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/E4EAD8C4353011EFBA2CCD98762E951A.roa
File: E4EAD8C4353011EFBA2CCD98762E951A.roa (raw, json)
Hash identifier: Afj2XOaT1THQy02YkhBrihtMAAj3OFu2AXPVcjK91qY=
Subject key identifier: C1:35:FC:95:C8:4F:32:5E:0B:BC:8F:29:35:7F:F6:5E:30:94:EF:04
Certificate issuer: /CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Certificate serial: 0199
Authority key identifier: C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/E4EAD8C4353011EFBA2CCD98762E951A.roa
Signing time: Fri 28 Jun 2024 09:29:19 +0000
ROA not before: Fri 28 Jun 2024 09:29:15 +0000
ROA not after: Fri 30 Jun 2034 09:29:15 +0000
asID: 37496
IP address blocks: 196.216.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8BF7AF
Validity
Not Before: Jun 28 09:29:15 2024 GMT
Not After : Jun 30 09:29:15 2034 GMT
Subject: CN=667e826f-5443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:02:5b:ea:8c:e0:c4:08:b6:58:ff:df:81:
0e:10:d0:e8:5f:6d:4a:51:65:6d:c9:5c:cb:d9:bc:
96:24:e3:66:e0:0e:eb:84:9c:63:12:71:d6:bd:30:
a5:ef:b3:3b:2e:6c:50:2e:cc:7e:92:89:ed:a0:05:
1d:4e:97:13:a7:09:9e:e2:80:a4:e5:f9:7f:b9:e7:
d3:f9:1b:08:ea:af:12:5f:08:2c:41:8d:48:de:81:
f5:fa:a8:7b:db:0c:e2:18:ec:a5:4b:7b:01:42:02:
8b:11:60:67:6b:eb:03:e9:9f:72:34:3b:c8:73:e4:
ea:d0:f9:54:2a:fe:2c:b9:21:b8:e0:63:17:83:eb:
b1:ab:f7:4b:0f:73:1a:02:13:c8:73:4f:3e:2e:c8:
04:f9:34:c4:47:70:fa:62:b3:01:e2:95:b7:3a:b2:
a3:59:a2:cb:04:80:9f:ee:c3:f0:74:54:fb:4b:99:
1d:94:f3:5f:26:f6:9e:92:bc:6d:2b:38:16:12:a8:
6f:61:94:eb:38:f8:6e:07:ef:5f:be:9f:54:61:af:
79:c5:ea:95:c6:8c:67:0e:6b:58:63:c8:ae:4e:85:
bc:71:ef:79:8b:a0:42:2e:44:65:b4:35:79:27:6d:
25:8a:da:81:47:65:e5:52:58:9d:67:ab:62:dd:9c:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:35:FC:95:C8:4F:32:5E:0B:BC:8F:29:35:7F:F6:5E:30:94:EF:04
X509v3 Authority Key Identifier:
keyid:C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/E4EAD8C4353011EFBA2CCD98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.216.235.0/24
Signature Algorithm: sha256WithRSAEncryption
96:1a:23:b4:95:21:b4:04:b4:a0:6d:fe:5c:9e:70:b0:f8:40:
54:d8:13:fa:4d:cc:d6:f6:97:c0:24:c2:09:19:ac:38:24:89:
25:d6:ca:e3:e8:b8:5a:cd:20:23:3c:ac:98:cf:8d:e4:df:d8:
26:ad:dc:2a:78:0c:38:b7:6d:c6:06:fb:7c:46:94:df:b6:ef:
e4:8d:cb:75:25:f1:1d:46:ae:8c:84:70:97:4d:f6:22:83:50:
e8:5d:4a:8d:7b:49:4d:d4:0e:69:15:7e:da:15:65:62:32:82:
af:fd:f7:17:53:8f:f2:b4:77:7f:d2:69:22:e8:4b:69:f3:95:
75:14:07:bc:97:8c:22:a8:fb:0a:1b:d9:55:bf:8b:bf:a0:c3:
fb:91:de:0c:98:ac:17:6c:24:ea:f4:cb:9e:bf:5a:f6:b2:c4:
14:94:8f:5d:5e:89:66:17:86:41:15:2b:5c:e1:8e:06:9f:1e:
70:1f:d4:38:8e:46:a3:2d:13:80:21:86:49:4f:fd:bf:c0:90:
cb:21:c5:92:32:bd:ff:a6:62:6e:d2:c2:ae:2e:96:66:f3:71:
79:47:e3:28:c1:0f:7c:d8:0b:e0:2e:e2:51:5f:f4:a4:12:a9:
d5:ff:fe:77:d1:60:74:6b:cb:17:ea:43:e8:73:94:5e:5f:3a:
13:52:c3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:54 2025 by rpki-client