Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/50A88FD8F9C211EF95A2B360762E951A.roa
File: 50A88FD8F9C211EF95A2B360762E951A.roa (raw, json)
Hash identifier: cr88gzng9AlrJw+Jt+AIyLDrpQJLkgx8iB8swVH4qZ0=
Subject key identifier: 98:D8:61:C2:8B:77:3D:08:96:7B:1F:0E:86:1E:EF:23:E4:09:E5:D0
Certificate issuer: /CN=F362412ERI/serialNumber=313CBFEF72A426B047884E074BB1BB0B02FC5649
Certificate serial: 04
Authority key identifier: 31:3C:BF:EF:72:A4:26:B0:47:88:4E:07:4B:B1:BB:0B:02:FC:56:49
Authority info access: rsync://rpki.afrinic.net/repository/ripe/MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/50A88FD8F9C211EF95A2B360762E951A.roa
Signing time: Wed 05 Mar 2025 13:04:04 +0000
ROA not before: Wed 05 Mar 2025 13:04:01 +0000
ROA not after: Sun 05 Mar 2045 13:04:01 +0000
asID: 36962
IP address blocks: 213.193.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362412ERI
Validity
Not Before: Mar 5 13:04:01 2025 GMT
Not After : Mar 5 13:04:01 2045 GMT
Subject: CN=67c84bc4-a77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:f2:f7:bd:0e:59:3f:29:bc:aa:8a:d4:e4:
dd:9d:48:14:42:38:f5:4a:30:5c:56:ab:cf:d6:42:
e9:86:56:f3:51:05:0d:89:ae:31:b7:11:3d:00:36:
11:db:0b:25:cd:f9:51:ec:3a:b5:84:ca:f8:45:63:
48:2a:45:2d:d8:67:89:87:12:f7:a6:22:10:ed:ca:
a8:99:d2:b8:bd:26:90:00:bb:05:0d:78:19:5d:dc:
3f:50:e9:16:13:17:3d:b9:df:66:86:eb:80:d0:2a:
a4:df:b5:a0:4c:4a:69:89:89:71:df:fc:0e:eb:0b:
33:fa:14:e6:bb:85:ba:7f:12:28:4f:4c:a4:64:7f:
28:48:1f:13:43:04:f3:ef:fc:70:4b:cc:5d:ea:f4:
98:f0:b3:26:c7:2b:2b:76:c7:ea:d9:b2:45:15:a3:
49:2a:69:55:78:74:7a:eb:e8:52:d1:f7:5e:21:6b:
78:3d:f5:57:3d:ff:99:4d:5d:7b:2b:03:00:84:6a:
26:e9:20:32:ab:10:84:ce:33:bd:60:a7:a1:e4:23:
33:b5:f4:d0:ed:c1:84:a4:91:05:17:b1:85:d0:0c:
8e:ae:52:4d:30:04:f7:b3:64:22:4e:03:34:f1:57:
0c:37:96:89:71:82:76:7d:30:98:58:ee:89:b8:e7:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D8:61:C2:8B:77:3D:08:96:7B:1F:0E:86:1E:EF:23:E4:09:E5:D0
X509v3 Authority Key Identifier:
keyid:31:3C:BF:EF:72:A4:26:B0:47:88:4E:07:4B:B1:BB:0B:02:FC:56:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/50A88FD8F9C211EF95A2B360762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
213.193.32.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:ae:ba:1c:f5:3e:dd:76:c3:02:18:0d:3d:de:ce:27:bf:68:
68:2b:d3:16:60:67:8d:6a:04:a7:05:80:62:1e:fc:6d:fe:d2:
18:19:46:18:9c:a1:7c:4b:7e:c6:42:29:81:ec:f8:74:93:91:
82:d7:7a:13:4e:72:32:fc:2d:b3:1d:5e:b7:d9:55:40:5c:31:
5d:39:5e:88:64:bf:5d:f9:ea:9b:5f:7b:46:3c:fb:a4:ae:83:
37:99:1c:a4:0b:90:64:29:e7:b7:4e:ab:73:8d:8f:eb:a6:4e:
9f:ed:83:f5:9e:35:c1:29:fc:77:01:8a:86:61:2b:42:08:3b:
90:59:4e:e7:77:7d:8c:c1:02:5d:e2:92:16:2b:96:ca:07:3a:
91:fd:3c:7a:97:01:98:bd:cd:8f:1a:7a:b5:df:46:d1:6e:a5:
09:cf:e2:9e:f7:4c:15:7a:b7:1a:38:3e:45:ba:b2:f2:33:a0:
68:b3:32:e5:cc:1d:dc:23:f2:34:76:27:61:d5:af:c4:5b:d0:
7c:a8:2c:1f:0a:c3:3a:bb:66:08:9b:71:f5:99:e2:04:6e:d8:
98:1f:9f:0c:a6:e4:d5:b2:15:01:f5:f5:3f:7f:e3:d2:11:dd:
98:18:9a:5d:40:a6:1c:1f:85:92:0f:20:f4:fd:56:ec:0f:b3:
01:a7:09:05
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
NDEyRVJJMTEwLwYDVQQFEygzMTNDQkZFRjcyQTQyNkIwNDc4ODRFMDc0QkIxQkIw
QjAyRkM1NjQ5MB4XDTI1MDMwNTEzMDQwMVoXDTQ1MDMwNTEzMDQwMVowGDEWMBQG
A1UEAxMNNjdjODRiYzQtYTc3ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL3H8ve9Dlk/KbyqitTk3Z1IFEI49UowXFarz9ZC6YZW81EFDYmuMbcRPQA2
EdsLJc35Uew6tYTK+EVjSCpFLdhniYcS96YiEO3KqJnSuL0mkAC7BQ14GV3cP1Dp
FhMXPbnfZobrgNAqpN+1oExKaYmJcd/8DusLM/oU5ruFun8SKE9MpGR/KEgfE0ME
8+/8cEvMXer0mPCzJscrK3bH6tmyRRWjSSppVXh0euvoUtH3XiFreD31Vz3/mU1d
eysDAIRqJukgMqsQhM4zvWCnoeQjM7X00O3BhKSRBRexhdAMjq5STTAE97NkIk4D
NPFXDDeWiXGCdn0wmFjuibjnAdUCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBSY2GHC
i3c9CJZ7Hw6GHu8j5Anl0DAfBgNVHSMEGDAWgBQxPL/vcqQmsEeITgdLsbsLAvxW
STAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjQxMkUvQjQzQzFENzJGOUMxMTFFRkExQzUyMzVDNzYyRTk1MUEvTVR5Xzcz
S2tKckJIaUU0SFM3RzdDd0w4VmtrLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L3JpcGUv
TVR5XzczS2tKckJIaUU0SFM3RzdDd0w4VmtrLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MjQxMkUvQjQzQzFENzJGOUMxMTFFRkExQzUyMzVDNzYyRTk1
MUEvNTBBODhGRDhGOUMyMTFFRjk1QTJCMzYwNzYyRTk1MUEucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9XBIDANBgkqhkiG9w0BAQsFAAOC
AQEApa66HPU+3XbDAhgNPd7OJ79oaCvTFmBnjWoEpwWAYh78bf7SGBlGGJyhfEt+
xkIpgez4dJORgtd6E05yMvwtsx1et9lVQFwxXTleiGS/Xfnqm197Rjz7pK6DN5kc
pAuQZCnnt06rc42P66ZOn+2D9Z41wSn8dwGKhmErQgg7kFlO53d9jMECXeKSFiuW
ygc6kf08epcBmL3Njxp6td9G0W6lCc/invdMFXq3Gjg+Rbqy8jOgaLMy5cwd3CPy
NHYnYdWvxFvQfKgsHwrDOrtmCJtx9ZniBG7YmB+fDKbk1bIVAfX1P3/j0hHdmBia
XUCmHB+Fkg8g9P1W7A+zAacJBQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:14:49 2025 by rpki-client