Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0759C768E87C11EFA08C0FAF762E951A.roa
File: 0759C768E87C11EFA08C0FAF762E951A.roa (raw, json)
Hash identifier: cskhgsoUTkZg8/0xPHGAvIzMSvziTXIf5isuFsnPWzc=
Subject key identifier: B0:C5:7F:5A:CF:FF:8E:2D:B7:13:0E:04:CE:DC:2E:25:BE:B0:4B:98
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 060C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0759C768E87C11EFA08C0FAF762E951A.roa
Signing time: Tue 11 Feb 2025 13:28:07 +0000
ROA not before: Tue 11 Feb 2025 13:28:03 +0000
ROA not after: Wed 11 Feb 2026 13:28:03 +0000
asID: 401109
IP address blocks: 196.251.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1548 (0x60c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 11 13:28:03 2025 GMT
Not After : Feb 11 13:28:03 2026 GMT
Subject: CN=67ab5067-5b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:bd:50:03:86:13:e9:d0:02:b9:f4:15:a1:
80:43:63:16:57:a1:6b:6c:d2:7d:34:c3:b9:59:af:
75:63:48:e5:be:6e:85:a5:5a:ec:86:ef:2e:52:78:
9c:1c:10:88:e9:9e:fd:7c:91:5e:50:1b:fa:0b:e4:
d7:12:b6:a8:ab:ae:f8:b1:a8:21:0a:3a:41:7b:e7:
48:cb:1b:36:6e:c4:43:71:88:d1:b9:47:f6:46:ec:
96:d2:6f:e3:ab:04:b7:54:70:03:66:ce:e5:91:9b:
ec:e5:f6:8a:d5:35:35:7b:58:07:90:d0:3f:b4:7b:
95:07:ad:32:f6:b6:4f:04:e0:26:d5:1b:61:5a:5b:
2b:bf:db:6d:10:9a:06:7e:37:35:64:cb:0a:0b:0f:
57:1b:08:f7:ab:15:92:c9:23:5f:1e:d8:d5:e2:4b:
bb:80:1a:1a:d8:c9:bf:b4:94:d4:49:3f:04:ce:e7:
70:3b:5f:5c:9b:0b:f7:d3:c2:f9:d4:05:ff:a3:5c:
bc:2c:64:9d:0c:ba:32:79:06:9a:6a:bd:00:cb:d4:
d8:dc:f5:df:8f:d0:76:e3:bb:51:9e:29:82:f2:cd:
ec:95:d8:24:51:50:73:81:be:24:4c:b2:67:2e:c0:
c5:a5:86:db:62:09:22:8a:62:24:7a:03:ae:0b:27:
8f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C5:7F:5A:CF:FF:8E:2D:B7:13:0E:04:CE:DC:2E:25:BE:B0:4B:98
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0759C768E87C11EFA08C0FAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.95.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:0d:06:b4:00:59:ec:0f:b8:0f:c2:29:aa:7c:23:70:46:31:
38:23:0e:7f:21:d7:e8:20:d0:f1:1d:25:8b:32:c3:fc:53:28:
e7:f6:60:16:3e:a1:27:8d:38:c8:5c:3c:03:f0:73:c9:19:02:
83:c8:d5:ac:1b:fb:85:3e:95:c5:83:f7:aa:d7:e5:bf:f4:b5:
cb:55:19:fb:62:44:6f:a5:a7:01:7a:ae:38:d3:7c:70:4a:f9:
79:e5:95:ae:43:5e:7a:b8:35:19:f7:cf:84:3b:87:06:2c:28:
29:80:e8:b3:4f:94:7b:40:51:ea:16:e8:3c:16:d5:2e:9b:68:
c6:db:1e:f9:cb:fd:2f:df:c8:a0:03:c8:e2:f7:49:ca:35:fc:
86:06:8b:84:b2:b7:97:7a:ec:81:e5:7e:42:22:2d:d8:ed:c0:
43:02:99:87:11:5f:c9:07:40:69:48:51:54:65:9e:b1:5d:f7:
88:81:62:ad:4f:5b:d0:c1:4a:05:fe:34:0d:e4:8d:11:c5:a9:
df:2e:fb:db:42:e2:52:f8:08:8a:fd:b9:3e:59:05:59:df:86:
21:b7:08:6d:ac:62:7a:da:e3:0b:d0:85:c8:d6:4f:16:1c:ae:
9e:08:9c:59:5f:ce:e4:95:35:6b:b2:3f:cf:82:e5:53:a7:30:
13:75:4d:a9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAyMTExMzI4MDNaFw0yNjAyMTExMzI4MDNaMBgxFjAU
BgNVBAMTDTY3YWI1MDY3LTViMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4Wb1QA4YT6dACufQVoYBDYxZXoWts0n00w7lZr3VjSOW+boWlWuyG7y5S
eJwcEIjpnv18kV5QG/oL5NcStqirrvixqCEKOkF750jLGzZuxENxiNG5R/ZG7JbS
b+OrBLdUcANmzuWRm+zl9orVNTV7WAeQ0D+0e5UHrTL2tk8E4CbVG2FaWyu/220Q
mgZ+NzVkywoLD1cbCPerFZLJI18e2NXiS7uAGhrYyb+0lNRJPwTO53A7X1ybC/fT
wvnUBf+jXLwsZJ0MujJ5BppqvQDL1Njc9d+P0Hbju1GeKYLyzeyV2CRRUHOBviRM
smcuwMWlhttiCSKKYiR6A64LJ4/BAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsMV/
Ws//ji23Ew4EztwuJb6wS5gwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzA3NTlDNzY4RTg3QzExRUZBMDhDMEZBRjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+18wDQYJKoZIhvcNAQEL
BQADggEBAK0NBrQAWewPuA/CKap8I3BGMTgjDn8h1+gg0PEdJYsyw/xTKOf2YBY+
oSeNOMhcPAPwc8kZAoPI1awb+4U+lcWD96rX5b/0tctVGftiRG+lpwF6rjjTfHBK
+Xnlla5DXnq4NRn3z4Q7hwYsKCmA6LNPlHtAUeoW6DwW1S6baMbbHvnL/S/fyKAD
yOL3Sco1/IYGi4Syt5d67IHlfkIiLdjtwEMCmYcRX8kHQGlIUVRlnrFd94iBYq1P
W9DBSgX+NA3kjRHFqd8u+9tC4lL4CIr9uT5ZBVnfhiG3CG2sYnra4wvQhcjWTxYc
rp4InFlfzuSVNWuyP8+C5VOnMBN1Tak=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:51:47 2025 by rpki-client