Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/481D9322C6A011EF9FD3D5A1762E951A.roa
File: 481D9322C6A011EF9FD3D5A1762E951A.roa (raw, json)
Hash identifier: Mw5J5L/oGWbPxQuXdBHv/XZrK/BkXYunN3sMICS20+Y=
Subject key identifier: A2:8C:3C:97:EE:C5:CE:46:AE:E6:82:AC:0B:0E:06:C8:79:1B:19:C3
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04A7
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/481D9322C6A011EF9FD3D5A1762E951A.roa
Signing time: Mon 30 Dec 2024 11:21:58 +0000
ROA not before: Mon 30 Dec 2024 11:21:54 +0000
ROA not after: Wed 24 Dec 2025 11:21:54 +0000
asID: 329007
IP address blocks: 196.251.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1191 (0x4a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:21:54 2024 GMT
Not After : Dec 24 11:21:54 2025 GMT
Subject: CN=67728256-a872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:eb:5f:42:db:b1:32:42:96:6d:f5:af:46:
4e:41:f7:0c:27:dc:5a:32:d2:d9:1a:88:6c:38:7d:
0c:3a:4d:1f:c0:49:cd:a5:aa:3a:6d:e2:65:e7:df:
04:cb:b1:fa:59:6b:d9:80:59:0d:c7:70:ba:ef:d6:
b7:fb:fc:8e:27:9f:41:37:6f:ed:90:82:a9:5e:27:
68:b5:73:cb:08:f2:2f:47:80:9c:79:08:64:e7:9b:
a2:b8:5e:4e:6a:b0:45:56:22:c3:50:4c:7c:fd:08:
e9:ab:a7:dc:64:b6:25:5b:a3:55:82:58:33:11:9d:
35:2f:9b:29:b2:74:d7:f6:db:86:6b:6c:4d:53:47:
41:12:67:44:57:64:5d:8b:15:a3:7e:1b:dd:dd:52:
94:7e:ab:6c:82:59:ef:80:49:a5:9e:84:8b:29:03:
4a:9b:60:18:fe:6f:fe:83:b3:18:e6:85:c9:b6:f3:
07:6f:67:b2:fb:6a:ca:92:80:d9:39:cd:c6:4e:50:
5b:64:bb:dd:e7:fc:c6:97:4a:ec:b9:b8:e8:6a:84:
34:46:77:5c:0d:ad:38:f7:66:fe:51:2d:2c:25:4b:
84:d1:b3:2a:20:06:0b:e3:93:bc:92:4c:b7:cb:b1:
b0:08:9d:1d:87:d2:9c:a4:52:3b:f5:59:1f:68:ae:
a6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8C:3C:97:EE:C5:CE:46:AE:E6:82:AC:0B:0E:06:C8:79:1B:19:C3
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/481D9322C6A011EF9FD3D5A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.111.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ea:1e:a7:df:06:0f:cb:b7:98:be:98:0d:ae:fe:9e:74:b2:
83:ea:20:39:e9:c0:62:d6:e2:b0:17:8a:ad:be:02:17:fd:fa:
24:68:6f:02:bc:81:ef:9a:cc:01:1c:ff:28:ea:f0:71:f2:44:
d7:1f:c2:c9:fa:5b:77:86:09:d4:6b:2a:52:f3:93:b3:b2:5b:
da:d8:10:e5:f4:6f:14:4a:86:23:17:98:64:dc:26:5d:da:e2:
94:c9:fe:0b:48:cd:e9:b9:2f:f0:fa:51:90:56:1d:f5:5e:b5:
61:71:77:39:ff:fa:16:26:10:57:d4:c5:0e:e0:67:87:00:3f:
fe:9e:f9:2b:41:be:20:b0:b7:5f:fe:98:d5:68:a7:72:eb:67:
ac:02:1b:11:f4:1b:87:7d:be:13:5a:fd:56:8d:da:5f:d2:8a:
ce:1f:33:ce:61:51:5b:28:ca:16:04:75:a6:64:3d:77:32:4a:
73:86:f7:5a:f9:b3:cc:ab:a3:b4:2b:af:75:e3:0a:20:d4:71:
77:d0:40:b3:e2:ab:6d:de:f8:77:49:ee:7c:60:2f:31:c1:b3:
93:9d:9d:b7:f2:e0:83:0f:c5:d4:e8:cd:45:f3:a4:1a:02:31:
de:c7:a3:fd:3d:eb:b4:2d:ab:3e:2b:a0:be:a7:f2:df:61:39:
f9:ad:ba:d9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNDEyMzAxMTIxNTRaFw0yNTEyMjQxMTIxNTRaMBgxFjAU
BgNVBAMTDTY3NzI4MjU2LWE4NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEcutfQtuxMkKWbfWvRk5B9wwn3Foy0tkaiGw4fQw6TR/ASc2lqjpt4mXn
3wTLsfpZa9mAWQ3HcLrv1rf7/I4nn0E3b+2QgqleJ2i1c8sI8i9HgJx5CGTnm6K4
Xk5qsEVWIsNQTHz9COmrp9xktiVbo1WCWDMRnTUvmymydNf224ZrbE1TR0ESZ0RX
ZF2LFaN+G93dUpR+q2yCWe+ASaWehIspA0qbYBj+b/6Dsxjmhcm28wdvZ7L7asqS
gNk5zcZOUFtku93n/MaXSuy5uOhqhDRGd1wNrTj3Zv5RLSwlS4TRsyogBgvjk7yS
TLfLsbAInR2H0pykUjv1WR9orqYpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUoow8
l+7Fzkau5oKsCw4GyHkbGcMwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzQ4MUQ5MzIyQzZBMDExRUY5RkQzRDVBMTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+28wDQYJKoZIhvcNAQEL
BQADggEBAB3qHqffBg/Lt5i+mA2u/p50soPqIDnpwGLW4rAXiq2+Ahf9+iRobwK8
ge+azAEc/yjq8HHyRNcfwsn6W3eGCdRrKlLzk7OyW9rYEOX0bxRKhiMXmGTcJl3a
4pTJ/gtIzem5L/D6UZBWHfVetWFxdzn/+hYmEFfUxQ7gZ4cAP/6e+StBviCwt1/+
mNVop3LrZ6wCGxH0G4d9vhNa/VaN2l/Sis4fM85hUVsoyhYEdaZkPXcySnOG91r5
s8yro7Qrr3XjCiDUcXfQQLPiq23e+HdJ7nxgLzHBs5Odnbfy4IMPxdTozUXzpBoC
Md7Ho/0967Qtqz4roL6n8t9hOfmtutk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:46 2025 by rpki-client