Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/669BE608E87B11EFAE6198AA762E951A.roa
File: 669BE608E87B11EFAE6198AA762E951A.roa (raw, json)
Hash identifier: OIWTKsUi5DBGBRct1PS+R4gqMOk4F+TUvBQUn3UMi1Q=
Subject key identifier: BF:D5:A7:2E:72:C6:97:26:B3:2B:5A:10:22:9F:69:38:88:6E:6A:26
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05FB
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/669BE608E87B11EFAE6198AA762E951A.roa
Signing time: Tue 11 Feb 2025 13:23:37 +0000
ROA not before: Tue 11 Feb 2025 13:23:32 +0000
ROA not after: Wed 11 Feb 2026 13:23:32 +0000
asID: 401115
IP address blocks: 196.251.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1531 (0x5fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 11 13:23:32 2025 GMT
Not After : Feb 11 13:23:32 2026 GMT
Subject: CN=67ab4f59-b9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:59:ed:d2:9a:fb:53:4a:d3:5f:3a:69:b3:
38:15:a1:2d:f7:96:6c:ed:f4:f6:2d:77:d1:28:a1:
dc:65:83:19:6f:3b:9b:8d:78:f9:04:6d:9d:a4:66:
da:9e:6f:76:ce:8c:ad:b1:56:e6:9f:86:39:7a:e6:
87:c7:bb:94:0c:48:f7:6a:42:f8:ef:6f:f4:6b:b6:
ca:3d:b9:ae:42:9d:8c:4c:d7:5f:e1:a7:64:57:b8:
3a:54:9c:b9:e2:1c:28:34:c3:19:09:a9:52:8d:9c:
74:71:0a:af:61:a9:71:2b:96:6a:3c:92:41:c3:03:
b8:f0:89:87:c8:db:c1:a2:79:e4:fa:17:69:66:5f:
35:4f:d5:ab:00:da:e3:7d:22:8d:90:3d:56:77:60:
dc:de:0f:76:68:ba:1b:cf:7e:c2:38:78:34:a4:a4:
ea:e7:15:93:b6:3f:31:f8:dc:fb:0b:c0:21:e5:37:
13:2d:a2:8f:62:36:7e:33:17:04:20:37:88:8f:c5:
a4:d9:16:8f:e7:fc:05:08:0d:08:1b:62:0f:6e:51:
89:da:85:3e:27:86:e9:8e:e1:dd:ed:85:85:d9:95:
f4:48:3c:94:fb:14:83:97:34:4a:3d:f1:be:2a:59:
28:91:58:f1:67:5e:ab:2f:6b:fb:b1:50:65:dc:46:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D5:A7:2E:72:C6:97:26:B3:2B:5A:10:22:9F:69:38:88:6E:6A:26
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/669BE608E87B11EFAE6198AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.84.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:2e:ad:35:8c:c4:56:e0:35:a9:c2:d7:a4:d8:cc:44:93:2c:
de:39:09:56:25:d6:e5:8d:41:b3:5d:91:3f:22:03:a0:a3:ef:
10:2d:cf:8e:94:58:6e:71:42:43:10:d6:79:df:9c:14:26:c7:
87:23:a9:91:e5:5a:f7:e4:d0:c5:77:2b:f3:11:f0:91:e4:84:
cd:36:67:4f:fe:11:e6:f3:9a:5b:45:69:92:12:8b:ae:f5:1d:
c0:36:de:dd:b8:88:63:9f:84:37:92:d3:58:f9:1d:a9:89:10:
f5:13:fd:38:5d:43:55:9e:6c:d1:05:57:aa:b4:08:94:a7:44:
79:8e:d3:5c:e2:d3:b1:83:f5:ae:b3:48:ff:c9:31:43:52:cc:
32:cd:60:fb:3d:7a:0b:ce:d2:d0:b2:25:1d:02:36:68:90:36:
fa:31:fe:31:ab:56:d7:51:96:2f:f6:03:8f:96:f6:8a:e4:66:
56:73:cf:ac:0e:6e:c5:c1:25:8d:d1:73:88:48:ef:b4:09:0c:
76:2f:ff:62:df:5a:46:fc:69:37:3d:ba:4a:06:7e:65:7b:34:
a5:d7:93:79:67:d0:3b:4f:5e:93:20:69:99:31:11:d1:58:98:
e0:93:3f:7b:e8:83:28:ba:b7:92:f9:fd:e9:fb:ee:4c:01:c9:
e2:d2:e3:11
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBfswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAyMTExMzIzMzJaFw0yNjAyMTExMzIzMzJaMBgxFjAU
BgNVBAMTDTY3YWI0ZjU5LWI5YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKbVnt0pr7U0rTXzppszgVoS33lmzt9PYtd9EoodxlgxlvO5uNePkEbZ2k
Ztqeb3bOjK2xVuafhjl65ofHu5QMSPdqQvjvb/Rrtso9ua5CnYxM11/hp2RXuDpU
nLniHCg0wxkJqVKNnHRxCq9hqXErlmo8kkHDA7jwiYfI28GieeT6F2lmXzVP1asA
2uN9Io2QPVZ3YNzeD3ZouhvPfsI4eDSkpOrnFZO2PzH43PsLwCHlNxMtoo9iNn4z
FwQgN4iPxaTZFo/n/AUIDQgbYg9uUYnahT4nhumO4d3thYXZlfRIPJT7FIOXNEo9
8b4qWSiRWPFnXqsva/uxUGXcRhg3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUv9Wn
LnLGlyazK1oQIp9pOIhuaiYwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzY2OUJFNjA4RTg3QjExRUZBRTYxOThBQTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+1QwDQYJKoZIhvcNAQEL
BQADggEBAKIurTWMxFbgNanC16TYzESTLN45CVYl1uWNQbNdkT8iA6Cj7xAtz46U
WG5xQkMQ1nnfnBQmx4cjqZHlWvfk0MV3K/MR8JHkhM02Z0/+EebzmltFaZISi671
HcA23t24iGOfhDeS01j5HamJEPUT/ThdQ1WebNEFV6q0CJSnRHmO01zi07GD9a6z
SP/JMUNSzDLNYPs9egvO0tCyJR0CNmiQNvox/jGrVtdRli/2A4+W9orkZlZzz6wO
bsXBJY3Rc4hI77QJDHYv/2LfWkb8aTc9ukoGfmV7NKXXk3ln0DtPXpMgaZkxEdFY
mOCTP3vogyi6t5L5/en77kwByeLS4xE=
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:23 2025 by rpki-client