Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7C6A0308C36D11EFB958F255762E951A.roa
File: 7C6A0308C36D11EFB958F255762E951A.roa (raw, json)
Hash identifier: lrxDYkpDdVZ0eOw7f8BPwMKgMmRg/D+cR9LvLGLsIzM=
Subject key identifier: F4:22:70:2F:DD:BA:A1:C5:2C:53:00:18:A0:36:8F:E8:CF:5A:9B:0E
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0470
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7C6A0308C36D11EFB958F255762E951A.roa
Signing time: Thu 26 Dec 2024 09:40:48 +0000
ROA not before: Thu 26 Dec 2024 09:40:44 +0000
ROA not after: Wed 24 Dec 2025 09:40:44 +0000
asID: 329007
IP address blocks: 196.251.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1136 (0x470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 26 09:40:44 2024 GMT
Not After : Dec 24 09:40:44 2025 GMT
Subject: CN=676d24a0-3c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d3:2e:ff:b6:27:10:76:c5:ee:e4:c7:a7:21:
fb:9f:6e:25:83:60:c4:1c:c5:97:21:78:c3:00:22:
10:80:b7:57:e7:77:a1:95:45:0a:cd:da:dd:b8:33:
66:f1:30:5a:ae:6f:a7:98:5b:13:4f:be:39:f3:69:
d4:12:a1:6a:cc:68:b4:16:31:76:4d:b6:62:8d:3e:
15:5e:81:5c:44:3c:9d:b0:9c:38:7d:53:ba:31:a3:
48:2d:2c:1f:0a:88:d1:36:4c:1c:4d:2b:f9:39:a6:
31:6f:4a:5f:0d:b9:d1:c2:de:43:de:a1:0c:60:f2:
dd:bb:eb:c5:13:55:35:af:9e:56:6f:1d:20:0e:49:
04:1b:6e:68:d9:5b:a7:08:83:37:e6:aa:e5:96:7b:
c1:e0:bf:12:ae:f9:99:70:bf:5b:27:55:b3:2f:db:
87:58:5a:f6:25:5f:7f:8f:65:aa:20:60:6b:ba:a5:
29:c8:16:aa:9b:64:11:d7:93:f8:15:33:c5:e3:e7:
9d:1e:2b:2f:bf:32:78:8a:ba:04:6f:96:a5:ee:ab:
a5:c1:4f:62:c6:14:b7:14:f6:1e:30:6a:55:d9:aa:
6f:26:40:68:1b:bf:ee:5a:4f:7d:12:f3:bb:cb:38:
ef:da:50:a6:d5:89:a5:28:3d:05:23:1c:dc:75:da:
44:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:22:70:2F:DD:BA:A1:C5:2C:53:00:18:A0:36:8F:E8:CF:5A:9B:0E
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7C6A0308C36D11EFB958F255762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.101.0/24
Signature Algorithm: sha256WithRSAEncryption
65:94:40:27:34:03:cb:5c:41:4f:56:19:f3:f5:9f:a9:72:0c:
6a:04:5d:eb:66:e2:82:44:f9:74:a7:a7:7b:ea:46:46:f8:21:
56:02:01:56:de:1b:bd:e1:f2:e4:8b:66:6c:3a:89:85:c9:de:
3f:3a:d4:21:90:94:d0:dc:a6:9c:9e:0e:26:d7:3d:d6:52:a7:
2f:3b:3c:20:0e:a8:67:95:40:ae:32:7d:22:68:60:9e:95:e5:
ce:50:94:7b:cd:5b:a6:b3:5e:56:e9:c5:2a:ee:04:23:14:c2:
b3:bc:30:09:c8:74:b4:9a:5f:1c:e3:df:6b:25:99:96:78:62:
8c:82:ed:b2:45:a1:04:78:8d:b5:3e:8d:e0:09:ae:98:d7:89:
8a:82:62:9c:f5:b6:93:02:50:da:d4:4c:a6:c6:2a:ac:ea:ee:
dc:d6:8e:7b:71:d7:cb:19:08:5f:22:f9:ce:e0:8f:a3:9c:f1:
e2:cd:bb:bc:60:61:7d:27:e8:2b:af:2a:a4:11:e2:4c:34:bd:
19:db:07:66:72:9c:83:82:80:0c:87:eb:3e:f6:75:8f:a6:9d:
4a:d4:59:1d:e8:56:da:e9:aa:57:11:89:95:8a:cd:3d:a7:83:
a1:58:da:7d:a3:a3:6f:47:af:80:63:8d:94:77:80:81:d9:9c:
bc:28:e1:9c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNDEyMjYwOTQwNDRaFw0yNTEyMjQwOTQwNDRaMBgxFjAU
BgNVBAMTDTY3NmQyNGEwLTNjNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDg0y7/ticQdsXu5MenIfufbiWDYMQcxZcheMMAIhCAt1fnd6GVRQrN2t24
M2bxMFqub6eYWxNPvjnzadQSoWrMaLQWMXZNtmKNPhVegVxEPJ2wnDh9U7oxo0gt
LB8KiNE2TBxNK/k5pjFvSl8NudHC3kPeoQxg8t2768UTVTWvnlZvHSAOSQQbbmjZ
W6cIgzfmquWWe8HgvxKu+Zlwv1snVbMv24dYWvYlX3+PZaogYGu6pSnIFqqbZBHX
k/gVM8Xj550eKy+/MniKugRvlqXuq6XBT2LGFLcU9h4walXZqm8mQGgbv+5aT30S
87vLOO/aUKbViaUoPQUjHNx12kRBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU9CJw
L926ocUsUwAYoDaP6M9amw4wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzdDNkEwMzA4QzM2RDExRUZCOTU4RjI1NTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+2UwDQYJKoZIhvcNAQEL
BQADggEBAGWUQCc0A8tcQU9WGfP1n6lyDGoEXetm4oJE+XSnp3vqRkb4IVYCAVbe
G73h8uSLZmw6iYXJ3j861CGQlNDcppyeDibXPdZSpy87PCAOqGeVQK4yfSJoYJ6V
5c5QlHvNW6azXlbpxSruBCMUwrO8MAnIdLSaXxzj32slmZZ4YoyC7bJFoQR4jbU+
jeAJrpjXiYqCYpz1tpMCUNrUTKbGKqzq7tzWjntx18sZCF8i+c7gj6Oc8eLNu7xg
YX0n6CuvKqQR4kw0vRnbB2ZynIOCgAyH6z72dY+mnUrUWR3oVtrpqlcRiZWKzT2n
g6FY2n2jo29Hr4BjjZR3gIHZnLwo4Zw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:09:49 2025 by rpki-client