Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/96163DC8C69F11EFBA5F5C9C762E951A.roa
File: 96163DC8C69F11EFBA5F5C9C762E951A.roa (raw, json)
Hash identifier: k71/777s5erRKgxpYWq6gvoI4GlPtT++ZJIu329MnJk=
Subject key identifier: 38:44:02:8D:42:F9:DD:09:F8:E7:04:F5:1D:E8:CF:3B:B6:DE:49:8C
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0491
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/96163DC8C69F11EFBA5F5C9C762E951A.roa
Signing time: Mon 30 Dec 2024 11:16:59 +0000
ROA not before: Mon 30 Dec 2024 11:16:56 +0000
ROA not after: Wed 31 Dec 2025 11:16:56 +0000
asID: 329007
IP address blocks: 196.251.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1169 (0x491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:16:56 2024 GMT
Not After : Dec 31 11:16:56 2025 GMT
Subject: CN=6772812b-b9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:00:e9:e1:42:a9:f0:6e:1d:cc:97:6c:71:
db:79:8b:ce:a4:c9:7c:d9:79:83:0d:12:7b:40:6c:
7b:e2:02:5a:6d:b1:9d:87:af:8b:2f:92:ff:81:c0:
1b:b6:68:c5:0f:40:39:a3:2a:87:64:3c:00:e7:4c:
b9:c5:88:36:20:c4:7d:a4:02:2c:e7:a7:a2:09:51:
8d:e7:2b:62:02:53:d5:66:1e:cc:be:a2:83:dc:6d:
d1:6c:10:99:f1:af:bb:2a:8c:ef:57:a0:33:fd:85:
b7:ff:1a:fb:f6:26:ec:c0:3c:a7:37:7f:9b:c1:27:
74:10:8e:d3:8f:c5:77:d6:cc:2e:f3:89:fe:61:55:
ad:02:17:20:d9:e0:92:5d:20:ae:fc:df:86:5a:53:
ee:e6:f0:38:f8:2d:81:cc:72:3e:a7:67:cd:63:22:
00:d5:ee:b8:d1:1d:49:82:11:7d:52:7d:fe:c3:2d:
d5:f8:df:78:43:3e:dc:bc:e8:73:70:75:9b:0d:8f:
26:ee:0c:c2:71:97:a2:05:d7:1a:ec:55:bc:f5:99:
46:a3:a0:40:f7:64:e5:55:41:af:42:c3:bb:b8:65:
f2:f1:f3:3d:1b:02:bf:75:43:51:95:68:71:88:51:
56:b0:b2:de:95:9a:25:0e:32:bd:79:6f:6d:1f:81:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:44:02:8D:42:F9:DD:09:F8:E7:04:F5:1D:E8:CF:3B:B6:DE:49:8C
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/96163DC8C69F11EFBA5F5C9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.85.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c2:0f:82:a6:f8:e2:ec:b5:8f:b8:09:96:c3:b4:45:07:fe:
14:72:76:56:e4:5b:25:55:fd:50:f5:9f:8b:91:66:2a:c4:45:
b0:8f:63:8c:3a:be:af:26:35:f3:e9:0b:84:e4:ed:66:64:c4:
23:06:cc:74:2e:9b:f3:00:d9:f5:49:50:82:60:cd:db:c1:8c:
d6:4c:04:88:57:ed:f4:df:78:63:27:d9:6b:e4:a8:53:5c:a0:
8d:aa:04:1e:36:15:c6:e0:01:36:9e:e7:35:d7:6f:a2:05:f8:
b2:f8:f6:ba:fa:06:c2:0b:7d:1e:22:34:f4:04:1d:0f:24:24:
ee:3c:a2:31:d8:e7:9b:85:04:a8:c0:f5:de:02:b4:eb:87:7f:
ec:40:af:9a:79:53:e9:15:83:38:9c:74:12:12:24:fa:d6:95:
e2:d0:c6:e3:8c:d5:cf:97:3c:58:25:72:79:e6:a5:14:c0:ee:
31:d2:d6:47:a5:d4:dd:2d:d5:f1:96:f1:c8:81:80:b7:5b:1c:
3b:38:b5:96:dd:d4:a3:81:0d:05:0e:76:12:cd:ec:d4:36:db:
25:e3:c7:5f:b7:c9:d4:a7:0a:c2:1c:01:64:c7:45:6d:95:0b:
70:cb:3d:79:ae:dd:60:9f:e7:c1:62:24:fc:14:e8:ec:61:b8:
77:d2:e1:d1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBJEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNDEyMzAxMTE2NTZaFw0yNTEyMzExMTE2NTZaMBgxFjAU
BgNVBAMTDTY3NzI4MTJiLWI5ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC01wDp4UKp8G4dzJdscdt5i86kyXzZeYMNEntAbHviAlptsZ2Hr4svkv+B
wBu2aMUPQDmjKodkPADnTLnFiDYgxH2kAiznp6IJUY3nK2ICU9VmHsy+ooPcbdFs
EJnxr7sqjO9XoDP9hbf/Gvv2JuzAPKc3f5vBJ3QQjtOPxXfWzC7zif5hVa0CFyDZ
4JJdIK7834ZaU+7m8Dj4LYHMcj6nZ81jIgDV7rjRHUmCEX1Sff7DLdX433hDPty8
6HNwdZsNjybuDMJxl6IF1xrsVbz1mUajoED3ZOVVQa9Cw7u4ZfLx8z0bAr91Q1GV
aHGIUVawst6VmiUOMr15b20fgUiHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUOEQC
jUL53Qn45wT1HejPO7beSYwwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3Lzk2MTYzREM4QzY5RjExRUZCQTVGNUM5Qzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+1UwDQYJKoZIhvcNAQEL
BQADggEBADjCD4Km+OLstY+4CZbDtEUH/hRydlbkWyVV/VD1n4uRZirERbCPY4w6
vq8mNfPpC4Tk7WZkxCMGzHQum/MA2fVJUIJgzdvBjNZMBIhX7fTfeGMn2WvkqFNc
oI2qBB42FcbgATae5zXXb6IF+LL49rr6BsILfR4iNPQEHQ8kJO48ojHY55uFBKjA
9d4CtOuHf+xAr5p5U+kVgzicdBISJPrWleLQxuOM1c+XPFglcnnmpRTA7jHS1kel
1N0t1fGW8ciBgLdbHDs4tZbd1KOBDQUOdhLN7NQ22yXjx1+3ydSnCsIcAWTHRW2V
C3DLPXmu3WCf58FiJPwU6OxhuHfS4dE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:34:40 2025 by rpki-client