Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B3C3AC10C36C11EFADBA8651762E951A.roa
File: B3C3AC10C36C11EFADBA8651762E951A.roa (raw, json)
Hash identifier: IkxXFxA+xsDR+MeDcTbCF8qd8cUlqs6j/rgxkr8Tr9c=
Subject key identifier: A1:9C:27:A5:90:8E:F4:52:2C:65:8D:D1:51:8E:53:C9:E3:98:60:14
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0466
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B3C3AC10C36C11EFADBA8651762E951A.roa
Signing time: Thu 26 Dec 2024 09:35:11 +0000
ROA not before: Thu 26 Dec 2024 09:35:07 +0000
ROA not after: Fri 26 Dec 2025 09:35:07 +0000
asID: 329007
IP address blocks: 196.251.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1126 (0x466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 26 09:35:07 2024 GMT
Not After : Dec 26 09:35:07 2025 GMT
Subject: CN=676d234f-4b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:7d:1b:85:63:dd:c7:5d:36:3e:21:fc:b8:
a8:a6:7b:88:0d:43:d9:7c:6b:cd:f4:9e:e6:a4:17:
b6:c4:1e:7f:23:ba:9a:99:92:b5:27:ef:36:5e:8a:
0a:27:6e:e5:bb:26:e8:81:10:af:f4:76:8f:79:e6:
df:ca:3d:7c:b5:08:3b:e4:4f:a5:e9:0a:f9:5d:99:
5e:c1:65:c2:ce:b3:08:37:ba:5d:de:c2:13:e8:98:
82:d5:b0:78:5d:30:e7:d5:f3:3f:0c:ec:43:7e:96:
3b:af:12:30:0c:05:21:34:cf:53:85:38:4b:3e:19:
6a:cf:45:0e:2d:b2:28:5e:32:d5:78:20:53:62:46:
df:57:5d:b2:95:7c:fa:cd:d0:f9:21:62:d8:9d:ef:
29:d6:c9:dc:ec:21:99:9a:d0:7d:28:73:05:43:b0:
fd:d7:13:dc:26:bc:2d:e9:df:f4:4d:c5:44:c5:a3:
45:2e:8a:54:45:7d:5a:bb:db:04:ce:6d:40:65:ba:
bc:45:5e:78:5e:b5:c7:b7:5c:07:f9:d8:46:14:37:
13:89:8f:43:89:c6:95:c7:f6:80:43:64:72:04:c5:
b4:a3:ed:9d:41:98:44:7e:b5:3a:d9:64:d6:10:21:
d5:2c:cc:00:48:65:f3:5e:c9:9e:34:8c:01:be:c4:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9C:27:A5:90:8E:F4:52:2C:65:8D:D1:51:8E:53:C9:E3:98:60:14
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B3C3AC10C36C11EFADBA8651762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:60:6d:3a:29:78:1d:78:02:ed:fb:f0:db:14:8d:37:66:94:
5d:d1:dd:9a:d9:f0:6e:33:9a:38:d6:18:5a:fb:90:f9:69:21:
56:da:5b:3a:b8:a6:69:42:ba:e5:be:d8:bb:e1:f1:22:e7:9b:
08:d8:89:5b:5b:c0:bb:a9:87:7e:ed:fe:69:ae:f3:51:84:61:
ec:07:5a:d1:ee:1f:d0:32:7e:d3:91:5e:40:82:ed:22:0e:42:
be:58:ad:18:16:47:59:cf:40:ca:3f:a5:40:15:04:68:3f:d8:
cf:70:7c:fa:6b:d7:41:38:c5:39:67:77:82:37:9e:1c:45:88:
bc:68:53:f2:84:9c:07:a1:5c:84:45:05:71:3d:30:c2:88:a6:
73:f7:36:56:31:78:70:a5:b7:38:ad:35:a4:e2:a1:4b:4c:50:
a5:c1:b1:e4:38:96:01:b5:1f:21:75:6e:1a:89:5f:33:81:28:
dc:0f:78:36:06:9c:a8:72:04:af:c3:3a:8f:c3:51:6e:f0:31:
46:6a:9b:b1:c7:7a:52:d2:fe:e4:c4:46:f5:de:0c:fc:b0:af:
1c:dc:50:37:fb:f0:8e:cc:55:53:48:f3:f0:c3:78:a1:16:2f:
aa:4e:56:d0:21:cd:f8:8c:00:37:60:ef:dd:8a:af:e9:29:ce:
03:ae:ea:6e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBGYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNDEyMjYwOTM1MDdaFw0yNTEyMjYwOTM1MDdaMBgxFjAU
BgNVBAMTDTY3NmQyMzRmLTRiMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrKH0bhWPdx102PiH8uKime4gNQ9l8a830nuakF7bEHn8jupqZkrUn7zZe
igonbuW7JuiBEK/0do955t/KPXy1CDvkT6XpCvldmV7BZcLOswg3ul3ewhPomILV
sHhdMOfV8z8M7EN+ljuvEjAMBSE0z1OFOEs+GWrPRQ4tsiheMtV4IFNiRt9XXbKV
fPrN0PkhYtid7ynWydzsIZma0H0ocwVDsP3XE9wmvC3p3/RNxUTFo0UuilRFfVq7
2wTObUBlurxFXnhetce3XAf52EYUNxOJj0OJxpXH9oBDZHIExbSj7Z1BmER+tTrZ
ZNYQIdUszABIZfNeyZ40jAG+xONTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUoZwn
pZCO9FIsZY3RUY5TyeOYYBQwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0IzQzNBQzEwQzM2QzExRUZBREJBODY1MTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+0swDQYJKoZIhvcNAQEL
BQADggEBALVgbTopeB14Au378NsUjTdmlF3R3ZrZ8G4zmjjWGFr7kPlpIVbaWzq4
pmlCuuW+2Lvh8SLnmwjYiVtbwLuph37t/mmu81GEYewHWtHuH9AyftORXkCC7SIO
Qr5YrRgWR1nPQMo/pUAVBGg/2M9wfPpr10E4xTlnd4I3nhxFiLxoU/KEnAehXIRF
BXE9MMKIpnP3NlYxeHCltzitNaTioUtMUKXBseQ4lgG1HyF1bhqJXzOBKNwPeDYG
nKhyBK/DOo/DUW7wMUZqm7HHelLS/uTERvXeDPywrxzcUDf78I7MVVNI8/DDeKEW
L6pOVtAhzfiMADdg792Kr+kpzgOu6m4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:51:55 2025 by rpki-client