Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B6A4E53208A111F09033D774762E951A.roa
File: B6A4E53208A111F09033D774762E951A.roa (raw, json)
Hash identifier: kgxyadXbYCl0tBod+qNg2j1vrg6k/poi7zYYJzLqq0M=
Subject key identifier: 2A:B2:0E:93:04:43:C5:25:71:E8:C9:C9:C0:07:60:2D:24:93:BD:5F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 07D7
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B6A4E53208A111F09033D774762E951A.roa
Signing time: Mon 24 Mar 2025 11:18:30 +0000
ROA not before: Mon 24 Mar 2025 11:18:26 +0000
ROA not after: Tue 24 Mar 2026 11:18:26 +0000
asID: 2914
IP address blocks: 196.251.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2007 (0x7d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Mar 24 11:18:26 2025 GMT
Not After : Mar 24 11:18:26 2026 GMT
Subject: CN=67e13f85-0f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:d0:8d:8e:87:b6:07:23:5a:de:c6:a2:d0:
c5:e5:60:8e:d5:02:9f:26:84:43:80:45:bc:41:e4:
f1:0a:a9:17:6b:b3:98:ec:a4:b7:93:6e:aa:03:59:
81:2e:7e:d2:f9:1b:16:48:ed:9c:7d:af:f1:1f:7e:
7d:e7:c0:9b:c2:72:ef:83:73:3a:d3:a6:44:07:8c:
1c:e2:63:0c:36:35:44:31:fe:18:c3:ba:a3:09:1a:
55:f6:12:15:dd:ff:68:5f:36:ac:84:5a:43:f9:22:
50:72:43:29:43:bd:2b:b9:7d:1a:a2:fe:e7:ad:7b:
28:50:da:c4:5b:d0:ef:35:c9:70:ea:74:42:a2:9b:
b3:00:38:3f:15:a4:a6:e2:1e:a0:11:ca:7e:be:cf:
ba:1b:42:04:b0:f8:99:d3:f4:14:06:ed:28:54:70:
3c:b2:90:da:ca:12:f6:19:cb:81:d2:cf:b2:4b:65:
eb:65:d0:cd:93:ff:86:47:98:c9:c1:1a:92:ae:d0:
e8:7d:ad:68:ec:cb:2f:42:52:be:c2:a2:f9:7b:e3:
60:35:f5:b5:6c:65:a0:3e:55:34:77:aa:53:fc:dd:
17:f2:85:64:7d:1d:4b:df:7d:0d:0f:92:81:ac:38:
f2:5d:27:3c:30:67:0e:b1:94:d1:b3:f1:d8:25:10:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B2:0E:93:04:43:C5:25:71:E8:C9:C9:C0:07:60:2D:24:93:BD:5F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B6A4E53208A111F09033D774762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.101.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c1:ab:32:02:ac:92:a5:e1:7c:07:a0:65:68:95:28:b4:5d:
c1:de:0f:0c:c7:4d:12:02:00:c6:44:9d:ba:b2:50:32:d6:91:
9b:a2:aa:6f:23:a2:33:3f:0f:a6:f0:c9:6a:44:d6:7f:b1:a1:
91:c1:32:50:4d:64:b3:3b:91:f8:bf:36:a6:dd:5b:ba:f3:a8:
00:0f:1d:2f:ed:17:c1:f5:a1:d6:6c:27:dc:29:cc:4e:82:45:
7c:e2:dd:a1:29:bc:98:f7:b5:06:c9:b1:d7:63:d4:cf:25:e3:
88:26:1d:98:8b:e5:35:d7:2e:ca:a0:b1:1e:35:83:7f:94:fb:
82:72:22:35:2f:31:10:fb:20:5c:26:2c:76:62:3a:70:76:bd:
18:85:0a:1f:a4:8c:95:4f:d5:80:38:f0:37:02:61:41:2c:6c:
8b:94:92:fd:5b:fd:ec:c6:c2:57:72:2d:fa:d0:19:c0:e3:c5:
12:e6:7f:52:e6:31:5e:9e:fe:4b:ca:1e:26:b4:ed:b4:2b:95:
d4:0c:e1:54:b0:d0:0d:07:5f:e5:50:f3:4b:b1:b5:0d:b9:33:
b3:70:c7:2c:b1:09:48:21:c8:97:71:fe:62:5f:c6:2b:ab:a5:
78:0d:52:c8:77:e4:96:d2:d9:f9:c2:5a:86:63:3f:ec:46:7e:
b7:71:fe:4e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjQxMTE4MjZaFw0yNjAzMjQxMTE4MjZaMBgxFjAU
BgNVBAMTDTY3ZTEzZjg1LTBmMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJ6tCNjoe2ByNa3sai0MXlYI7VAp8mhEOARbxB5PEKqRdrs5jspLeTbqoD
WYEuftL5GxZI7Zx9r/Effn3nwJvCcu+DczrTpkQHjBziYww2NUQx/hjDuqMJGlX2
EhXd/2hfNqyEWkP5IlByQylDvSu5fRqi/ueteyhQ2sRb0O81yXDqdEKim7MAOD8V
pKbiHqARyn6+z7obQgSw+JnT9BQG7ShUcDyykNrKEvYZy4HSz7JLZetl0M2T/4ZH
mMnBGpKu0Oh9rWjsyy9CUr7Covl742A19bVsZaA+VTR3qlP83RfyhWR9HUvffQ0P
koGsOPJdJzwwZw6xlNGz8dglEHH5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUKrIO
kwRDxSVx6MnJwAdgLSSTvV8wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0I2QTRFNTMyMDhBMTExRjA5MDMzRDc3NDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+2UwDQYJKoZIhvcNAQEL
BQADggEBAEbBqzICrJKl4XwHoGVolSi0XcHeDwzHTRICAMZEnbqyUDLWkZuiqm8j
ojM/D6bwyWpE1n+xoZHBMlBNZLM7kfi/NqbdW7rzqAAPHS/tF8H1odZsJ9wpzE6C
RXzi3aEpvJj3tQbJsddj1M8l44gmHZiL5TXXLsqgsR41g3+U+4JyIjUvMRD7IFwm
LHZiOnB2vRiFCh+kjJVP1YA48DcCYUEsbIuUkv1b/ezGwldyLfrQGcDjxRLmf1Lm
MV6e/kvKHia07bQrldQM4VSw0A0HX+VQ80uxtQ25M7NwxyyxCUghyJdx/mJfxiur
pXgNUsh35JbS2fnCWoZjP+xGfrdx/k4=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:53:52 2025 by rpki-client