Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E3D40F9AC69F11EFB836669F762E951A.roa
File: E3D40F9AC69F11EFB836669F762E951A.roa (raw, json)
Hash identifier: zQmYZWw5Sjd8dHIohDZig4tTkcYoLe8aJdvhR5W+8qo=
Subject key identifier: 63:8F:03:89:19:86:C5:B9:C6:83:DF:BA:B9:7D:D4:2E:90:57:94:D1
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 049B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E3D40F9AC69F11EFB836669F762E951A.roa
Signing time: Mon 30 Dec 2024 11:19:10 +0000
ROA not before: Mon 30 Dec 2024 11:19:06 +0000
ROA not after: Wed 31 Dec 2025 11:19:06 +0000
asID: 329007
IP address blocks: 196.251.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1179 (0x49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:19:06 2024 GMT
Not After : Dec 31 11:19:06 2025 GMT
Subject: CN=677281ae-5c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:89:93:48:bc:d1:6c:1f:fc:54:bc:86:19:ea:
d8:67:6c:9e:20:7c:d0:5b:5b:02:77:51:9e:3e:bc:
a4:5c:2e:c2:7b:ee:d5:a1:02:6c:f1:ca:a4:8e:06:
a9:ba:1d:fe:08:d3:75:44:6e:dd:90:b4:13:b8:1d:
e5:d7:f2:ce:6e:9f:b4:57:0a:b0:f0:f0:82:bd:e4:
b5:ee:3c:0c:00:66:7f:57:17:26:1d:49:3c:d5:6c:
60:cd:e3:6d:d4:1f:6d:1c:f7:aa:54:1c:56:51:e6:
02:17:a6:92:20:ad:c0:4a:36:cb:6c:79:84:d1:d7:
73:41:e6:46:99:be:5f:0b:f5:6a:eb:6c:09:14:d2:
46:2c:81:39:a4:45:32:13:cf:4e:54:a8:c8:e0:e4:
f7:bc:37:ff:19:e2:c2:97:f8:15:60:93:d9:82:ac:
14:a7:8a:01:dd:dd:5e:e1:a2:2d:78:1d:be:82:d5:
8a:10:03:97:a9:17:61:44:95:03:e2:05:05:6a:22:
69:9c:1a:60:b4:7d:b2:6a:8f:5a:f6:95:2d:92:89:
c8:04:95:89:13:73:f1:8c:67:60:43:28:c4:ca:8d:
e9:e8:df:f3:19:23:ff:fa:8c:1e:6a:43:62:52:bf:
38:df:3f:21:c2:46:ff:88:04:dc:24:2e:74:2f:a3:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8F:03:89:19:86:C5:B9:C6:83:DF:BA:B9:7D:D4:2E:90:57:94:D1
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E3D40F9AC69F11EFB836669F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.88.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c4:48:b7:c3:4d:8d:34:f3:c1:d7:98:c2:49:90:0e:00:53:
21:67:01:01:01:26:31:07:a2:3e:40:aa:50:6d:46:e7:c8:b1:
d4:09:f4:e5:fc:7a:29:ed:39:ef:83:01:36:7d:08:47:08:97:
0d:e9:ac:b0:8a:41:0d:d1:ac:84:94:f5:75:00:db:5c:2e:fc:
d3:7f:e3:b8:56:ff:32:37:9e:50:ba:01:b8:b7:bd:2f:65:db:
9a:e2:2a:f8:b1:42:b0:97:bb:59:88:d4:7b:2f:28:77:95:34:
9a:ca:5f:ed:55:b0:a5:b5:47:9e:c8:9f:00:96:6d:94:9f:ac:
4f:d9:0f:13:94:33:8e:02:9c:8e:c8:13:cd:30:b5:bf:3a:7e:
ee:ff:80:8e:c6:16:8b:5a:ca:cb:dc:2f:1f:67:49:f0:a2:2b:
4f:6c:24:f1:f2:64:a2:1b:60:9f:91:27:ce:8f:e3:08:7f:c2:
69:36:92:d2:28:e9:39:ad:28:c8:fd:45:ca:ce:f1:9d:5d:33:
da:3e:0a:e4:38:3d:67:2e:75:c0:d3:bd:c2:f3:56:74:dd:4f:
83:7a:79:a2:5a:cd:45:bd:7c:c4:f0:88:2a:24:77:e9:ba:19:
f5:c5:97:eb:7f:73:03:b9:5c:b9:9f:84:48:32:9e:69:42:79:
a8:fe:6d:aa
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBJswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNDEyMzAxMTE5MDZaFw0yNTEyMzExMTE5MDZaMBgxFjAU
BgNVBAMTDTY3NzI4MWFlLTVjNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDliZNIvNFsH/xUvIYZ6thnbJ4gfNBbWwJ3UZ4+vKRcLsJ77tWhAmzxyqSO
Bqm6Hf4I03VEbt2QtBO4HeXX8s5un7RXCrDw8IK95LXuPAwAZn9XFyYdSTzVbGDN
423UH20c96pUHFZR5gIXppIgrcBKNstseYTR13NB5kaZvl8L9WrrbAkU0kYsgTmk
RTITz05UqMjg5Pe8N/8Z4sKX+BVgk9mCrBSnigHd3V7hoi14Hb6C1YoQA5epF2FE
lQPiBQVqImmcGmC0fbJqj1r2lS2SicgElYkTc/GMZ2BDKMTKjeno3/MZI//6jB5q
Q2JSvzjfPyHCRv+IBNwkLnQvowGZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUY48D
iRmGxbnGg9+6uX3ULpBXlNEwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0UzRDQwRjlBQzY5RjExRUZCODM2NjY5Rjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+1gwDQYJKoZIhvcNAQEL
BQADggEBABbESLfDTY0088HXmMJJkA4AUyFnAQEBJjEHoj5AqlBtRufIsdQJ9OX8
eintOe+DATZ9CEcIlw3prLCKQQ3RrISU9XUA21wu/NN/47hW/zI3nlC6Abi3vS9l
25riKvixQrCXu1mI1HsvKHeVNJrKX+1VsKW1R57InwCWbZSfrE/ZDxOUM44CnI7I
E80wtb86fu7/gI7GFotaysvcLx9nSfCiK09sJPHyZKIbYJ+RJ86P4wh/wmk2ktIo
6TmtKMj9RcrO8Z1dM9o+CuQ4PWcudcDTvcLzVnTdT4N6eaJazUW9fMTwiCokd+m6
GfXFl+t/cwO5XLmfhEgynmlCeaj+bao=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:27 2025 by rpki-client