Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/DDDEBFA2D8C111EFAE196F58762E951A.roa
File: DDDEBFA2D8C111EFAE196F58762E951A.roa (raw, json)
Hash identifier: HbVh/I3kd90h9ZKK8Ak5BuQHvhTIFTU0xy4hHWu8r0w=
Subject key identifier: EA:D0:09:89:FD:40:88:12:19:C6:E7:00:16:9C:02:CB:00:1F:59:17
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 076C
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/DDDEBFA2D8C111EFAE196F58762E951A.roa
Signing time: Wed 22 Jan 2025 13:07:43 +0000
ROA not before: Wed 22 Jan 2025 13:07:39 +0000
ROA not after: Mon 31 Dec 2035 13:07:39 +0000
asID: 20011
IP address blocks: 196.208.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1900 (0x76c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF
Validity
Not Before: Jan 22 13:07:39 2025 GMT
Not After : Dec 31 13:07:39 2035 GMT
Subject: CN=6790ed9f-3f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:88:ac:ab:7d:71:dc:80:3c:3b:1a:8d:5a:
38:50:a7:f7:fc:57:85:17:27:45:77:61:28:63:b1:
d7:5b:02:ef:0e:c1:af:89:8a:7b:67:a2:8f:fb:c2:
cb:b7:e5:f6:01:44:97:84:02:db:29:ab:25:e4:29:
d2:a1:d1:46:e2:78:d0:b9:4c:27:50:97:3e:b3:d7:
54:c7:3f:63:30:48:cd:1e:e7:01:d2:da:bb:59:1e:
27:ba:9c:e4:6f:2e:2f:71:ab:be:66:77:04:56:0e:
5e:f1:84:d4:32:32:75:73:e9:6b:ed:8a:77:97:d4:
bd:e1:31:ad:1f:fe:20:b3:51:cd:02:a8:8f:92:9b:
02:73:93:ba:d7:82:4c:53:51:90:16:34:4b:e6:de:
21:a3:4a:6e:26:03:a7:c1:2b:cb:72:81:db:04:a6:
17:b6:85:ee:e0:8b:9a:b2:ad:dd:75:89:d1:dc:f3:
b6:eb:ad:35:60:f8:8b:de:1f:55:b2:96:c1:a4:26:
6d:f4:35:03:bf:85:1b:e7:fa:d4:a0:ac:86:6d:e9:
d2:8c:c1:2d:39:bb:d7:aa:8c:59:78:d8:2a:60:24:
53:f6:72:49:1c:fe:8e:a6:9d:9f:01:59:44:5a:32:
61:39:bb:b2:42:74:81:f2:9e:6b:83:f5:bf:cc:1c:
e6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D0:09:89:FD:40:88:12:19:C6:E7:00:16:9C:02:CB:00:1F:59:17
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/DDDEBFA2D8C111EFAE196F58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.208.0.0/14
Signature Algorithm: sha256WithRSAEncryption
9c:01:97:d1:bf:19:b7:8e:e7:74:2a:c8:7d:82:c8:aa:91:58:
aa:f4:be:80:10:05:8e:01:55:af:b1:cc:2b:71:03:76:f0:2d:
d7:a7:34:64:f7:f6:a1:c9:29:b1:c9:b1:a8:4a:c3:b2:98:4a:
10:ec:92:66:b0:50:68:18:bb:9c:0f:aa:51:83:c6:f8:9e:00:
c8:96:8e:85:89:c6:eb:44:01:7c:e9:1b:80:e5:8c:f3:3c:1d:
80:50:2f:13:35:5e:e3:8f:97:be:49:9c:e7:9a:d8:19:d9:d3:
d0:33:83:92:bf:1f:ce:38:84:5b:e8:fc:9a:04:f5:35:38:da:
da:82:1a:f2:0f:07:bc:25:e4:7e:e6:01:5c:4f:b2:11:5a:86:
43:4d:6f:23:9f:9c:1d:b3:d2:2f:3a:7b:aa:7a:64:2e:16:b1:
fc:5d:3c:a5:15:5e:b3:76:56:5d:75:92:5b:ac:5b:2a:4a:17:
72:81:6a:a7:4f:a4:3e:a7:65:28:ae:9b:df:68:86:ae:57:76:
8a:5e:3f:49:d8:0b:ec:08:3a:f8:57:36:12:9d:81:ec:01:ba:
72:e0:85:d4:eb:53:28:66:da:b1:67:c3:3f:e3:4a:57:7f:83:
51:8a:6f:9e:77:f6:8c:74:75:4d:de:f4:32:f8:e4:83:3d:5e:
31:b8:36:57
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICB2wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yNTAxMjIxMzA3MzlaFw0zNTEyMzExMzA3MzlaMBgxFjAU
BgNVBAMTDTY3OTBlZDlmLTNmMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCk64isq31x3IA8OxqNWjhQp/f8V4UXJ0V3YShjsddbAu8Owa+Jintnoo/7
wsu35fYBRJeEAtspqyXkKdKh0UbieNC5TCdQlz6z11THP2MwSM0e5wHS2rtZHie6
nORvLi9xq75mdwRWDl7xhNQyMnVz6WvtineX1L3hMa0f/iCzUc0CqI+SmwJzk7rX
gkxTUZAWNEvm3iGjSm4mA6fBK8tygdsEphe2he7gi5qyrd11idHc87brrTVg+Ive
H1WylsGkJm30NQO/hRvn+tSgrIZt6dKMwS05u9eqjFl42CpgJFP2ckkc/o6mnZ8B
WURaMmE5u7JCdIHynmuD9b/MHOYRAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU6tAJ
if1AiBIZxucAFpwCywAfWRcwHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4L0REREVCRkEyRDhDMTExRUZBRTE5NkY1ODc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwLE0DANBgkqhkiG9w0BAQsF
AAOCAQEAnAGX0b8Zt47ndCrIfYLIqpFYqvS+gBAFjgFVr7HMK3EDdvAt16c0ZPf2
ockpscmxqErDsphKEOySZrBQaBi7nA+qUYPG+J4AyJaOhYnG60QBfOkbgOWM8zwd
gFAvEzVe44+Xvkmc55rYGdnT0DODkr8fzjiEW+j8mgT1NTja2oIa8g8HvCXkfuYB
XE+yEVqGQ01vI5+cHbPSLzp7qnpkLhax/F08pRVes3ZWXXWSW6xbKkoXcoFqp0+k
PqdlKK6b32iGrld2il4/SdgL7Ag6+Fc2Ep2B7AG6cuCF1OtTKGbasWfDP+NKV3+D
UYpvnnf2jHR1Td70Mvjkgz1eMbg2Vw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:58:33 2025 by rpki-client