Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/ABF4D51E353111EFA677899D762E951A.roa
File: ABF4D51E353111EFA677899D762E951A.roa (raw, json)
Hash identifier: yT0hru8iHgEWTgBifTCuUqU1fmi51TY4WdhFSmOp3EM=
Subject key identifier: 79:B8:42:DC:2F:2F:64:B5:A8:BE:40:9D:A5:A7:AF:4D:70:DE:9D:FD
Certificate issuer: /CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Certificate serial: 019B
Authority key identifier: C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/ABF4D51E353111EFA677899D762E951A.roa
Signing time: Fri 28 Jun 2024 09:34:53 +0000
ROA not before: Fri 28 Jun 2024 09:34:49 +0000
ROA not after: Fri 30 Jun 2034 09:34:49 +0000
asID: 37496
IP address blocks: 196.216.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8BF7AF
Validity
Not Before: Jun 28 09:34:49 2024 GMT
Not After : Jun 30 09:34:49 2034 GMT
Subject: CN=667e83bd-7773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:c0:5e:6f:69:f7:aa:e4:55:ce:cf:12:8f:
b4:38:42:4b:a5:25:ad:c7:dc:9d:2d:44:df:5b:5c:
49:6e:2b:ce:57:2c:9a:9e:53:bc:15:a6:d9:a4:79:
4a:79:22:52:6f:6f:e3:5e:6d:0f:03:63:28:dc:e5:
a7:7b:73:a3:6e:73:c2:db:52:df:c1:31:8c:92:5a:
d5:c3:f8:5b:fd:c7:21:17:58:ab:6e:f6:dc:8a:04:
ad:5f:15:44:94:ee:29:97:1e:d7:45:00:93:c6:97:
77:27:53:85:fd:d6:01:69:ab:48:a1:10:7c:fa:8d:
ac:6a:81:c2:8a:e2:7e:ea:aa:fe:db:0b:27:96:99:
9c:b8:92:ce:c5:a6:d3:bb:82:9c:95:94:a3:4d:0c:
6c:08:4e:26:fb:bc:bb:bf:6a:ec:19:c2:0d:60:6b:
4a:70:8f:4a:da:38:b3:4d:3f:1a:e2:1d:bd:44:79:
4b:94:0b:b1:64:f1:9b:cd:0c:fd:6a:3b:69:cf:9c:
07:a5:c9:80:e8:e7:62:4f:ed:d4:79:13:7f:fe:46:
f4:86:dd:c5:02:3f:b1:dd:68:6f:01:73:8c:eb:27:
75:d2:ae:0b:7c:ac:1c:c6:a5:0a:ab:6f:88:ed:0f:
52:a1:3c:9c:0a:c6:8f:23:c7:26:09:0b:56:3d:1e:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B8:42:DC:2F:2F:64:B5:A8:BE:40:9D:A5:A7:AF:4D:70:DE:9D:FD
X509v3 Authority Key Identifier:
keyid:C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/ABF4D51E353111EFA677899D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.216.234.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:47:c5:db:99:8d:0a:07:10:df:da:7d:68:b9:ac:70:2a:a6:
bb:de:ad:2a:e1:55:9f:4b:27:b2:96:36:19:be:e7:e6:9b:37:
03:ab:fd:65:ee:ea:45:d3:34:de:79:d8:b7:16:57:75:55:6d:
70:17:8f:8e:00:7d:9c:ce:ad:35:82:47:fb:1e:a4:d8:49:fc:
e6:b1:bd:8a:21:37:26:0c:ca:25:52:75:a4:53:a3:cd:4c:71:
2c:3d:7d:a2:34:90:75:c8:f3:b6:c4:b1:37:b1:05:13:23:08:
2c:bc:f2:87:a2:b2:21:d8:f7:e4:2c:50:a8:13:43:7b:2e:ff:
45:53:7e:5b:49:81:36:73:09:69:61:c8:db:61:a7:1e:b3:92:
58:12:8c:ff:78:da:79:52:d1:c3:be:f6:66:28:c8:df:8e:3a:
49:7c:b8:a4:cc:11:d6:89:46:c4:41:de:5b:5c:eb:62:58:c1:
0e:fa:f8:96:1f:18:5c:5a:c7:9b:0c:ab:61:02:d8:db:0e:52:
72:10:f6:6e:06:1e:eb:21:4d:55:91:65:22:64:ef:e1:6a:c9:
94:90:38:f4:03:62:93:cd:6e:b7:b7:4f:b0:fc:2e:41:ab:d1:
0f:2d:95:f3:dd:50:02:8d:82:3f:63:2d:31:94:0d:eb:9b:e7:
49:cb:93:e0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAZswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RThCRjdBRjExMC8GA1UEBRMoQzczM0VEMUE3Njc0MjBFRUY1M0UwNTYxODc4MTBC
RTM5MzRBQTUyMDAeFw0yNDA2MjgwOTM0NDlaFw0zNDA2MzAwOTM0NDlaMBgxFjAU
BgNVBAMTDTY2N2U4M2JkLTc3NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDLcBeb2n3quRVzs8Sj7Q4QkulJa3H3J0tRN9bXEluK85XLJqeU7wVptmk
eUp5IlJvb+NebQ8DYyjc5ad7c6Nuc8LbUt/BMYySWtXD+Fv9xyEXWKtu9tyKBK1f
FUSU7imXHtdFAJPGl3cnU4X91gFpq0ihEHz6jaxqgcKK4n7qqv7bCyeWmZy4ks7F
ptO7gpyVlKNNDGwITib7vLu/auwZwg1ga0pwj0raOLNNPxriHb1EeUuUC7Fk8ZvN
DP1qO2nPnAelyYDo52JP7dR5E3/+RvSG3cUCP7HdaG8Bc4zrJ3XSrgt8rBzGpQqr
b4jtD1KhPJwKxo8jxyYJC1Y9HktjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUebhC
3C8vZLWovkCdpaevTXDenf0wHwYDVR0jBBgwFoAUxzPtGnZ0IO71PgVhh4EL45NK
pSAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU4QkY3L0VFRTZFRkFDMEFBMjExRUVBQTFFMjE0MzRBRDlFNkZDL3h6UHRH
blowSU83MVBnVmhoNEVMNDVOS3BTQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3h6UHRHblowSU83MVBnVmhoNEVMNDVOS3BTQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkU4QkY3L0VFRTZFRkFDMEFBMjExRUVBQTFFMjE0MzRB
RDlFNkZDL0FCRjRENTFFMzUzMTExRUZBNjc3ODk5RDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHE2OowDQYJKoZIhvcNAQEL
BQADggEBADpHxduZjQoHEN/afWi5rHAqprverSrhVZ9LJ7KWNhm+5+abNwOr/WXu
6kXTNN552LcWV3VVbXAXj44AfZzOrTWCR/sepNhJ/OaxvYohNyYMyiVSdaRTo81M
cSw9faI0kHXI87bEsTexBRMjCCy88oeisiHY9+QsUKgTQ3su/0VTfltJgTZzCWlh
yNthpx6zklgSjP942nlS0cO+9mYoyN+OOkl8uKTMEdaJRsRB3ltc62JYwQ76+JYf
GFxax5sMq2EC2NsOUnIQ9m4GHushTVWRZSJk7+FqyZSQOPQDYpPNbre3T7D8LkGr
0Q8tlfPdUAKNgj9jLTGUDeub50nLk+A=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:47 2025 by rpki-client