Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/9870DA98AD8511EFAF5F92BE762E951A.roa
File: 9870DA98AD8511EFAF5F92BE762E951A.roa (raw, json)
Hash identifier: udUtVTYo1f4IoYFUNzyEYnX9Hdol3KZafB9piQO6pRw=
Subject key identifier: 34:5C:0A:79:9B:39:D1:C4:83:0F:1D:22:02:C5:00:46:A3:2B:C3:54
Certificate issuer: /CN=F3613254AF/serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
Certificate serial: EA
Authority key identifier: 1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/9870DA98AD8511EFAF5F92BE762E951A.roa
Signing time: Thu 28 Nov 2024 12:37:57 +0000
ROA not before: Thu 25 Sep 2025 12:37:53 +0000
ROA not after: Thu 30 Sep 2027 12:37:53 +0000
asID: 37088
IP address blocks: 41.216.160.0/20 maxlen: 21
41.216.160.0/20 maxlen: 22
41.216.160.0/20 maxlen: 24
102.135.192.0/19 maxlen: 24
102.135.192.0/22 maxlen: 24
102.135.196.0/22 maxlen: 24
102.135.208.0/20 maxlen: 24
2c0f:6400::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3613254AF
Validity
Not Before: Sep 25 12:37:53 2025 GMT
Not After : Sep 30 12:37:53 2027 GMT
Subject: CN=67486425-5ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:47:cc:e3:99:dd:0f:8e:4e:77:71:fd:16:
68:57:e1:3b:0f:f1:22:cd:b1:07:83:17:e0:0c:ce:
a6:8a:19:21:8c:6d:f2:7a:44:ec:53:92:a9:b7:16:
92:95:48:55:bc:7b:82:bc:ec:2b:1f:16:1b:72:b8:
b4:c0:77:f1:33:68:2c:c2:e3:68:90:fd:0c:0b:44:
4c:24:dc:45:ba:c9:f8:7e:4e:56:ba:de:84:20:73:
6b:bb:9e:d0:d0:53:1b:28:e9:d2:8c:0a:09:39:ea:
7b:85:dc:be:f5:c5:f9:8b:79:32:e6:bf:5c:e1:f0:
46:b5:46:21:0c:96:4e:85:98:fb:24:b7:2c:47:2a:
1d:9f:8c:da:eb:8a:03:c0:e5:08:89:03:a6:68:df:
a6:12:04:90:04:d6:51:34:44:c3:33:92:8e:4f:9f:
64:6c:10:c6:c6:4c:0c:16:bd:d7:d1:98:a7:ee:2f:
04:d1:31:13:00:cc:dc:77:6c:b7:9b:a8:95:f1:59:
39:dd:83:f4:d0:9a:57:b8:a8:6b:2c:d8:80:18:99:
5a:55:6a:9e:73:e7:0d:a1:a3:19:b1:ea:85:e6:24:
56:90:ed:0a:31:f0:44:2f:3f:07:85:72:2f:4d:29:
76:a5:d5:80:5d:cb:76:1a:5f:e5:ae:7d:9a:66:e1:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5C:0A:79:9B:39:D1:C4:83:0F:1D:22:02:C5:00:46:A3:2B:C3:54
X509v3 Authority Key Identifier:
keyid:1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/9870DA98AD8511EFAF5F92BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.160.0/20
102.135.192.0/19
IPv6:
2c0f:6400::/32
Signature Algorithm: sha256WithRSAEncryption
65:93:ae:21:7e:b9:18:82:6f:af:d6:9b:5b:40:5b:93:b0:88:
b1:99:f3:6d:41:ff:96:bf:aa:2b:fc:16:7d:40:87:ef:c9:0b:
db:4c:a8:d3:a5:a7:37:96:32:3b:72:1e:38:21:36:bf:0e:00:
c3:97:7c:80:7c:09:9f:b6:5a:a0:de:a1:ff:a2:c3:29:e8:3a:
f3:98:43:9f:fa:66:55:2c:c3:f1:4a:08:a2:e7:f4:c1:6a:6d:
31:24:26:c6:ff:8e:16:ee:82:93:01:b0:69:36:de:13:b9:63:
aa:10:51:85:4b:20:4e:9f:18:25:f1:cf:a2:6a:c9:a7:cd:94:
10:32:fb:a9:f5:29:a7:c9:5c:c4:3a:1b:65:c5:65:f4:72:a1:
ec:43:fc:6a:16:5b:64:d0:c3:e3:ae:c3:10:6b:5d:6b:08:25:
0e:21:f4:7e:1a:fa:0f:4c:03:83:ba:bb:b4:73:43:70:a4:13:
4c:81:6d:df:bc:ab:5d:83:cc:af:95:59:9d:07:51:ae:a5:fa:
01:47:06:8a:e7:91:43:ce:e6:84:dc:10:60:90:63:9f:68:03:
3f:e0:f6:42:35:be:cb:6f:48:42:18:81:3a:85:fb:84:e3:1e:
2c:d4:72:f7:41:ab:15:ea:be:ec:ac:f1:bb:06:d4:85:bb:d6:
db:4a:26:b4
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICAOowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTMyNTRBRjExMC8GA1UEBRMoMUY0MEZDQzU3QzI2QTZEREI2MDVGNzc5OEE0QjUz
QzA5RDJCNjIyMDAeFw0yNTA5MjUxMjM3NTNaFw0yNzA5MzAxMjM3NTNaMBgxFjAU
BgNVBAMTDTY3NDg2NDI1LTVjZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzskfM45ndD45Od3H9FmhX4TsP8SLNsQeDF+AMzqaKGSGMbfJ6ROxTkqm3
FpKVSFW8e4K87CsfFhtyuLTAd/EzaCzC42iQ/QwLREwk3EW6yfh+Tla63oQgc2u7
ntDQUxso6dKMCgk56nuF3L71xfmLeTLmv1zh8Ea1RiEMlk6FmPsktyxHKh2fjNrr
igPA5QiJA6Zo36YSBJAE1lE0RMMzko5Pn2RsEMbGTAwWvdfRmKfuLwTRMRMAzNx3
bLebqJXxWTndg/TQmle4qGss2IAYmVpVap5z5w2hoxmx6oXmJFaQ7Qox8EQvPweF
ci9NKXal1YBdy3YaX+WufZpm4cp1AgMBAAGjggK6MIICtjAdBgNVHQ4EFgQUNFwK
eZs50cSDDx0iAsUARqMrw1QwHwYDVR0jBBgwFoAUH0D8xXwmpt22Bfd5iktTwJ0r
YiAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjEzMjU0L0M5MDEyQURFMDIzNDExRUZBMDk2NTA1RjAxNzAwMUIxL0gwRDh4
WHdtcHQyMkJmZDVpa3RUd0owcllpQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0gwRDh4WHdtcHQyMkJmZDVpa3RUd0owcllpQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjEzMjU0L0M5MDEyQURFMDIzNDExRUZBMDk2NTA1RjAx
NzAwMUIxLzk4NzBEQTk4QUQ4NTExRUZBRjVGOTJCRTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAQp2KADBAVmh8AwDQQCAAIw
BwMFACwPZAAwDQYJKoZIhvcNAQELBQADggEBAGWTriF+uRiCb6/Wm1tAW5OwiLGZ
821B/5a/qiv8Fn1Ah+/JC9tMqNOlpzeWMjtyHjghNr8OAMOXfIB8CZ+2WqDeof+i
wynoOvOYQ5/6ZlUsw/FKCKLn9MFqbTEkJsb/jhbugpMBsGk23hO5Y6oQUYVLIE6f
GCXxz6JqyafNlBAy+6n1KafJXMQ6G2XFZfRyoexD/GoWW2TQw+OuwxBrXWsIJQ4h
9H4a+g9MA4O6u7RzQ3CkE0yBbd+8q12DzK+VWZ0HUa6l+gFHBornkUPO5oTcEGCQ
Y59oAz/g9kI1vstvSEIYgTqF+4TjHizUcvdBqxXqvuys8bsG1IW71ttKJrQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:54 2025 by rpki-client