Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/065093C4AC1B11ECADF7F8D55A40D577.roa
File: 065093C4AC1B11ECADF7F8D55A40D577.roa (raw, json)
Hash identifier: 8vv7g85c1RQojxzleG8agZYGdajljYZq3e0aTJxXyh4=
Subject key identifier: 73:8B:46:17:95:E2:79:FE:FE:51:4C:62:A4:34:4B:04:83:64:27:5E
Certificate issuer: /CN=F3615A34AF/serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
Certificate serial: 10
Authority key identifier: 13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/065093C4AC1B11ECADF7F8D55A40D577.roa
Signing time: Fri 25 Mar 2022 09:07:41 +0000
ROA not before: Fri 25 Mar 2022 09:07:36 +0000
ROA not after: Sun 24 Mar 2024 09:07:36 +0000
asID: 36914
IP address blocks: 41.89.0.0/16 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3615A34AF
Validity
Not Before: Mar 25 09:07:36 2022 GMT
Not After : Mar 24 09:07:36 2024 GMT
Subject: CN=623d865d-6ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:8b:d9:e4:b6:eb:34:c8:1e:e9:20:9a:d9:cd:
d6:f1:8a:7f:72:0a:85:53:30:42:29:b1:cc:63:07:
9d:b7:07:a8:4b:da:11:c0:5f:8f:45:9f:59:6f:93:
00:ab:9a:b1:92:7c:cd:5e:fa:8d:5e:93:f6:15:ed:
97:8a:5e:9f:73:45:4b:c7:71:dd:35:a4:fe:76:76:
18:9b:bf:ce:64:40:a9:25:b7:02:38:7e:74:dc:58:
23:79:c1:db:f2:d9:0c:37:59:2c:6d:15:38:f6:8f:
e5:1c:24:87:43:07:8b:50:29:d9:38:ec:44:9c:2c:
f1:26:68:d1:6b:4a:14:7a:d8:1f:f0:55:97:e0:33:
87:ba:29:75:a8:7d:c1:4a:d0:ea:f4:68:1b:db:d4:
47:f0:32:b2:06:51:9c:1b:01:42:d4:ff:d1:57:50:
a2:b2:52:da:e2:43:52:e8:23:0c:65:df:24:b7:d0:
fe:fa:27:a1:99:f1:31:69:f7:c7:67:f0:a8:8c:20:
14:34:6d:b2:33:6e:08:a8:d2:c1:03:5b:d6:bc:28:
71:de:ca:ef:cf:ac:91:85:9b:32:ba:9b:95:29:ac:
6d:96:6d:16:d4:8f:79:80:9a:f2:a4:5a:16:59:0b:
fb:88:2b:42:50:6b:29:69:00:d8:f4:0e:e3:48:d8:
da:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8B:46:17:95:E2:79:FE:FE:51:4C:62:A4:34:4B:04:83:64:27:5E
X509v3 Authority Key Identifier:
keyid:13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/065093C4AC1B11ECADF7F8D55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.89.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:a5:3f:db:c2:65:21:9e:14:9b:f9:9f:fa:28:4d:d8:c7:8e:
0b:2c:22:d8:65:b6:03:4a:bf:15:40:2e:da:1b:0c:cb:43:95:
3a:23:c7:0f:0f:ad:6a:e5:49:bd:d9:0c:69:fd:51:90:ac:0a:
ef:ee:7b:ae:92:36:0e:b2:2a:56:87:81:75:f1:61:09:5e:d6:
68:b6:d9:46:4c:da:f1:ca:bd:b5:70:ed:b8:b1:d2:2c:4c:a1:
ac:e8:8c:1e:3c:d7:1c:0d:4c:88:cc:57:57:a1:7b:bf:3e:24:
c6:b9:2a:5f:db:e7:0a:0e:50:fd:29:bf:63:fb:a7:db:90:15:
9f:04:c8:05:a4:50:85:22:03:5e:e1:e4:a9:13:8b:a3:cb:64:
45:1a:0d:d6:f1:59:96:5b:8e:04:77:78:b1:69:3c:62:6b:e9:
07:b9:c1:ac:3f:49:63:af:28:4d:21:3b:c0:4d:d4:03:68:7b:
b9:43:48:c6:40:53:b4:43:0c:5b:15:e4:63:62:da:16:df:37:
12:62:31:99:fa:f0:ae:da:be:f4:d5:96:07:30:c4:79:49:d0:
f9:27:50:91:ba:1f:7e:dd:0b:46:41:a8:e4:18:55:5a:37:aa:
fb:d2:8a:d9:6b:ff:19:7d:97:cb:ba:ae:1e:3f:95:66:c3:aa:
47:1b:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:03 2025 by rpki-client