Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/2AB0E234AC1411EC96AA7FC15A40D577.roa
File: 2AB0E234AC1411EC96AA7FC15A40D577.roa (raw, json)
Hash identifier: BrTKFj5A/VY/qMYOZ2USpl15Cu5YnVGnVzrU1Lcg0X4=
Subject key identifier: 49:E1:DF:57:97:0A:B9:7E:E0:08:0E:43:47:9F:24:1F:CE:88:18:EB
Certificate issuer: /CN=F3615A34AF/serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
Certificate serial: 0A
Authority key identifier: 13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/2AB0E234AC1411EC96AA7FC15A40D577.roa
Signing time: Fri 25 Mar 2022 08:18:36 +0000
ROA not before: Fri 25 Mar 2022 08:18:32 +0000
ROA not after: Sun 24 Mar 2024 08:18:32 +0000
asID: 36914
IP address blocks: 41.89.0.0/16 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3615A34AF
Validity
Not Before: Mar 25 08:18:32 2022 GMT
Not After : Mar 24 08:18:32 2024 GMT
Subject: CN=623d7adc-6c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:59:0c:18:c0:07:aa:6d:5b:ba:6d:d4:2c:b8:
11:d7:45:cb:d4:b9:41:79:f7:14:b1:4c:14:78:4b:
d2:8f:f7:9b:1f:e7:81:85:9b:45:e9:d0:1d:e8:ac:
b3:a9:10:19:0d:25:dd:25:2f:d5:6f:2f:6b:22:7f:
f7:53:8b:2a:4a:bb:bf:18:b8:5e:3c:1e:f6:f7:e2:
67:3d:cd:b7:1c:16:99:df:4b:2e:d7:25:a3:81:b4:
72:4a:b5:28:d7:82:8e:0f:58:6f:34:8f:3a:71:ff:
ba:be:03:f2:bb:74:6d:19:98:1c:21:80:3d:0e:e5:
5a:bb:83:e1:f7:f5:fd:ee:92:ef:17:05:23:a6:16:
e2:6d:3e:0f:90:fd:69:5f:2f:4e:51:82:59:58:05:
5e:94:aa:84:75:89:6b:e8:16:56:1b:a6:15:e3:27:
3f:54:f0:18:78:86:71:d4:ee:e1:7e:d1:3f:c6:fb:
25:65:20:44:53:41:7a:3b:a0:11:3e:d2:db:32:6d:
63:7e:43:a0:19:f0:97:db:57:9c:10:8d:1a:d3:65:
06:42:db:03:05:f4:3a:58:5e:4a:b9:a8:4f:39:2c:
0e:a6:ea:24:93:b2:dc:2a:74:55:b2:03:40:c0:59:
d5:98:dc:56:a0:f8:fe:f2:8a:dc:1a:bb:4e:fb:42:
ac:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E1:DF:57:97:0A:B9:7E:E0:08:0E:43:47:9F:24:1F:CE:88:18:EB
X509v3 Authority Key Identifier:
keyid:13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/2AB0E234AC1411EC96AA7FC15A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.89.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:58:c3:35:9f:3a:c8:74:0a:f0:b4:2c:af:a4:90:ca:b3:16:
ee:21:bd:88:e7:34:6e:a2:ae:2b:22:39:63:5e:39:86:50:bb:
36:ea:33:30:0a:be:d7:d0:99:ac:f0:7c:66:86:a0:bd:e3:5b:
b9:3e:c5:b1:46:7b:38:9a:b9:4a:f7:f4:21:ce:24:60:41:7a:
3d:38:8b:04:4f:16:5b:2a:37:59:6e:56:54:cf:36:fd:40:dd:
ad:db:57:0b:f3:f1:93:18:1e:7b:23:37:1e:c1:79:94:00:38:
93:47:36:73:9e:ce:fe:83:1a:70:43:97:14:70:95:e0:1f:1e:
8d:5f:d5:74:e9:f8:ab:4f:8f:58:6f:05:9c:4c:67:a8:88:cd:
21:4b:8a:b6:23:32:1b:ae:cb:fc:7b:25:cc:17:d4:59:eb:13:
87:dc:0d:f7:55:6a:2c:12:54:5b:a8:e5:1a:ec:eb:5c:85:1a:
2e:02:5f:d0:20:31:30:0c:a4:c1:56:ec:3d:0e:93:5d:b7:2e:
23:67:eb:31:06:5b:0d:4e:96:93:49:c5:01:52:67:5d:70:d9:
91:16:9d:6b:c6:af:67:40:c6:cd:c6:21:8c:fb:ad:68:2f:79:
bf:91:15:75:d7:1d:a4:b9:c4:7f:5e:67:0d:7e:d2:ba:73:d2:
9f:91:10:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:01 2025 by rpki-client