Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/D1982E4E706711EF8FA752B1762E951A.roa
File: D1982E4E706711EF8FA752B1762E951A.roa (raw, json)
Hash identifier: 13e2tsP9vZSc4kP/9gYLRySR8RimddvRM/CF31h+Gls=
Subject key identifier: 5C:BC:A7:79:D0:8A:E5:E8:1A:E2:4D:FD:10:10:F1:D7:34:32:F8:75
Certificate issuer: /CN=F3615A34AF/serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
Certificate serial: 03B4
Authority key identifier: 13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/D1982E4E706711EF8FA752B1762E951A.roa
Signing time: Wed 11 Sep 2024 18:01:07 +0000
ROA not before: Wed 11 Sep 2024 18:01:02 +0000
ROA not after: Mon 11 Sep 2034 18:01:02 +0000
asID: 36914
IP address blocks: 41.204.160.0/19 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948 (0x3b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3615A34AF
Validity
Not Before: Sep 11 18:01:02 2024 GMT
Not After : Sep 11 18:01:02 2034 GMT
Subject: CN=66e1dae3-5ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:c8:d5:dc:80:04:09:08:de:d8:36:fa:72:
29:52:b3:e8:79:23:7a:d9:c4:cc:08:6f:74:a5:a7:
57:8b:fe:00:76:08:6e:ee:56:c5:93:87:df:69:b4:
65:fd:28:f4:a0:38:49:4f:fd:48:21:81:ed:d7:68:
34:f7:2b:92:ea:24:50:c0:76:d7:0f:9b:82:68:3f:
4e:f7:2d:c5:61:bc:7d:17:a1:f0:db:cf:0c:6a:0b:
4d:66:8c:13:87:f4:71:b9:bf:c6:5f:02:44:1c:17:
d7:3e:2e:0a:29:e1:7b:b4:b9:f4:c0:c8:b0:bf:42:
66:ec:2a:a0:0d:97:0e:57:63:ea:b2:e6:67:d2:60:
98:6d:ca:eb:28:31:1e:25:7e:60:07:48:3c:bc:39:
ec:33:7b:e2:f1:3d:47:31:b1:69:f6:8a:ad:d8:56:
a0:75:c8:a0:5f:7e:68:d1:48:c4:72:8d:1d:99:68:
8b:1b:e6:2a:55:d4:5c:fa:3e:17:21:90:58:ae:40:
69:b3:9e:02:db:ed:21:16:3e:15:1d:c4:60:cc:bc:
40:71:6a:e1:c2:83:38:e3:13:ec:45:37:39:56:68:
e1:05:53:5a:f3:70:5c:23:29:2c:26:1f:ef:5d:d0:
03:77:27:1c:ae:d5:bd:3b:32:11:01:25:ef:eb:cb:
2f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BC:A7:79:D0:8A:E5:E8:1A:E2:4D:FD:10:10:F1:D7:34:32:F8:75
X509v3 Authority Key Identifier:
keyid:13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/D1982E4E706711EF8FA752B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.204.160.0/19
Signature Algorithm: sha256WithRSAEncryption
78:d0:1d:97:76:10:b6:9a:f3:56:a9:fe:c1:ee:0a:fc:ad:68:
5f:3e:c6:02:62:92:7b:97:62:4b:33:aa:bf:20:61:f6:4e:88:
07:2c:62:31:c2:01:2a:80:69:86:8f:4b:4a:fd:43:39:df:0e:
56:43:dc:25:a2:8a:41:c2:2b:2f:8e:ec:d8:cf:2c:52:58:8b:
72:e0:bf:c0:e9:c9:40:98:15:f4:38:7a:2c:3d:a6:7a:87:20:
99:66:43:26:32:27:07:b4:bb:44:87:e7:31:34:c9:36:53:90:
00:ca:32:d0:4a:c5:f2:84:1e:f5:8d:1a:12:26:ed:cb:54:00:
29:2d:a3:6b:0b:a1:cc:05:84:58:d2:3b:c0:c5:86:3d:11:bd:
b0:74:e3:c1:b5:b5:28:94:9c:4c:cf:90:eb:9f:37:3f:90:a7:
a6:96:9d:01:3f:e4:19:2d:8d:d3:69:05:cc:45:b5:25:b6:d0:
d1:1a:5d:bb:c0:b8:8a:e7:fc:a2:e5:ad:32:53:6a:a9:ad:ce:
46:ae:0f:36:c6:f8:6c:33:16:d4:a7:12:d5:8a:d1:9b:da:f8:
75:1e:a0:50:b4:2e:36:0d:8c:81:f9:12:b7:1a:06:9a:39:31:
10:95:d9:d4:52:79:a8:c6:10:31:5a:30:e4:61:3a:67:10:17:
05:b0:9d:73
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA7QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTVBMzRBRjExMC8GA1UEBRMoMTMxRERFNEYwMDM3OUNGNEYxNDNENUQwMEUxMzdE
Njk3QTBFQjc4MzAeFw0yNDA5MTExODAxMDJaFw0zNDA5MTExODAxMDJaMBgxFjAU
BgNVBAMTDTY2ZTFkYWUzLTVlY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDH+cjV3IAECQje2Db6cilSs+h5I3rZxMwIb3Slp1eL/gB2CG7uVsWTh99p
tGX9KPSgOElP/Ughge3XaDT3K5LqJFDAdtcPm4JoP073LcVhvH0XofDbzwxqC01m
jBOH9HG5v8ZfAkQcF9c+Lgop4Xu0ufTAyLC/QmbsKqANlw5XY+qy5mfSYJhtyuso
MR4lfmAHSDy8Oewze+LxPUcxsWn2iq3YVqB1yKBffmjRSMRyjR2ZaIsb5ipV1Fz6
PhchkFiuQGmzngLb7SEWPhUdxGDMvEBxauHCgzjjE+xFNzlWaOEFU1rzcFwjKSwm
H+9d0AN3Jxyu1b07MhEBJe/ryy8lAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXLyn
edCK5ega4k39EBDx1zQy+HUwHwYDVR0jBBgwFoAUEx3eTwA3nPTxQ9XQDhN9aXoO
t4MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE1QTM0LzAyQjUyNjkyQUMwRTExRUNCM0JDMEZCMDVBNDBENTc3L0V4M2VU
d0EzblBUeFE5WFFEaE45YVhvT3Q0TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0V4M2VUd0EzblBUeFE5WFFEaE45YVhvT3Q0TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE1QTM0LzAyQjUyNjkyQUMwRTExRUNCM0JDMEZCMDVB
NDBENTc3L0QxOTgyRTRFNzA2NzExRUY4RkE3NTJCMTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUpzKAwDQYJKoZIhvcNAQEL
BQADggEBAHjQHZd2ELaa81ap/sHuCvytaF8+xgJiknuXYkszqr8gYfZOiAcsYjHC
ASqAaYaPS0r9QznfDlZD3CWiikHCKy+O7NjPLFJYi3Lgv8DpyUCYFfQ4eiw9pnqH
IJlmQyYyJwe0u0SH5zE0yTZTkADKMtBKxfKEHvWNGhIm7ctUACkto2sLocwFhFjS
O8DFhj0RvbB048G1tSiUnEzPkOufNz+Qp6aWnQE/5BktjdNpBcxFtSW20NEaXbvA
uIrn/KLlrTJTaqmtzkauDzbG+GwzFtSnEtWK0Zva+HUeoFC0LjYNjIH5ErcaBpo5
MRCV2dRSeajGEDFaMORhOmcQFwWwnXM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:31 2025 by rpki-client