Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/603F44FEF4F511EF825958B5762E951A.roa
File: 603F44FEF4F511EF825958B5762E951A.roa (raw, json)
Hash identifier: Ba8AFZPMa3HGsyKURqI70r5EW0Munyy3hZ7Nh86XhXk=
Subject key identifier: 65:64:E9:07:0E:5B:D4:7C:1E:BA:3C:E0:1C:14:3D:8B:16:E2:72:69
Certificate issuer: /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial: 0DE6
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/603F44FEF4F511EF825958B5762E951A.roa
Signing time: Thu 27 Feb 2025 10:26:59 +0000
ROA not before: Thu 27 Feb 2025 10:26:55 +0000
ROA not after: Thu 27 Feb 2031 10:26:55 +0000
asID: 37199
IP address blocks: 41.76.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3558 (0xde6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361D299AF
Validity
Not Before: Feb 27 10:26:55 2025 GMT
Not After : Feb 27 10:26:55 2031 GMT
Subject: CN=67c03df3-9510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:8a:09:a3:e4:e7:98:34:c9:cc:a2:1e:fb:
14:a0:8d:df:fc:50:2a:bb:1d:b7:dd:c5:11:18:c9:
7d:d1:42:62:13:94:bb:5a:64:50:74:45:2b:84:aa:
a3:bc:4e:2b:51:c5:ed:e0:fb:0c:6e:fb:32:ed:7e:
6f:76:ed:c0:fa:5a:2b:12:4a:38:bd:dc:65:74:e1:
39:1f:a7:05:c8:8e:f5:59:ee:a8:a8:76:9b:fc:97:
4c:a5:c3:92:d0:97:5e:49:bd:96:2a:10:7f:b0:dc:
6d:37:38:a2:22:26:e0:88:dd:60:bb:a8:21:ca:0f:
76:87:2c:16:cd:17:82:a9:09:e5:a4:ae:01:1d:5a:
c5:b7:90:16:56:32:a0:84:0e:55:57:3e:1f:c2:04:
ad:5d:58:df:bf:6e:9f:93:72:c7:56:f4:37:79:d6:
e0:b7:06:0e:79:ea:b1:53:f7:46:16:87:ef:af:b7:
49:a2:58:42:fd:23:0a:f1:e1:44:0e:0d:7d:51:3a:
7a:74:bd:38:5b:21:05:6d:79:be:ca:09:68:a6:88:
bd:21:f2:71:bd:43:1d:08:3b:2b:cf:cb:cc:9d:a6:
dd:9b:ec:33:17:2d:4f:32:a2:96:4b:a5:31:99:74:
16:6f:b1:9b:da:83:07:65:10:43:1c:eb:4a:67:6c:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:64:E9:07:0E:5B:D4:7C:1E:BA:3C:E0:1C:14:3D:8B:16:E2:72:69
X509v3 Authority Key Identifier:
keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/603F44FEF4F511EF825958B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.128.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:ba:7b:64:b5:6b:53:88:22:7c:b7:29:ef:5d:57:49:8c:be:
dc:da:20:ca:1d:f5:4f:29:48:8e:09:44:20:e8:0c:84:9f:4e:
8b:1c:ef:0a:ac:8b:22:c0:a4:95:1b:8c:c8:b8:6e:d0:f9:ab:
b9:98:91:bf:1c:68:13:f0:24:fe:f9:a9:24:10:f3:8b:d5:2e:
53:3d:7c:99:0d:6f:fd:6b:58:df:f3:97:d4:15:a5:0d:21:bb:
12:d0:11:60:68:a8:fd:76:3c:d8:41:e0:f1:8a:ce:14:c5:46:
00:2f:a5:93:f5:6e:9b:c8:ef:f5:fc:e2:0c:71:8e:20:df:93:
93:a5:71:0e:a9:5a:01:90:0c:db:cc:c8:93:8c:57:36:65:91:
c0:65:ef:f0:f3:9a:aa:9b:32:d6:9c:49:27:70:2f:24:7c:49:
1f:50:be:69:d4:e5:24:12:b0:a3:e1:e0:87:f6:1d:53:9c:e4:
31:cf:96:72:82:ef:17:8b:b8:85:ae:79:83:cc:b6:a8:7c:47:
11:50:75:7a:88:c6:e4:85:5e:50:30:f1:78:32:59:83:6f:f9:
22:a1:b4:96:a2:45:4f:05:2f:dc:6a:4c:08:fa:9f:0f:8d:df:
4f:b8:3d:7a:ea:21:a5:e6:a4:c1:f1:a4:49:ed:58:3a:4f:b7:
dc:57:28:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:04 2025 by rpki-client