Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/BE403084F2A411EFA60BB451762E951A.roa
File: BE403084F2A411EFA60BB451762E951A.roa (raw, json)
Hash identifier: ia48RiXRj/TS/ZIH2z01yABB9uM5rlXdHXcHKIZJfs4=
Subject key identifier: BF:F2:44:B7:33:BA:21:93:F7:DA:67:7F:C7:E9:9C:68:2E:F4:7C:8D
Certificate issuer: /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial: 0DDF
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/BE403084F2A411EFA60BB451762E951A.roa
Signing time: Mon 24 Feb 2025 11:44:45 +0000
ROA not before: Mon 24 Feb 2025 11:44:40 +0000
ROA not after: Sun 24 Feb 2030 11:44:40 +0000
asID: 37199
IP address blocks: 41.76.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3551 (0xddf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361D299AF
Validity
Not Before: Feb 24 11:44:40 2025 GMT
Not After : Feb 24 11:44:40 2030 GMT
Subject: CN=67bc5bad-7819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8b:f3:55:96:89:2f:b5:39:cb:b8:71:fa:67:
34:4a:ee:17:fd:73:5a:eb:7e:11:ce:e2:53:07:1c:
41:1e:92:5a:47:10:19:16:5f:84:71:62:34:18:15:
e8:7b:fa:fa:e8:be:ed:65:ef:39:18:34:e7:9e:5e:
d3:3b:16:dc:ab:46:61:39:66:4d:c1:3d:cd:75:5a:
3a:2c:92:bf:ad:a6:a0:ec:7c:5b:fb:af:85:fd:1b:
c7:a2:87:74:7b:de:cb:90:5c:43:03:6d:59:02:06:
79:54:ec:bc:45:94:1c:b8:d9:a2:10:43:95:46:6c:
71:94:84:d8:3a:02:c6:ca:0e:58:7b:a8:f5:ec:6c:
3e:22:08:81:ee:49:66:44:e8:4f:df:58:b5:1c:25:
2b:a3:dc:48:f8:b1:a1:4f:8d:58:10:27:31:63:8d:
f6:f6:28:15:25:99:13:46:d6:57:aa:79:b9:54:d8:
9a:c2:e2:a5:b3:6f:ba:44:e0:3b:53:db:a6:47:5b:
98:ee:c7:73:1d:a7:6a:a6:f1:58:51:3e:39:94:79:
9a:54:8d:22:4d:d6:44:50:e0:87:ff:0e:06:c8:1c:
7a:6e:eb:cb:60:ac:44:b7:26:e0:b0:14:7e:d3:9d:
9b:96:3c:d1:51:dd:26:b9:b0:84:18:de:b0:f9:b0:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F2:44:B7:33:BA:21:93:F7:DA:67:7F:C7:E9:9C:68:2E:F4:7C:8D
X509v3 Authority Key Identifier:
keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/BE403084F2A411EFA60BB451762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.128.0/21
Signature Algorithm: sha256WithRSAEncryption
17:33:aa:66:28:16:4d:f9:0f:88:bd:63:c7:0f:04:99:ef:ed:
ac:33:71:c9:05:f7:fc:bd:ba:c7:83:2a:89:48:39:d8:be:65:
f1:07:e7:b2:11:62:89:a6:9f:62:4e:9c:06:9d:b1:72:0e:91:
8e:bb:1e:6f:95:c9:cd:cb:d5:09:72:b2:ce:de:fd:dc:65:b1:
cb:26:b0:d7:fb:c0:c2:1a:7c:a0:4f:4b:99:4a:db:28:88:16:
7c:9d:dd:48:04:ca:13:f9:c5:49:b1:ce:4f:45:fc:2c:b9:ae:
c0:ae:bf:c6:83:82:e8:25:d7:fd:e3:86:3d:90:ff:b6:6f:59:
48:da:a8:6b:e6:9d:d2:51:b2:7a:a7:2e:00:a9:32:fc:9a:01:
f7:7e:07:e0:c6:12:95:20:a2:10:60:fc:02:84:64:18:d9:01:
f0:c0:fe:af:e0:6c:eb:c2:9a:d8:cf:bb:c2:be:f3:5c:d0:38:
b3:95:7e:eb:67:f1:f4:01:f3:e0:ec:a0:57:92:86:53:1b:63:
be:d1:34:d9:7c:4c:e4:c9:ea:bc:a4:61:f2:5c:fb:49:fc:b8:
07:d9:55:af:64:a4:10:17:ea:64:04:87:6e:db:4c:64:eb:d8:
e1:d1:83:ce:17:c2:4d:0f:17:7a:c9:e6:34:cf:2a:ca:59:1e:
7e:69:a0:56
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDd8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUQyOTlBRjExMC8GA1UEBRMoMkIyNDQyODQ4MTc0QUE4ODk0NDY5QTc3OUI5RkQ3
REE0OTU4QzY2OTAeFw0yNTAyMjQxMTQ0NDBaFw0zMDAyMjQxMTQ0NDBaMBgxFjAU
BgNVBAMTDTY3YmM1YmFkLTc4MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDti/NVlokvtTnLuHH6ZzRK7hf9c1rrfhHO4lMHHEEeklpHEBkWX4RxYjQY
Feh7+vrovu1l7zkYNOeeXtM7FtyrRmE5Zk3BPc11Wjoskr+tpqDsfFv7r4X9G8ei
h3R73suQXEMDbVkCBnlU7LxFlBy42aIQQ5VGbHGUhNg6AsbKDlh7qPXsbD4iCIHu
SWZE6E/fWLUcJSuj3Ej4saFPjVgQJzFjjfb2KBUlmRNG1leqeblU2JrC4qWzb7pE
4DtT26ZHW5jux3Mdp2qm8VhRPjmUeZpUjSJN1kRQ4If/DgbIHHpu68tgrES3JuCw
FH7TnZuWPNFR3Sa5sIQY3rD5sLDvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUv/JE
tzO6IZP32md/x+mcaC70fI0wHwYDVR0jBBgwFoAUKyRChIF0qoiURpp3m5/X2klY
xmkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFEMjk5LzQ4RjAwOEQ4NTZENTExRTU4NDVFRjg1Q0Y4QUVBMjI4L0t5UkNo
SUYwcW9pVVJwcDNtNV9YMmtsWXhtay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0t5UkNoSUYwcW9pVVJwcDNtNV9YMmtsWXhtay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjFEMjk5LzQ4RjAwOEQ4NTZENTExRTU4NDVFRjg1Q0Y4
QUVBMjI4L0JFNDAzMDg0RjJBNDExRUZBNjBCQjQ1MTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMpTIAwDQYJKoZIhvcNAQEL
BQADggEBABczqmYoFk35D4i9Y8cPBJnv7awzcckF9/y9useDKolIOdi+ZfEH57IR
Yommn2JOnAadsXIOkY67Hm+Vyc3L1Qlyss7e/dxlscsmsNf7wMIafKBPS5lK2yiI
Fnyd3UgEyhP5xUmxzk9F/Cy5rsCuv8aDgugl1/3jhj2Q/7ZvWUjaqGvmndJRsnqn
LgCpMvyaAfd+B+DGEpUgohBg/AKEZBjZAfDA/q/gbOvCmtjPu8K+81zQOLOVfutn
8fQB8+DsoFeShlMbY77RNNl8TOTJ6rykYfJc+0n8uAfZVa9kpBAX6mQEh27bTGTr
2OHRg84Xwk0PF3rJ5jTPKspZHn5poFY=
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:48:00 2025 by rpki-client