Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/151F2E827B3B11EF80BDC540762E951A.roa
File: 151F2E827B3B11EF80BDC540762E951A.roa (raw, json)
Hash identifier: +sFHoHgCQHoGDtM7InUTilsDdnQATx775LFAedkvfBU=
Subject key identifier: 10:73:E2:F2:75:15:CF:B1:EC:71:EE:A8:24:62:D4:F7:F2:BC:62:52
Certificate issuer: /CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Certificate serial: 0241
Authority key identifier: C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/151F2E827B3B11EF80BDC540762E951A.roa
Signing time: Wed 25 Sep 2024 12:38:36 +0000
ROA not before: Wed 25 Sep 2024 12:38:32 +0000
ROA not after: Mon 25 Sep 2034 12:38:32 +0000
asID: 19711
IP address blocks: 41.84.224.0/22 maxlen: 22
41.84.224.0/24 maxlen: 24
41.84.225.0/24 maxlen: 24
41.84.226.0/24 maxlen: 24
41.84.227.0/24 maxlen: 24
41.84.228.0/24 maxlen: 24
41.84.229.0/24 maxlen: 24
41.84.230.0/24 maxlen: 24
41.84.231.0/24 maxlen: 24
41.84.232.0/21 maxlen: 21
41.84.232.0/24 maxlen: 24
41.84.233.0/24 maxlen: 24
41.84.234.0/24 maxlen: 24
41.84.235.0/24 maxlen: 24
41.84.236.0/24 maxlen: 24
41.84.237.0/24 maxlen: 24
41.84.238.0/24 maxlen: 24
41.84.239.0/24 maxlen: 24
41.84.240.0/22 maxlen: 22
41.84.240.0/24 maxlen: 24
41.84.241.0/24 maxlen: 24
41.84.242.0/24 maxlen: 24
41.84.243.0/24 maxlen: 24
41.84.244.0/24 maxlen: 24
41.84.245.0/24 maxlen: 24
41.84.246.0/23 maxlen: 23
41.84.246.0/24 maxlen: 24
41.84.247.0/24 maxlen: 24
41.84.248.0/23 maxlen: 23
41.84.248.0/24 maxlen: 24
41.84.249.0/24 maxlen: 24
41.84.250.0/24 maxlen: 24
41.84.251.0/24 maxlen: 24
41.84.252.0/24 maxlen: 24
41.84.253.0/24 maxlen: 24
41.84.254.0/24 maxlen: 24
41.84.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363EA80AF
Validity
Not Before: Sep 25 12:38:32 2024 GMT
Not After : Sep 25 12:38:32 2034 GMT
Subject: CN=66f4044c-1cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:92:24:c8:de:a2:41:ee:4f:2e:86:ff:49:
f1:89:22:4c:eb:8a:24:cf:6f:3b:13:88:48:ed:80:
6c:a3:24:0b:3f:bd:8e:01:b8:9a:8a:42:87:8e:52:
18:eb:8a:d6:e6:e5:4e:14:c3:17:d1:cb:ec:d2:b5:
f6:c7:8a:4f:65:7e:ff:d2:0d:c4:65:e8:9f:36:ed:
8a:d9:c4:6d:8e:71:31:0d:b1:68:87:15:6d:93:61:
9e:ec:e6:06:c6:3c:5e:ff:10:ee:ef:c4:43:64:5d:
70:ab:a8:a9:b0:79:2f:61:ca:e0:16:66:14:cf:71:
0f:15:98:cb:bb:ac:cc:8f:c1:8c:36:2f:e7:ea:cd:
c7:1d:94:e9:d2:2c:b0:3d:85:b5:a7:e1:fd:7f:eb:
1a:0a:95:67:11:14:65:f2:95:31:00:dd:f7:94:47:
0f:09:6d:a8:01:23:4c:22:c2:86:9f:30:96:34:dd:
ef:08:be:6d:d7:a4:5e:46:7f:2d:7b:c0:8c:bb:09:
a2:83:10:10:82:97:39:d4:15:33:cb:ab:34:10:d5:
2b:d7:f7:48:ed:3b:a6:95:d5:49:b3:7f:ce:12:59:
9f:1c:b8:c7:37:5e:35:14:4c:1d:6e:b2:4c:dc:c9:
cd:98:fa:fd:fc:93:24:48:45:3e:9d:f7:0b:f6:a1:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:73:E2:F2:75:15:CF:B1:EC:71:EE:A8:24:62:D4:F7:F2:BC:62:52
X509v3 Authority Key Identifier:
keyid:C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/151F2E827B3B11EF80BDC540762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.84.224.0/19
Signature Algorithm: sha256WithRSAEncryption
c1:fb:63:21:87:ed:63:c9:30:a3:ba:cb:e1:2b:a0:00:1c:55:
04:7d:8c:f1:4c:fe:e8:ee:19:0c:d7:e9:09:95:15:a8:95:b1:
31:a4:fa:6a:8d:b0:a6:0d:c9:5c:c8:d5:27:c5:1c:15:ca:75:
d1:30:17:0d:cd:89:2f:07:52:69:18:28:ff:1a:6d:4c:e5:13:
cb:96:4e:84:b1:2d:0c:2e:f2:7d:c5:cb:b4:be:60:50:24:c6:
59:1d:c6:13:71:09:14:50:3f:f2:e2:8c:d9:d3:cb:7c:44:0e:
be:b8:21:bf:90:11:99:f2:69:3b:08:37:d3:75:de:b8:11:6e:
96:0c:1d:f7:a6:00:87:90:31:17:14:21:0d:b8:23:75:7a:df:
5e:7c:ff:38:71:63:41:80:84:ea:f0:69:67:b2:8d:35:4f:bf:
5a:4f:d0:5b:53:56:63:2f:cb:e2:9e:73:87:d6:11:60:32:d2:
26:7e:d7:54:6e:2c:d3:9b:d3:04:e5:92:58:14:f7:65:4b:74:
01:ac:09:32:1b:2f:e6:1b:41:dd:51:5e:31:69:22:c9:0f:03:
ba:8b:58:49:18:d7:e2:b9:a8:7f:a2:15:40:ae:ab:94:6e:89:
4e:df:a3:3e:1d:9a:7a:9d:54:5f:42:e9:e5:20:6d:ba:b6:b1:
f2:50:28:f1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0VBODBBRjExMC8GA1UEBRMoQzY3QzYyMzExMjA5NDEyMzU1ODFENTk0MjU2NUFC
Rjc0MTlEQ0VDQzAeFw0yNDA5MjUxMjM4MzJaFw0zNDA5MjUxMjM4MzJaMBgxFjAU
BgNVBAMTDTY2ZjQwNDRjLTFjYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCY3ZIkyN6iQe5PLob/SfGJIkzriiTPbzsTiEjtgGyjJAs/vY4BuJqKQoeO
Uhjritbm5U4UwxfRy+zStfbHik9lfv/SDcRl6J827YrZxG2OcTENsWiHFW2TYZ7s
5gbGPF7/EO7vxENkXXCrqKmweS9hyuAWZhTPcQ8VmMu7rMyPwYw2L+fqzccdlOnS
LLA9hbWn4f1/6xoKlWcRFGXylTEA3feURw8JbagBI0wiwoafMJY03e8Ivm3XpF5G
fy17wIy7CaKDEBCClznUFTPLqzQQ1SvX90jtO6aV1Umzf84SWZ8cuMc3XjUUTB1u
skzcyc2Y+v38kyRIRT6d9wv2oQvfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUEHPi
8nUVz7Hsce6oJGLU9/K8YlIwHwYDVR0jBBgwFoAUxnxiMRIJQSNVgdWUJWWr90Gd
zswwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNFQTgwLzIzRDU0QjI4REREQTExRUQ4NjUzMkUwRDMwNkQ4QzFEL3hueGlN
UklKUVNOVmdkV1VKV1dyOTBHZHpzdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hueGlNUklKUVNOVmdkV1VKV1dyOTBHZHpzdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNFQTgwLzIzRDU0QjI4REREQTExRUQ4NjUzMkUwRDMw
NkQ4QzFELzE1MUYyRTgyN0IzQjExRUY4MEJEQzU0MDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUpVOAwDQYJKoZIhvcNAQEL
BQADggEBAMH7YyGH7WPJMKO6y+EroAAcVQR9jPFM/ujuGQzX6QmVFaiVsTGk+mqN
sKYNyVzI1SfFHBXKddEwFw3NiS8HUmkYKP8abUzlE8uWToSxLQwu8n3Fy7S+YFAk
xlkdxhNxCRRQP/LijNnTy3xEDr64Ib+QEZnyaTsIN9N13rgRbpYMHfemAIeQMRcU
IQ24I3V63158/zhxY0GAhOrwaWeyjTVPv1pP0FtTVmMvy+Kec4fWEWAy0iZ+11Ru
LNOb0wTlklgU92VLdAGsCTIbL+YbQd1RXjFpIskPA7qLWEkY1+K5qH+iFUCuq5Ru
iU7foz4dmnqdVF9C6eUgbbq2sfJQKPE=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:00:37 2025 by rpki-client