Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/2A6969386E9311EFAEB810B9762E951A.roa
File: 2A6969386E9311EFAEB810B9762E951A.roa (raw, json)
Hash identifier: ilOajwCUXHzAKa8nSehKCPLIoXgJRymdtQXo5h37NSc=
Subject key identifier: AC:06:E9:04:86:59:AF:85:CA:C2:14:8C:A8:0A:53:AA:E5:E3:93:BE
Certificate issuer: /CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Certificate serial: 0221
Authority key identifier: C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/2A6969386E9311EFAEB810B9762E951A.roa
Signing time: Mon 09 Sep 2024 10:06:22 +0000
ROA not before: Mon 09 Sep 2024 10:06:19 +0000
ROA not after: Sat 09 Sep 2034 10:06:19 +0000
asID: 19711
IP address blocks: 41.84.224.0/22 maxlen: 22
41.84.228.0/24 maxlen: 24
41.84.229.0/24 maxlen: 24
41.84.230.0/24 maxlen: 24
41.84.231.0/24 maxlen: 24
41.84.232.0/21 maxlen: 21
41.84.240.0/22 maxlen: 22
41.84.244.0/24 maxlen: 24
41.84.245.0/24 maxlen: 24
41.84.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363EA80AF
Validity
Not Before: Sep 9 10:06:19 2024 GMT
Not After : Sep 9 10:06:19 2034 GMT
Subject: CN=66dec89e-b4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:78:87:86:80:8e:69:e9:0a:0e:65:de:4a:
bb:2c:6e:11:e9:4c:3c:d0:99:08:a2:3f:cf:5f:49:
78:f2:03:ba:06:1e:1a:b9:69:79:8c:f2:bf:59:d5:
a1:0b:15:f7:e7:3c:b3:6b:a1:62:c6:d4:bf:20:7f:
92:51:f9:0f:86:64:ba:fc:a5:47:fe:62:fc:bf:50:
cc:b2:6d:9f:ef:7a:5c:d6:60:5d:7f:31:25:84:ba:
e5:fc:b1:1e:0c:6d:88:b2:f4:d5:df:27:5b:7d:88:
c7:1d:11:21:73:9d:c6:57:2b:84:e3:9b:3f:1f:1d:
35:26:65:08:d5:b5:d2:74:ec:88:88:8f:fc:12:34:
3b:74:07:ad:14:b8:0b:61:b5:62:00:d8:04:12:4c:
da:17:24:fe:20:94:99:86:df:d6:4f:fb:16:32:fe:
33:fe:3d:af:88:fd:47:30:39:dc:13:c3:8c:f9:09:
19:6e:64:dc:30:0d:1c:82:8a:45:2f:21:ac:c2:3a:
68:a5:3f:ce:03:c5:2e:42:92:0b:52:5e:86:88:f4:
a0:0b:f8:ee:7f:a0:84:ea:e3:9d:ab:8d:27:a6:28:
19:92:01:35:a6:11:37:68:f6:9e:ab:16:e2:57:af:
38:07:d6:6f:21:0f:ff:14:c2:b3:d7:5d:3a:33:d1:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:06:E9:04:86:59:AF:85:CA:C2:14:8C:A8:0A:53:AA:E5:E3:93:BE
X509v3 Authority Key Identifier:
keyid:C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/2A6969386E9311EFAEB810B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.84.224.0-41.84.247.255
Signature Algorithm: sha256WithRSAEncryption
71:ec:3b:d3:33:23:99:a3:d7:16:54:ff:92:cc:d2:77:63:e7:
1d:9a:d8:39:de:93:c5:06:04:90:fe:57:21:e1:2c:23:e0:a6:
e7:b3:91:5f:93:c5:09:e3:a2:32:98:4d:5c:70:b0:32:c9:2d:
a8:4d:e6:6f:35:0c:5e:0e:dd:ea:cb:fa:b0:73:d5:86:7b:22:
72:fb:15:8f:36:14:06:ef:2e:f4:dd:42:57:6e:7d:27:7d:c7:
61:00:8b:90:6f:b7:78:9d:35:9d:60:28:e5:2f:36:ad:cd:33:
5b:e8:46:47:67:c8:37:7f:08:c1:db:b2:da:75:2a:0e:75:93:
2f:4d:63:0a:fa:a8:24:c6:98:c4:2b:48:53:b6:54:5c:3a:1c:
9d:31:75:36:7f:1f:ec:04:27:35:c1:42:e1:f2:de:72:8f:c0:
8b:f5:c3:c6:18:d1:be:2c:dd:09:fe:7e:d4:39:39:37:91:f0:
9c:e8:a9:4e:8d:68:71:aa:31:2b:3b:b8:37:25:5b:a9:b4:b7:
17:14:a6:80:b5:f0:61:b5:aa:77:43:aa:06:62:00:58:cb:ec:
79:b1:31:73:eb:8b:c0:da:92:0d:43:dc:56:46:5c:4d:41:74:
28:cb:82:72:36:f1:ea:70:90:65:eb:d8:34:81:fa:5b:3d:97:
26:a0:66:38
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0VBODBBRjExMC8GA1UEBRMoQzY3QzYyMzExMjA5NDEyMzU1ODFENTk0MjU2NUFC
Rjc0MTlEQ0VDQzAeFw0yNDA5MDkxMDA2MTlaFw0zNDA5MDkxMDA2MTlaMBgxFjAU
BgNVBAMTDTY2ZGVjODllLWI0YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHSniHhoCOaekKDmXeSrssbhHpTDzQmQiiP89fSXjyA7oGHhq5aXmM8r9Z
1aELFffnPLNroWLG1L8gf5JR+Q+GZLr8pUf+Yvy/UMyybZ/velzWYF1/MSWEuuX8
sR4MbYiy9NXfJ1t9iMcdESFzncZXK4Tjmz8fHTUmZQjVtdJ07IiIj/wSNDt0B60U
uAthtWIA2AQSTNoXJP4glJmG39ZP+xYy/jP+Pa+I/UcwOdwTw4z5CRluZNwwDRyC
ikUvIazCOmilP84DxS5CkgtSXoaI9KAL+O5/oITq452rjSemKBmSATWmETdo9p6r
FuJXrzgH1m8hD/8UwrPXXToz0UXbAgMBAAGjggKtMIICqTAdBgNVHQ4EFgQUrAbp
BIZZr4XKwhSMqApTquXjk74wHwYDVR0jBBgwFoAUxnxiMRIJQSNVgdWUJWWr90Gd
zswwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNFQTgwLzIzRDU0QjI4REREQTExRUQ4NjUzMkUwRDMwNkQ4QzFEL3hueGlN
UklKUVNOVmdkV1VKV1dyOTBHZHpzdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hueGlNUklKUVNOVmdkV1VKV1dyOTBHZHpzdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNFQTgwLzIzRDU0QjI4REREQTExRUQ4NjUzMkUwRDMw
NkQ4QzFELzJBNjk2OTM4NkU5MzExRUZBRUI4MTBCOTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEBSlU4AMEAylU8DANBgkq
hkiG9w0BAQsFAAOCAQEAcew70zMjmaPXFlT/kszSd2PnHZrYOd6TxQYEkP5XIeEs
I+Cm57ORX5PFCeOiMphNXHCwMsktqE3mbzUMXg7d6sv6sHPVhnsicvsVjzYUBu8u
9N1CV259J33HYQCLkG+3eJ01nWAo5S82rc0zW+hGR2fIN38Iwduy2nUqDnWTL01j
CvqoJMaYxCtIU7ZUXDocnTF1Nn8f7AQnNcFC4fLeco/Ai/XDxhjRvizdCf5+1Dk5
N5HwnOipTo1ocaoxKzu4NyVbqbS3FxSmgLXwYbWqd0OqBmIAWMvsebExc+uLwNqS
DUPcVkZcTUF0KMuCcjbx6nCQZevYNIH6Wz2XJqBmOA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:03:48 2025 by rpki-client