Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/7D84B6FA6F8C11EF82390755762E951A.roa
File: 7D84B6FA6F8C11EF82390755762E951A.roa (raw, json)
Hash identifier: +gy0KDI/467NkkhdN1/694FbErNBmh4ej/pR9ChD5T4=
Subject key identifier: 5D:6B:26:90:B3:31:A8:F1:BD:E5:FC:CC:36:80:52:9B:D8:3D:C1:19
Certificate issuer: /CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Certificate serial: 022D
Authority key identifier: C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/7D84B6FA6F8C11EF82390755762E951A.roa
Signing time: Tue 10 Sep 2024 15:51:06 +0000
ROA not before: Tue 10 Sep 2024 15:51:03 +0000
ROA not after: Sun 10 Sep 2034 15:51:03 +0000
asID: 19711
IP address blocks: 41.215.144.0/24 maxlen: 24
41.215.145.0/24 maxlen: 24
41.215.146.0/24 maxlen: 24
41.215.147.0/24 maxlen: 24
41.215.148.0/24 maxlen: 24
41.215.149.0/24 maxlen: 24
41.215.150.0/24 maxlen: 24
41.215.151.0/24 maxlen: 24
41.215.152.0/24 maxlen: 24
41.215.153.0/24 maxlen: 24
41.215.154.0/24 maxlen: 24
41.215.155.0/24 maxlen: 24
41.215.156.0/24 maxlen: 24
41.215.157.0/24 maxlen: 24
41.215.158.0/24 maxlen: 24
41.215.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363EA80AF
Validity
Not Before: Sep 10 15:51:03 2024 GMT
Not After : Sep 10 15:51:03 2034 GMT
Subject: CN=66e06aea-0bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:d4:7d:27:25:99:3a:a8:46:fb:ad:a8:78:
2f:28:02:23:55:a6:6b:40:6f:f3:90:69:89:c1:f8:
9a:cc:ba:cd:9b:76:f0:6c:df:0d:b6:67:1a:37:68:
1c:09:bf:92:9c:8a:65:65:88:cd:32:de:34:52:24:
15:16:60:5a:4b:28:bd:17:fe:99:11:d6:51:5a:8f:
bb:00:23:7f:6d:46:30:37:49:62:e6:db:b1:07:30:
32:58:0e:e2:43:33:ac:3f:50:2b:de:4a:f2:af:8f:
5e:56:b7:18:b9:da:00:26:ac:b0:2a:f7:3c:85:78:
66:20:93:87:f9:a3:f6:2c:1c:f8:ec:3d:7c:cf:29:
79:34:82:58:a1:e7:51:9e:a2:13:d4:59:18:28:e8:
c2:ab:fd:fa:d9:50:f3:5a:fe:61:8e:07:34:0a:91:
5a:8c:c4:33:88:e1:5b:3b:93:53:05:7f:e6:b5:5d:
4f:bf:e5:2f:df:f5:75:09:76:9f:2a:27:b4:df:c6:
10:42:a6:88:7e:5f:1a:97:d7:e1:1b:17:87:6a:cd:
7b:3c:f3:14:0a:55:97:ab:6b:f6:af:64:60:d8:a4:
7b:d2:2f:0a:77:3f:1b:41:a0:75:ed:a5:f8:f0:70:
c1:8c:28:ef:6f:7e:a6:a8:99:56:7c:e3:12:89:08:
35:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6B:26:90:B3:31:A8:F1:BD:E5:FC:CC:36:80:52:9B:D8:3D:C1:19
X509v3 Authority Key Identifier:
keyid:C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/7D84B6FA6F8C11EF82390755762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.215.144.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:6a:12:1c:0b:c6:1f:c0:22:36:32:d5:f4:0d:e3:28:c6:57:
5b:e6:1f:1a:8d:dd:82:1d:39:22:71:7a:c9:af:55:44:0e:2a:
c0:e7:25:33:83:fb:db:20:a0:b3:4e:84:01:63:44:be:fb:dc:
bd:ba:28:0d:0a:d1:f4:e4:01:25:5e:ca:bc:ca:fd:a6:a0:e0:
fd:87:12:70:bc:e1:37:ed:29:a8:c5:d3:42:98:09:6c:73:03:
fd:ef:ab:c3:52:2c:39:0b:fc:d5:9f:f9:47:dd:a1:71:0e:ca:
f8:af:6f:84:b9:a4:30:31:29:1e:6a:f1:91:ba:d5:20:1a:e1:
64:66:ab:07:66:02:2e:76:fd:45:8b:ae:ca:fa:14:d9:2a:be:
a0:54:0d:c5:ff:6c:7f:d4:fa:38:28:20:80:14:b4:d8:3a:89:
05:84:a0:32:59:e5:78:ab:0e:d6:21:0e:56:24:55:f3:ca:17:
4f:5f:08:15:24:68:31:e4:56:b1:aa:6d:cf:af:93:8e:9f:e6:
25:3f:c5:d6:51:57:75:74:2e:ad:e3:4b:45:67:75:83:57:ed:
16:5e:34:34:6a:7d:54:dd:70:40:29:6c:80:2d:35:c4:e5:70:
95:1a:4c:b7:3a:99:91:f6:e8:f5:dc:c6:12:d8:e1:dc:d6:52:
15:80:b8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:01:08 2025 by rpki-client