Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/A8B9E3A0D23211EFA0D093AD762E951A.roa
File: A8B9E3A0D23211EFA0D093AD762E951A.roa (raw, json)
Hash identifier: TwodjfSPJtOum7H0x8fQ1+YqsoDP0TA/A3LbvBR8fR0=
Subject key identifier: DA:8B:8C:B3:88:C8:B5:3E:64:C0:90:2B:F7:38:E6:D4:E5:45:F3:6D
Certificate issuer: /CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Certificate serial: 0105
Authority key identifier: 48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/A8B9E3A0D23211EFA0D093AD762E951A.roa
Signing time: Tue 14 Jan 2025 04:47:29 +0000
ROA not before: Tue 14 Jan 2025 04:47:25 +0000
ROA not after: Thu 31 Dec 2026 04:47:25 +0000
asID: 37030
IP address blocks: 41.190.88.0/24 maxlen: 24
41.190.89.0/24 maxlen: 24
41.190.90.0/24 maxlen: 24
41.190.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AF
Validity
Not Before: Jan 14 04:47:25 2025 GMT
Not After : Dec 31 04:47:25 2026 GMT
Subject: CN=6785ec61-bee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:1e:a1:e6:87:a5:e7:b7:13:d7:7e:ca:df:
b9:b1:d6:a1:ca:ae:ea:e0:8e:b9:f7:2e:66:fe:55:
a5:61:53:fe:15:ab:77:42:82:9b:fc:f3:3b:6c:a1:
6c:48:14:e9:18:24:46:41:43:4d:d7:67:5e:7d:6f:
86:a5:19:23:00:32:b1:ff:f9:1c:b1:5f:8d:fc:a7:
93:89:6d:78:43:2b:ca:29:67:96:43:98:af:7e:4c:
3f:f7:3c:65:21:5d:5a:27:3e:0b:d2:93:7a:7f:3a:
b6:f3:c2:90:0f:85:96:9a:0c:b4:d1:c9:c4:53:44:
df:87:9b:e2:3b:e6:dc:af:7d:23:e2:2a:9f:1f:32:
08:c0:34:c3:b7:48:59:e0:ba:86:af:32:75:79:5e:
b6:68:f4:d6:e8:46:f8:2c:36:a2:b4:bf:0f:f9:b8:
b9:9b:1e:f6:74:3c:65:18:eb:58:78:5c:3e:22:a5:
e4:6d:16:0c:a6:64:d3:97:3a:d3:12:75:57:36:6b:
63:64:be:7e:e9:c9:1c:db:1f:44:e8:7b:1e:d4:a2:
ba:1a:fc:57:40:c9:29:1a:2c:39:33:b3:31:f0:0a:
f1:c7:6f:e3:d7:75:45:1a:56:0f:2c:23:34:57:00:
ff:35:f5:14:48:c5:0e:19:3e:be:be:9f:58:45:02:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8B:8C:B3:88:C8:B5:3E:64:C0:90:2B:F7:38:E6:D4:E5:45:F3:6D
X509v3 Authority Key Identifier:
keyid:48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/A8B9E3A0D23211EFA0D093AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.190.88.0/22
Signature Algorithm: sha256WithRSAEncryption
23:e2:d8:1f:f1:a1:1f:a3:f8:a6:74:fe:84:14:5f:c6:97:47:
cc:65:96:f3:8f:63:e2:39:8d:c2:8e:15:90:2d:71:ac:86:90:
12:63:d1:1a:b2:0a:3e:db:3a:89:d8:5f:0f:82:50:5a:80:a4:
96:17:5e:6f:f5:83:50:c9:f2:ed:51:83:91:75:c5:51:bc:4e:
78:45:42:3c:bf:6a:4d:c5:aa:01:b4:60:3c:fe:75:63:a6:5f:
cd:45:df:5e:a3:73:02:c4:c4:15:48:22:28:3c:47:55:77:3c:
ea:35:44:9c:61:3f:a4:1b:5d:53:19:43:17:fd:b7:51:c4:45:
35:3d:a5:56:2f:9a:7b:c1:7b:36:41:20:41:c2:b4:0d:a1:2e:
60:d0:08:47:41:37:e5:af:a2:3d:29:04:e1:f2:44:c4:82:6a:
48:5a:d8:8d:55:6d:a6:65:10:74:fd:38:ef:d2:53:e0:6d:88:
d5:1b:44:2a:97:0f:3f:d9:b6:26:b8:00:ce:88:28:90:6c:b3:
47:90:7c:b3:39:fe:a1:d0:0d:fb:33:69:6e:6e:5f:51:34:e5:
67:54:e5:75:2f:e3:90:6e:42:01:58:e3:c7:c8:9f:d6:ef:ee:
99:d2:ce:3b:ac:41:74:32:23:ce:3c:fd:50:90:7d:71:e0:ab:
25:c2:1f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:12 2025 by rpki-client