Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/2D81E60CD70411EFA4774B68762E951A.roa
File: 2D81E60CD70411EFA4774B68762E951A.roa (raw, json)
Hash identifier: WMzMow+21CqdCgojBhlWOGoOTPRBXGbF6iL94Q4Dv5A=
Subject key identifier: 5E:47:AC:3B:CD:33:F2:7D:D6:8C:7D:B3:CA:D5:1D:13:21:BE:67:1A
Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial: 05B7
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/2D81E60CD70411EFA4774B68762E951A.roa
Signing time: Mon 20 Jan 2025 07:57:22 +0000
ROA not before: Mon 20 Jan 2025 07:57:18 +0000
ROA not after: Mon 31 Dec 2035 07:57:18 +0000
asID: 36994
IP address blocks: 41.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1463 (0x5b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364712FAF
Validity
Not Before: Jan 20 07:57:18 2025 GMT
Not After : Dec 31 07:57:18 2035 GMT
Subject: CN=678e01e1-ca42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:e3:8f:9b:9d:24:77:bb:8e:64:fd:71:2b:
86:35:d7:2f:ff:55:ca:6d:e7:91:dd:36:06:31:75:
ac:14:80:aa:75:df:41:cd:a7:eb:1a:e9:68:6a:c3:
fb:0e:f0:6b:a2:00:aa:e0:49:94:6c:35:2d:4e:53:
b0:c1:dd:71:76:81:a2:8d:80:ee:5d:5f:1c:2e:7d:
85:d4:77:f4:f8:9b:78:b6:7b:5b:23:74:1f:de:6d:
ba:19:8f:0a:e6:e4:bf:d7:f5:23:1a:71:7a:5b:4f:
44:a2:bd:2b:76:00:53:96:91:02:37:88:08:31:65:
01:fa:43:f2:67:57:7e:70:eb:f3:e2:f6:1b:01:f6:
11:03:86:e2:64:54:da:2a:94:9f:c2:63:fa:bf:f4:
cf:23:ec:1b:0d:2b:b7:38:4a:1b:aa:41:61:55:12:
e0:37:d3:59:e4:26:28:6f:a9:e8:c8:fb:d0:3e:5c:
17:a3:d3:f3:1f:04:56:2b:ea:ce:12:4e:ee:90:6f:
79:5f:ff:58:fb:af:ee:b4:2d:df:81:28:46:c0:27:
9a:12:6a:0e:d4:97:3a:45:29:e1:d0:ae:f6:d6:d8:
ca:7f:e1:10:ae:e7:2a:cf:59:39:f2:06:e8:91:7d:
57:59:e3:80:89:d3:bd:4a:e6:71:fc:ad:46:b3:a5:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:47:AC:3B:CD:33:F2:7D:D6:8C:7D:B3:CA:D5:1D:13:21:BE:67:1A
X509v3 Authority Key Identifier:
keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/2D81E60CD70411EFA4774B68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.25.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:8f:61:62:7e:59:75:c6:d6:0d:ff:ff:e8:87:ec:9e:13:71:
89:d9:0a:fb:8a:a4:5a:09:b0:e0:ed:56:16:e3:18:a5:63:30:
33:f3:c4:4f:4c:e7:47:23:c7:36:0b:80:5a:00:ee:11:6b:49:
aa:cf:88:e2:c4:86:8b:35:f5:ee:63:c2:a0:3d:59:82:46:17:
f8:f2:86:cb:a3:43:b1:fb:50:a8:45:35:d0:3c:0b:db:d1:f2:
36:0b:ea:4a:83:8f:66:7d:84:21:24:3b:ea:e3:7e:87:8e:77:
a6:39:e0:63:fe:d8:1f:7c:4a:56:48:5e:6a:0d:e9:bf:2b:a1:
d4:af:1b:95:d3:4b:51:83:63:f6:2a:76:b4:ca:2f:43:17:07:
89:55:67:d2:77:6d:47:07:c5:3b:ab:13:a9:35:82:8d:43:75:
f3:d6:13:b5:fa:04:28:65:17:c5:dd:db:8b:01:2e:f4:7a:7b:
19:f6:6d:e1:06:c1:41:13:24:d1:22:d9:11:01:02:6c:db:74:
ef:cd:9a:91:f2:50:65:dc:20:db:dd:4d:f7:fc:be:b0:a4:02:
ef:74:fb:af:6a:20:fb:00:d0:21:37:3a:69:52:bc:7f:f1:53:
ca:20:ee:08:91:c2:e5:e4:21:93:29:e8:5e:3b:13:25:a4:8c:
e3:7f:04:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:43 2025 by rpki-client