Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/1A3990F8BEBF11EEBD762B64775412E6.roa
File: 1A3990F8BEBF11EEBD762B64775412E6.roa (raw, json)
Hash identifier: ccU9mdy2rdZFdjo5GkmS5RHSz0Znjstflx5+85EYt7A=
Subject key identifier: 09:9E:48:01:D1:8A:A5:95:F3:1F:6A:5C:EE:24:4D:D5:23:E0:AC:44
Certificate issuer: /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial: 65
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/1A3990F8BEBF11EEBD762B64775412E6.roa
Signing time: Mon 29 Jan 2024 15:57:28 +0000
ROA not before: Mon 29 Jan 2024 15:57:25 +0000
ROA not after: Thu 29 Jan 2026 15:57:25 +0000
asID: 37073
IP address blocks: 41.216.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650567AF
Validity
Not Before: Jan 29 15:57:25 2024 GMT
Not After : Jan 29 15:57:25 2026 GMT
Subject: CN=65b7cae8-6370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:3d:96:57:1f:f8:59:44:f3:64:4c:30:cf:
f0:8e:ec:12:da:2c:66:eb:ef:6d:75:34:b7:a6:a7:
54:31:50:0e:3c:f8:15:29:98:00:46:4c:42:d6:d6:
c7:5e:46:72:04:e2:58:22:15:b9:7a:88:5c:be:84:
e0:01:2f:98:c5:c9:61:93:ba:ce:d9:10:a0:83:e4:
dc:93:e4:a2:74:da:b8:fb:0b:ff:84:8b:a8:8e:0a:
7f:c5:fe:c6:05:1f:83:c0:ba:16:1b:dd:d9:c3:0a:
e8:35:61:3e:87:95:11:b7:79:31:96:8a:97:09:2f:
21:47:36:5c:ee:08:28:55:6a:40:90:ec:d8:22:b3:
5e:c7:4c:fd:8d:24:fe:86:8f:52:7c:09:59:10:25:
36:2f:8d:f2:fe:d2:24:6b:a6:c4:e5:a9:28:da:93:
82:d7:1e:36:0a:d4:1d:af:e4:de:5a:0f:46:9e:0e:
ab:ab:c0:81:67:ee:3a:58:61:55:95:1a:18:e3:1b:
be:83:dc:09:8b:f4:86:f2:32:9f:b5:49:85:6b:91:
2a:36:29:eb:bf:bd:00:2c:63:a1:f2:95:30:91:83:
40:b8:ae:c3:f2:59:63:29:fa:43:2b:b1:a9:6d:56:
2e:39:03:6e:ee:ac:7a:26:47:29:61:75:a6:63:44:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9E:48:01:D1:8A:A5:95:F3:1F:6A:5C:EE:24:4D:D5:23:E0:AC:44
X509v3 Authority Key Identifier:
keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/1A3990F8BEBF11EEBD762B64775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.144.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:76:b2:86:2d:50:ce:a0:6b:fb:d5:8f:12:c2:42:65:90:fb:
47:03:ef:d6:12:e5:b4:bb:5f:22:b0:e4:11:03:38:1e:e4:c4:
4e:11:64:d1:e4:32:dd:e9:d6:ba:32:0c:15:da:3c:cc:5b:e2:
7c:4d:3a:75:56:e0:27:af:f4:47:2a:06:9a:85:80:d1:bb:75:
d1:8b:56:be:4b:ac:64:da:30:82:bf:cb:be:00:5d:56:23:e4:
b9:0a:f7:0f:9c:bd:dc:66:35:7d:01:a7:4a:3b:85:83:1c:9b:
9b:b7:aa:a7:7c:90:44:59:0c:ea:df:c3:f6:1c:8d:b6:3c:ab:
c4:ce:1a:79:68:f0:82:c7:84:47:db:ed:38:70:90:d8:71:43:
0c:c6:ea:eb:ab:59:a3:f7:dd:f9:cf:11:d5:b5:94:f8:e7:35:
65:da:24:00:ce:df:e7:87:6f:78:b4:a3:bd:b4:8a:75:f3:eb:
62:30:31:25:90:c1:e3:72:67:10:45:6e:38:bf:cb:d1:b6:9f:
11:e2:a8:b5:de:16:3e:a1:96:9d:6e:76:9d:45:1d:37:31:37:
b0:aa:5a:23:4e:e1:95:43:70:d6:ac:61:a5:00:e4:56:a4:1f:
cc:a7:b6:ba:42:40:92:d9:77:e8:eb:29:db:05:4a:25:c2:29:
13:3a:0c:3d
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBZTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
MDU2N0FGMTEwLwYDVQQFEyg1RkMzN0RFQ0VCNzAwOEJCQTc0MTM0Nzg0NUI3NkI0
NzY3N0FFQTY5MB4XDTI0MDEyOTE1NTcyNVoXDTI2MDEyOTE1NTcyNVowGDEWMBQG
A1UEAxMNNjViN2NhZTgtNjM3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL5dPZZXH/hZRPNkTDDP8I7sEtosZuvvbXU0t6anVDFQDjz4FSmYAEZMQtbW
x15GcgTiWCIVuXqIXL6E4AEvmMXJYZO6ztkQoIPk3JPkonTauPsL/4SLqI4Kf8X+
xgUfg8C6Fhvd2cMK6DVhPoeVEbd5MZaKlwkvIUc2XO4IKFVqQJDs2CKzXsdM/Y0k
/oaPUnwJWRAlNi+N8v7SJGumxOWpKNqTgtceNgrUHa/k3loPRp4Oq6vAgWfuOlhh
VZUaGOMbvoPcCYv0hvIyn7VJhWuRKjYp67+9ACxjofKVMJGDQLiuw/JZYyn6Qyux
qW1WLjkDbu6seiZHKWF1pmNEIoECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQJnkgB
0YqllfMfalzuJE3VI+CsRDAfBgNVHSMEGDAWgBRfw33s63AIu6dBNHhFt2tHZ3rq
aTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTA1NjcvMzNFMzMwMjY3NEJBMTFFRUFBOTRDMTczNEFEOUU2RkMvWDhOOTdP
dHdDTHVuUVRSNFJiZHJSMmQ2Nm1rLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWDhOOTdPdHdDTHVuUVRSNFJiZHJSMmQ2Nm1rLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTA1NjcvMzNFMzMwMjY3NEJBMTFFRUFBOTRDMTczNEFE
OUU2RkMvMUEzOTkwRjhCRUJGMTFFRUJENzYyQjY0Nzc1NDEyRTYucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBCnYkDANBgkqhkiG9w0BAQsF
AAOCAQEAmnayhi1QzqBr+9WPEsJCZZD7RwPv1hLltLtfIrDkEQM4HuTEThFk0eQy
3enWujIMFdo8zFvifE06dVbgJ6/0RyoGmoWA0bt10YtWvkusZNowgr/LvgBdViPk
uQr3D5y93GY1fQGnSjuFgxybm7eqp3yQRFkM6t/D9hyNtjyrxM4aeWjwgseER9vt
OHCQ2HFDDMbq66tZo/fd+c8R1bWU+Oc1ZdokAM7f54dveLSjvbSKdfPrYjAxJZDB
43JnEEVuOL/L0bafEeKotd4WPqGWnW52nUUdNzE3sKpaI07hlUNw1qxhpQDkVqQf
zKe2ukJAktl36Osp2wVKJcIpEzoMPQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:03 2025 by rpki-client