Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/8F092B7E094A11F093C5AE7F762E951A.roa
File: 8F092B7E094A11F093C5AE7F762E951A.roa (raw, json)
Hash identifier: OGU5ycvK8abIzsdbGhMB1yxcSdVJjlcwF+RUl3k5FyI=
Subject key identifier: EE:C0:A1:AD:79:A2:09:CC:DE:A9:5E:C4:70:F4:77:09:BE:66:78:F6
Certificate issuer: /CN=F36505B2AF/serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Certificate serial: 0120
Authority key identifier: 16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/8F092B7E094A11F093C5AE7F762E951A.roa
Signing time: Tue 25 Mar 2025 07:27:08 +0000
ROA not before: Tue 25 Mar 2025 07:27:04 +0000
ROA not after: Sun 25 Mar 2035 07:27:04 +0000
asID: 37183
IP address blocks: 41.85.208.0/23 maxlen: 23
41.85.208.0/24 maxlen: 24
41.85.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36505B2AF
Validity
Not Before: Mar 25 07:27:04 2025 GMT
Not After : Mar 25 07:27:04 2035 GMT
Subject: CN=67e25acc-d086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:be:8d:07:3e:25:60:10:b2:8e:91:e6:0c:
f3:67:49:4f:97:8a:3a:3e:28:82:96:26:fd:ae:6b:
ed:61:c8:06:f6:a0:fe:d0:52:cb:7f:dd:0a:cf:b2:
49:d0:81:d1:dc:c1:19:ed:11:7f:1e:50:cb:c9:ae:
9b:5f:9d:78:ff:12:7f:b5:f3:19:71:00:39:a3:c5:
17:62:99:e3:2d:2a:61:2d:83:c4:37:3d:08:66:78:
39:6b:87:9c:84:a0:66:80:63:57:36:d1:f5:63:9f:
51:38:96:ca:b5:e1:0f:95:c5:40:fd:ff:5f:c3:24:
c7:31:e1:5f:c9:e2:39:ef:b2:d2:57:ab:50:8e:2e:
d2:e9:6c:a9:43:12:b2:bb:e9:1c:4c:5e:0c:45:b0:
0d:88:ad:96:13:b1:5d:db:0d:b0:45:fe:ae:2c:68:
6c:60:6e:10:82:27:7a:21:c8:d1:2b:66:1e:85:29:
cc:a9:c7:34:ca:71:b7:1c:39:3c:25:19:9c:a1:47:
13:fa:3d:8d:36:42:04:6e:01:28:b1:96:e0:f8:1e:
b6:1a:5e:c9:af:86:51:2f:8a:8b:1f:d2:42:db:ef:
04:14:e2:ef:69:ba:08:21:55:d6:5a:4f:c9:47:43:
ad:a2:d6:2c:e3:3a:5b:f0:f3:90:f9:21:17:a0:5c:
10:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C0:A1:AD:79:A2:09:CC:DE:A9:5E:C4:70:F4:77:09:BE:66:78:F6
X509v3 Authority Key Identifier:
keyid:16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/8F092B7E094A11F093C5AE7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.85.208.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:9f:cb:82:7a:eb:db:bf:9a:06:84:23:a9:d5:78:bf:ee:40:
ca:8d:34:2b:c2:cd:fb:b9:af:db:73:15:d9:b4:49:da:71:77:
32:21:91:82:4c:42:ae:31:38:f2:1a:ad:a8:a9:85:a3:a3:42:
f3:b8:fe:45:ad:89:e1:10:61:3b:b5:85:92:9b:ac:d0:85:15:
2e:57:fa:94:68:29:88:17:45:5d:c3:c3:e6:75:68:04:b4:98:
f8:20:ab:81:35:38:46:36:bc:9f:11:1c:34:b8:1c:dc:a2:91:
f5:9e:ff:47:53:96:ac:e2:98:ff:32:26:d1:a4:fc:9e:1c:c0:
4d:5c:d0:e9:1a:89:61:5d:d3:2a:e8:dc:90:df:60:cb:29:a5:
b2:49:7e:50:0e:69:e6:0b:87:96:45:15:be:b6:c0:8f:d6:3b:
6c:9b:6e:04:f2:db:8c:26:0a:c9:c9:ed:3d:03:e7:71:4e:35:
12:9d:e3:8a:e2:ce:41:3a:f3:c5:2f:6f:24:66:65:c2:bb:8b:
db:87:92:c9:aa:20:d2:3d:33:32:82:a4:ee:c1:39:3f:30:72:
f6:64:2a:83:30:8c:ae:94:64:3a:8e:b6:ad:8d:5c:3b:16:7b:
8f:b0:f7:f3:33:92:38:ad:78:7f:b6:7b:1d:05:98:f6:9c:1f:
2c:e5:c5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:59:41 2025 by rpki-client