Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/3900BD24011511F0AB987C5E762E951A.roa
File: 3900BD24011511F0AB987C5E762E951A.roa (raw, json)
Hash identifier: KfnKWuYweFK309tVQ3urF8PcdLsH1nWr94hlvdL2KXs=
Subject key identifier: FF:3A:A1:B1:DE:CE:D7:D4:61:B3:CB:5F:96:BA:0A:67:5B:98:07:EC
Certificate issuer: /CN=F3668B03AF/serialNumber=C0E60D828818A0C15EFF3A12049E6575597ED9AB
Certificate serial: 04
Authority key identifier: C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/3900BD24011511F0AB987C5E762E951A.roa
Signing time: Fri 14 Mar 2025 20:45:11 +0000
ROA not before: Fri 14 Mar 2025 20:45:07 +0000
ROA not after: Tue 14 Mar 2028 20:45:07 +0000
asID: 22351
IP address blocks: 41.194.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668B03AF
Validity
Not Before: Mar 14 20:45:07 2025 GMT
Not After : Mar 14 20:45:07 2028 GMT
Subject: CN=67d49557-fe70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:bf:43:7e:3d:34:81:f0:99:e4:34:5b:75:
8c:06:cd:fa:bd:f7:e4:60:1a:64:76:5e:c4:de:3e:
a9:c7:d1:97:d2:bb:4a:4d:70:e5:13:f9:1f:96:0f:
33:d5:71:85:ab:5a:e1:ae:dc:d0:43:d1:cc:ce:c4:
5d:dd:36:84:cc:f5:27:90:1b:aa:29:5b:57:b8:72:
a4:4a:ae:b7:2e:e2:84:db:ed:6a:2d:4f:f4:87:15:
d7:90:ff:b5:94:7e:ba:28:e7:6f:e5:b4:e1:c9:9d:
65:1a:6c:36:f9:36:b9:5d:4e:c8:bb:70:1c:80:bc:
9b:92:e7:18:7b:34:3d:21:ab:ec:37:be:68:f7:e7:
42:04:09:85:08:d3:90:76:44:6d:f0:cf:c2:2a:45:
ea:d2:13:a6:4e:66:a3:8c:d7:ca:36:8a:b4:b1:b8:
ca:d8:15:46:47:4a:0b:7c:99:ad:25:1a:e5:bc:62:
02:28:06:64:92:fd:38:70:2a:1c:aa:b5:ff:04:a1:
72:26:79:0c:7c:36:2a:a3:57:fc:98:30:91:48:74:
f5:15:6a:a7:c3:7f:89:45:48:27:94:dd:d2:59:f8:
3e:28:bd:63:5e:66:86:95:6a:cd:0b:4a:6d:ea:cd:
c2:03:c7:10:5b:1c:df:67:d2:bf:04:bc:37:5f:27:
62:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3A:A1:B1:DE:CE:D7:D4:61:B3:CB:5F:96:BA:0A:67:5B:98:07:EC
X509v3 Authority Key Identifier:
keyid:C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/3900BD24011511F0AB987C5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.194.9.0/24
Signature Algorithm: sha256WithRSAEncryption
93:cf:89:fc:93:c3:04:a5:ae:d3:29:a8:02:4c:54:4f:ae:7e:
78:52:60:17:93:0c:aa:d2:d6:c9:01:e0:51:c5:71:50:0c:e8:
ef:51:92:ad:2f:3a:bf:4c:7f:d4:c1:31:8b:e6:b1:c1:92:57:
b9:a1:6c:6e:5c:b9:ce:60:e1:9b:fb:7e:f1:b9:91:39:fb:57:
b1:94:b0:6f:5a:b2:a5:99:0e:1c:a8:35:44:bd:47:84:94:b1:
14:42:93:7b:45:21:6a:dc:a9:fe:b2:53:b7:e0:df:03:62:06:
0f:45:3c:ee:1e:4d:1b:2f:8c:c2:fd:14:ec:fd:c4:ba:d9:1d:
6e:bd:46:2a:2f:ab:b3:5a:5c:a9:a6:f0:fe:dd:be:7e:53:3d:
3c:1b:3a:45:1d:83:a6:90:26:b9:e5:5e:b3:9e:ba:c1:5a:d6:
f5:bf:01:3f:40:bc:b2:b6:76:c5:e4:51:c8:e3:a2:be:a4:c1:
43:5e:ef:33:40:e6:08:13:d3:58:66:ab:b0:6d:0f:fa:f7:5b:
4d:fd:cd:36:cc:8b:7a:c2:21:42:c2:01:91:99:83:0c:d5:4c:
6c:42:d9:89:83:d7:46:c0:e0:38:4b:83:3e:65:63:c0:e6:5c:
36:e3:65:18:10:d2:47:98:44:cd:f3:4c:1e:f3:0d:42:de:8a:
b2:2b:ed:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:21:12 2025 by rpki-client