Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/8A1C38AA011511F09CFA5260762E951A.roa
File: 8A1C38AA011511F09CFA5260762E951A.roa (raw, json)
Hash identifier: 76MSxtrGiXL8x2iTNDj99rJpOIwY8C0w+GKIRo/LlHY=
Subject key identifier: 47:82:E5:50:14:83:56:F8:C9:2C:AD:8C:E3:D9:3C:88:CC:64:2C:BD
Certificate issuer: /CN=F3668B03AF/serialNumber=C0E60D828818A0C15EFF3A12049E6575597ED9AB
Certificate serial: 08
Authority key identifier: C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/8A1C38AA011511F09CFA5260762E951A.roa
Signing time: Fri 14 Mar 2025 20:47:27 +0000
ROA not before: Fri 14 Mar 2025 20:47:24 +0000
ROA not after: Tue 14 Mar 2028 20:47:24 +0000
asID: 22351
IP address blocks: 41.194.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668B03AF
Validity
Not Before: Mar 14 20:47:24 2025 GMT
Not After : Mar 14 20:47:24 2028 GMT
Subject: CN=67d495df-a3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:96:44:97:d3:ff:66:d7:74:a3:f2:55:36:
c0:47:52:b6:f9:90:fc:92:12:ac:89:7e:33:63:c3:
c7:9e:cb:29:91:d9:64:ca:b4:db:2a:8f:5c:19:35:
38:39:42:c1:70:c0:78:1f:65:33:9c:20:ec:55:3f:
33:7d:be:b9:c5:b8:89:4b:2a:67:9f:86:31:d3:dc:
60:35:22:4e:09:93:ea:77:70:71:7f:75:55:75:ff:
c3:be:3c:4f:3d:c2:83:c3:3a:2c:96:fb:e3:07:99:
6f:66:9d:c6:9b:f6:dd:15:34:80:ab:85:be:e5:9e:
1d:07:3c:ad:64:95:c2:4a:69:9a:74:50:36:77:0a:
7a:4d:b8:ac:dd:10:f0:23:28:52:9d:2f:d6:18:6b:
b8:6d:93:a0:3b:e2:70:2a:21:d0:f7:c9:f3:f6:dc:
29:47:9c:99:78:40:00:b9:c1:d3:0d:55:61:c1:d5:
a7:08:cc:65:7c:d2:6d:9f:c5:96:15:16:75:15:fb:
4c:67:31:74:b1:f3:8e:26:00:70:3c:0f:de:25:c7:
71:3a:f9:2e:5a:54:c0:ce:41:30:e6:38:3e:f8:6a:
70:55:b5:8c:aa:23:67:f2:19:b9:c2:02:5d:1e:22:
64:0b:15:96:1e:fb:6e:ee:1a:5a:4f:50:73:b6:f4:
8d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:82:E5:50:14:83:56:F8:C9:2C:AD:8C:E3:D9:3C:88:CC:64:2C:BD
X509v3 Authority Key Identifier:
keyid:C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/8A1C38AA011511F09CFA5260762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.194.208.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c5:1b:35:9c:5d:3a:1c:42:6a:f4:f7:16:aa:c1:7b:99:d3:
ea:4d:6f:d2:ff:8e:dc:8c:bf:16:1f:d9:bd:36:f1:6a:b4:12:
cc:fd:51:6c:1f:eb:71:7b:de:02:39:55:98:18:bf:e1:ce:e8:
84:b6:bc:e7:e2:53:b9:75:ed:55:f3:e9:66:58:13:1e:33:52:
41:5b:ae:55:97:d8:64:19:6d:0d:da:fc:6d:2d:a5:b5:c0:4f:
f3:0d:c3:85:26:f6:fd:f0:a3:23:b5:02:9b:08:f7:73:8e:91:
ce:e0:6b:a6:0e:5c:b6:af:54:1d:9c:bb:d0:6d:e5:3e:ac:20:
a6:3a:a5:5c:6c:cf:15:16:35:06:a0:4e:91:92:24:e5:3c:e5:
86:ac:77:a4:96:76:f1:d0:25:b6:a1:22:57:a7:4d:1d:74:aa:
f5:ad:2d:4f:aa:f8:20:f7:a8:ba:cf:49:b8:c7:e5:91:fa:01:
b7:a3:27:db:d0:85:0a:10:3e:6a:c2:03:05:7e:d5:22:bf:0c:
1e:8d:14:c0:ce:09:ec:f8:35:ff:7d:9e:22:75:ba:85:5f:00:
52:76:18:53:ba:fd:b0:d2:a7:9e:b5:a7:eb:b1:1f:19:8f:57:
80:e8:07:a6:09:ea:c8:97:7e:51:4e:16:fb:cb:5f:ec:a7:c1:
8a:52:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:32:29 2025 by rpki-client