Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/B163A47EEA6411EFB0192A8F762E951A.roa
File: B163A47EEA6411EFB0192A8F762E951A.roa (raw, json)
Hash identifier: gd0V9wGbms8dangRjTs1B1syY6Co0GN21dzbunIC3Oo=
Subject key identifier: 6B:8D:FA:1F:BE:6B:AB:A3:FE:DA:EF:BA:8F:3F:B1:DB:7C:56:12:45
Certificate issuer: /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial: 017A
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/B163A47EEA6411EFB0192A8F762E951A.roa
Signing time: Thu 13 Feb 2025 23:46:07 +0000
ROA not before: Fri 14 Feb 2025 23:46:02 +0000
ROA not after: Wed 14 Feb 2035 23:46:02 +0000
asID: 29286
IP address blocks: 41.92.250.0/24 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367BA6AAF
Validity
Not Before: Feb 14 23:46:02 2025 GMT
Not After : Feb 14 23:46:02 2035 GMT
Subject: CN=67ae843e-a887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:01:21:03:66:64:86:a5:fc:5e:3c:22:05:
b3:09:a6:f2:a6:4f:d0:57:d7:72:a1:45:47:29:19:
e7:aa:02:48:7f:cb:bf:e9:f5:a9:33:59:93:91:a7:
cd:38:5f:ef:b1:b3:e6:d4:c2:48:f2:9a:05:58:4d:
8e:61:b5:7c:01:e0:56:b2:da:f8:a5:e0:7e:1a:6d:
2a:a0:d8:ad:f2:a1:a0:91:af:64:fe:d3:02:1d:60:
66:52:a1:bc:85:fd:2f:42:c8:5e:17:39:d3:65:fd:
58:a2:b8:96:0e:32:74:b0:a1:97:4b:e5:29:f2:7b:
b6:67:f4:4f:4b:f1:67:af:0b:05:b3:e5:18:50:e4:
be:65:f9:2d:5b:f5:c6:4c:3c:50:48:29:1c:d8:d6:
0e:18:16:5f:db:f6:79:84:a3:3e:ce:b0:f8:ea:5c:
63:21:71:a5:09:87:f7:82:da:12:2d:c8:74:57:0e:
00:75:3d:9a:a6:52:f8:07:48:15:82:04:96:fc:e7:
e8:77:dd:e3:6a:ce:c4:43:49:c7:d6:61:8f:9d:77:
b9:1b:8d:d2:0f:ee:fb:7f:ea:11:9c:01:5d:e6:93:
18:6f:0a:c7:6c:b0:14:c9:c9:0e:9d:3e:24:0c:43:
50:c6:fd:65:c8:8e:56:f9:b7:c4:2c:a8:7d:20:41:
ee:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8D:FA:1F:BE:6B:AB:A3:FE:DA:EF:BA:8F:3F:B1:DB:7C:56:12:45
X509v3 Authority Key Identifier:
keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/B163A47EEA6411EFB0192A8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.92.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d0:02:be:be:92:ae:61:02:bf:a0:30:fc:d1:e6:56:35:59:
c3:b4:8c:90:7d:d6:c0:4d:54:a3:f4:f5:f7:82:64:cf:c1:cb:
60:bd:da:aa:2f:90:7c:69:fd:d9:72:f6:0b:d9:ad:e9:cd:6c:
71:e8:f0:37:81:bc:09:cd:d4:b1:97:51:06:f1:bc:8b:a3:f5:
ac:4c:23:6f:10:32:ff:eb:d1:fa:cf:ac:9f:e2:de:f8:3c:f7:
ec:5a:93:f5:22:9d:db:e5:57:02:7f:42:c9:e3:a7:71:0e:d6:
73:37:7f:ea:31:d4:10:b4:bc:ad:e5:f6:32:6f:a2:06:ea:df:
c9:01:07:b2:32:cc:5d:a6:55:40:cc:60:fe:5c:c9:17:4e:cc:
e4:75:bd:fb:75:c2:91:d3:ef:fb:86:62:3b:1f:5e:72:e8:fe:
88:90:83:e8:66:a5:2d:12:5d:06:05:81:1f:9e:c6:dd:04:ef:
a7:6a:92:5b:5d:a9:d1:d0:d0:91:51:b2:5b:28:61:eb:62:14:
24:e7:6f:cb:32:d4:5b:77:56:49:b4:08:d8:07:d3:b2:22:20:
ee:3f:38:25:a7:32:f3:ed:59:2e:76:f8:55:94:be:d2:1c:43:
f8:ac:b9:94:a6:bb:01:50:47:d2:44:55:60:fe:bd:30:c4:37:
b6:27:10:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:04:56 2025 by rpki-client