Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/7C1F7EE603B511EFB4C5FB1C017001B1.roa
File: 7C1F7EE603B511EFB4C5FB1C017001B1.roa (raw, json)
Hash identifier: Lo3e7+E8r/NSCO53r7b8CA67fySg+7NtHZB+aX3Qbtg=
Subject key identifier: 99:B3:5F:A1:4B:73:AD:F7:92:BD:36:2C:81:46:8A:30:5D:D1:15:96
Certificate issuer: /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial: 01DD
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/7C1F7EE603B511EFB4C5FB1C017001B1.roa
Signing time: Fri 26 Apr 2024 10:12:28 +0000
ROA not before: Fri 26 Apr 2024 10:12:24 +0000
ROA not after: Thu 30 Apr 2043 10:12:24 +0000
asID: 30988
IP address blocks: 41.73.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369DB5EAF
Validity
Not Before: Apr 26 10:12:24 2024 GMT
Not After : Apr 30 10:12:24 2043 GMT
Subject: CN=662b7e0c-960a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:38:5e:77:16:88:17:aa:b6:48:29:d0:f5:
0e:ee:4a:60:6b:21:fa:ab:0a:9f:bb:00:ce:30:02:
59:4d:ee:17:ef:a5:e0:25:74:92:bd:7f:eb:57:c0:
25:b6:e9:79:0e:e2:ce:71:27:52:41:1a:48:81:52:
5c:f9:47:5b:b8:46:ec:32:07:3c:5c:a4:d6:86:41:
4a:45:61:b9:7d:ea:83:14:18:e0:d2:98:75:60:6a:
56:6b:dc:b4:22:0e:a6:78:44:d7:a7:e7:ab:87:10:
fe:af:2a:8c:49:a0:2a:6b:34:bc:a7:3a:81:47:d2:
15:b3:24:dc:c8:0e:08:9c:ab:5d:ff:46:07:8c:91:
34:b9:cc:c6:f2:77:ca:3f:97:53:75:4c:3c:cb:76:
e5:b0:58:16:d9:23:f4:cf:7d:4d:a2:a5:e2:54:5a:
7a:aa:46:87:93:7c:52:4c:c9:43:41:0f:de:b8:42:
75:61:e8:03:5f:c3:01:ec:e1:59:ac:41:e6:d7:83:
bf:72:00:a8:9a:43:98:c3:c5:79:15:de:16:63:ef:
01:4a:f3:fc:07:8d:fe:67:b2:1e:91:4c:c9:5e:f1:
4f:1a:52:e5:e3:a2:01:a0:89:df:b6:8e:e3:f0:1d:
06:2d:c8:24:7e:11:ee:2f:3a:a2:db:11:1b:0a:a1:
c2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B3:5F:A1:4B:73:AD:F7:92:BD:36:2C:81:46:8A:30:5D:D1:15:96
X509v3 Authority Key Identifier:
keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/7C1F7EE603B511EFB4C5FB1C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.73.129.0/24
Signature Algorithm: sha256WithRSAEncryption
67:fa:a6:f8:f2:97:63:9e:5f:9f:b1:88:ee:8c:03:9d:f8:13:
29:f9:05:59:3b:10:2f:fc:07:42:71:13:dd:75:ba:47:21:d8:
61:a2:52:89:d5:5e:0a:c0:04:97:1f:8c:d6:ed:a1:a6:07:da:
23:17:26:3d:e5:3d:ab:da:0d:97:ed:ff:73:68:9d:73:69:e1:
45:0e:6e:51:74:a7:81:b1:b7:45:4d:7f:38:b1:4b:54:d1:0e:
ce:0d:00:c7:9e:34:ec:af:57:e6:1d:18:d7:4a:7a:87:60:76:
34:a4:3e:83:fb:6c:44:a7:e2:df:75:f3:22:92:93:89:b4:cb:
e2:49:b8:a3:aa:40:e7:41:3d:9e:3c:89:d6:ae:52:d7:d4:84:
1a:7e:65:28:9b:4b:8f:5a:4f:7c:d1:aa:f7:02:40:8a:db:77:
f3:0d:13:b6:b9:0f:58:e4:c7:06:f7:4a:e9:ee:e4:38:33:fd:
be:a1:d0:7b:51:65:a5:1d:9e:cd:4f:dc:e5:e0:3c:32:1e:28:
a0:bf:e7:b5:71:59:72:23:10:1a:26:38:9b:5f:6a:ed:e6:85:
ce:59:39:fe:7f:21:ac:d4:b5:87:a5:77:28:88:54:47:b3:4c:
60:b0:9e:13:4a:69:35:d6:84:63:9a:48:29:25:0a:1a:e9:af:
3d:45:2f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:50 2025 by rpki-client