Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/3F1DD4FEA93011EFB957CF66762E951A.roa
File: 3F1DD4FEA93011EFB957CF66762E951A.roa (raw, json)
Hash identifier: mf8in6dN/rBkyYBFBPJrqKH3gZCm9Dld1VfS1yx67mU=
Subject key identifier: 5F:F2:ED:5E:DE:A8:B4:AE:FB:3C:ED:64:D0:24:4C:50:EE:96:A3:EF
Certificate issuer: /CN=F36BB12FAF/serialNumber=1744BC20B7060579C93E4E2AA7E654289C2AF7CA
Certificate serial: 08
Authority key identifier: 17:44:BC:20:B7:06:05:79:C9:3E:4E:2A:A7:E6:54:28:9C:2A:F7:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/3F1DD4FEA93011EFB957CF66762E951A.roa
Signing time: Sat 23 Nov 2024 00:16:56 +0000
ROA not before: Sat 23 Nov 2024 00:00:52 +0000
ROA not after: Thu 30 Nov 2034 00:00:52 +0000
asID: 37012
IP address blocks: 41.222.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BB12FAF
Validity
Not Before: Nov 23 00:00:52 2024 GMT
Not After : Nov 30 00:00:52 2034 GMT
Subject: CN=67411ef7-8902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:5c:02:b6:f1:13:45:e3:23:34:4c:1c:ef:
0b:d1:d2:01:5d:dc:f5:06:35:bb:d9:2a:85:4d:c1:
0a:b3:d2:a7:dc:a9:db:08:ed:1d:a6:ce:36:5b:86:
0b:df:76:d3:f5:7a:49:8c:bc:57:ec:8b:6d:0d:74:
0a:f9:6e:4d:47:f7:fa:c7:18:7f:1c:b9:6d:4c:78:
6e:d0:c2:e2:8b:dc:1c:a6:12:40:5f:47:bc:0e:0c:
d6:ff:d4:8d:66:14:d3:41:3c:3a:52:b0:01:ad:7b:
23:1d:91:18:9e:21:de:3d:c2:09:fe:ec:4d:47:9f:
00:ae:d2:d0:3d:ef:7a:c9:91:85:7f:a8:e0:98:a0:
33:d2:21:9c:c0:b3:12:48:e2:95:73:a6:5c:b9:5c:
27:04:b1:5c:5f:6e:81:b9:d3:98:d7:f7:5c:13:9e:
85:72:80:ca:78:df:51:9f:87:78:25:e8:35:62:87:
75:3d:b8:a5:11:36:71:e5:6f:ec:74:e3:a7:f6:32:
ab:51:85:d8:e4:66:26:c2:9d:43:5b:9d:a3:44:f1:
28:35:80:2f:b4:44:66:57:2d:f5:2c:fa:f2:0c:95:
36:62:ce:00:c1:4a:d4:14:6b:48:08:0d:02:88:b5:
3b:e6:59:c9:b1:4a:30:91:a8:a7:00:19:77:8f:1e:
82:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F2:ED:5E:DE:A8:B4:AE:FB:3C:ED:64:D0:24:4C:50:EE:96:A3:EF
X509v3 Authority Key Identifier:
keyid:17:44:BC:20:B7:06:05:79:C9:3E:4E:2A:A7:E6:54:28:9C:2A:F7:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/3F1DD4FEA93011EFB957CF66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.232.0/24
Signature Algorithm: sha256WithRSAEncryption
79:30:bd:d6:e1:00:03:3b:6c:e0:40:08:1b:b4:5a:8f:97:16:
db:39:ed:26:ff:e8:62:a0:41:09:2d:e5:ba:01:ad:c5:c5:c2:
45:b3:c2:85:59:7b:f7:4b:79:2e:e9:a4:c6:ed:08:7c:87:2b:
45:7a:25:91:cb:16:5a:2d:03:b0:b7:f5:4c:9b:ad:5d:10:0a:
4b:7e:a7:e7:08:69:89:10:ab:12:8f:31:e3:35:62:13:ec:81:
bb:3b:ac:38:dc:59:aa:85:75:72:85:2a:d7:85:1f:57:f1:84:
16:24:33:10:94:5a:df:4c:90:f1:ef:a2:7f:80:f6:26:75:53:
ee:32:e4:77:be:f8:5f:5c:4e:af:17:04:d3:9e:f7:4c:10:46:
7d:23:1f:2e:f8:f8:29:b1:71:d2:41:db:20:90:ff:f8:45:79:
91:01:87:32:ac:96:3d:99:a8:90:e0:e0:6e:87:98:55:ed:72:
11:46:02:95:53:91:15:fb:84:3a:f9:73:47:99:1f:2f:84:e1:
9b:de:95:69:51:68:a6:87:99:33:06:be:16:be:90:9d:ed:39:
4f:38:2c:44:05:ba:f8:e7:a0:0e:31:4b:e8:54:e7:84:99:27:
05:08:e4:57:41:fa:5c:43:ac:6e:7c:b5:37:d0:f0:d0:2d:98:
dc:03:64:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:36:44 2025 by rpki-client