Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/65EE6608A93411EF8563F881762E951A.roa
File: 65EE6608A93411EF8563F881762E951A.roa (raw, json)
Hash identifier: XRj1rCaLDHj9RuND/dNnP241OC1a/Tkrtdg/iPOM2xc=
Subject key identifier: 68:CB:18:03:4C:77:AF:87:05:0B:90:42:33:52:BF:83:DB:10:D5:77
Certificate issuer: /CN=F36BB12FAF/serialNumber=1744BC20B7060579C93E4E2AA7E654289C2AF7CA
Certificate serial: 0A
Authority key identifier: 17:44:BC:20:B7:06:05:79:C9:3E:4E:2A:A7:E6:54:28:9C:2A:F7:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/65EE6608A93411EF8563F881762E951A.roa
Signing time: Sat 23 Nov 2024 00:46:38 +0000
ROA not before: Sat 23 Nov 2024 00:00:35 +0000
ROA not after: Thu 30 Nov 2034 00:00:35 +0000
asID: 37012
IP address blocks: 41.222.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BB12FAF
Validity
Not Before: Nov 23 00:00:35 2024 GMT
Not After : Nov 30 00:00:35 2034 GMT
Subject: CN=674125ee-d092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:5a:23:52:94:96:94:f6:27:ab:c7:36:9d:
76:e0:24:0f:84:9a:d6:e9:d2:36:79:2f:00:62:27:
5a:01:e5:72:30:22:ca:a7:65:b7:0e:d6:27:48:d0:
c7:4c:5e:64:d1:4d:cf:85:57:00:1a:5d:db:ab:c4:
b7:ca:30:05:12:3a:12:16:0b:48:f3:c5:18:5e:8d:
ae:24:92:27:e2:14:c5:4c:e9:e4:76:f2:fe:7d:86:
c3:28:48:4a:9d:bc:0b:a8:0e:69:2b:2f:b2:7d:a1:
f3:ed:99:9a:0c:8a:9b:5c:51:6d:64:c9:4f:d2:e7:
f0:95:d6:4d:28:ed:f7:e2:4c:1c:e6:5f:9b:b9:6f:
18:24:d6:9c:d9:cc:8b:dd:80:77:c5:67:30:bd:ac:
d8:67:b3:69:ad:af:d9:cb:98:29:d6:e4:3b:2d:bc:
ee:d8:77:4c:b3:34:fc:85:34:54:89:91:f0:e3:00:
6c:56:fb:ed:43:c6:0f:ba:0f:7f:c3:39:65:dc:2b:
47:66:72:0c:cb:d0:06:bc:8e:6b:f1:f6:4e:91:cd:
24:46:50:6c:1a:1a:07:73:b0:fc:41:61:23:dd:85:
82:f3:bb:07:7d:22:ae:aa:36:25:7f:8f:2e:30:1b:
1f:ec:f5:56:47:6a:90:1c:15:fe:f9:2a:4f:b4:b0:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CB:18:03:4C:77:AF:87:05:0B:90:42:33:52:BF:83:DB:10:D5:77
X509v3 Authority Key Identifier:
keyid:17:44:BC:20:B7:06:05:79:C9:3E:4E:2A:A7:E6:54:28:9C:2A:F7:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/65EE6608A93411EF8563F881762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.235.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ea:d3:9e:0d:71:41:2b:94:d1:52:7b:2e:d7:f7:6e:1a:15:
9d:e7:8b:c6:60:36:d4:12:5f:5b:55:3f:03:50:bd:f8:f7:0e:
1a:1f:c7:96:84:9f:2a:3a:96:9d:fe:75:72:cc:1e:a4:5d:77:
b2:63:b9:de:fb:d1:db:ac:bf:82:77:f0:58:88:eb:bf:13:12:
93:3b:d4:71:2a:cd:5e:c0:9f:3a:fc:e8:e7:91:e6:23:04:ec:
bb:20:f0:8c:02:17:6b:46:bf:5a:6c:15:d5:ef:ab:9a:35:90:
74:e9:c3:7d:fb:f4:63:e4:34:bc:f6:d8:d5:8b:9b:a1:24:9e:
3a:13:b8:0f:54:07:b2:b5:70:ab:77:16:ed:2f:5f:42:77:44:
78:3c:aa:d9:a7:50:98:c3:70:ed:91:9e:be:ee:3a:42:e3:f9:
f7:75:02:6d:d7:a4:4c:b7:70:7e:c6:88:cc:8e:5f:43:52:95:
a0:39:75:39:6e:63:da:09:0b:d1:4d:0b:c8:f1:a5:da:ee:e1:
06:71:c7:5a:aa:88:d4:f8:7f:14:68:c8:fd:bc:de:b7:0a:bf:
d1:a1:f5:18:dd:00:51:9d:b6:49:d1:29:0c:51:f3:b8:49:90:
08:91:d8:85:a3:6e:97:8b:63:f6:12:d2:fd:92:7f:0c:ac:86:
85:2d:f6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:57:07 2025 by rpki-client