Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/0EED0EBABAA811EFB3FB887B762E951A.roa
File: 0EED0EBABAA811EFB3FB887B762E951A.roa (raw, json)
Hash identifier: cWJpYejV3y01oVA8qnDQSW9CTviS9mBH5RQPU8qnsl4=
Subject key identifier: 2F:3E:11:CB:05:4B:E3:31:3C:88:8E:8F:66:20:3C:FD:36:BF:AC:57
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 02A5
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/0EED0EBABAA811EFB3FB887B762E951A.roa
Signing time: Sun 15 Dec 2024 05:47:24 +0000
ROA not before: Sun 15 Dec 2024 05:47:20 +0000
ROA not after: Fri 15 Dec 2034 05:47:20 +0000
asID: 37105
IP address blocks: 41.73.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677 (0x2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF
Validity
Not Before: Dec 15 05:47:20 2024 GMT
Not After : Dec 15 05:47:20 2034 GMT
Subject: CN=675e6d6c-9c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:b0:d5:ce:d5:51:49:de:6f:55:4e:7d:95:
a7:a4:53:1b:67:b9:9b:14:62:53:62:32:9d:1b:dc:
48:fe:81:f2:c4:32:59:6a:b2:2b:ea:f7:13:4e:0a:
f9:c5:16:24:95:8a:16:74:4f:b7:ef:27:3a:35:8c:
f1:39:f3:ee:15:7d:d9:c1:bc:98:42:e1:1a:88:12:
74:7d:dd:27:68:09:a4:98:c6:b9:8b:de:96:e8:79:
73:1c:ef:38:e7:d0:d9:4f:8d:dc:2c:51:bc:92:ac:
27:24:15:e3:00:c5:fb:83:2f:e3:f8:22:5b:db:a9:
41:9e:ba:27:76:4e:fc:8d:67:d7:7c:25:ea:f0:3b:
a2:17:e9:57:19:12:71:8b:d5:29:f4:08:b1:27:80:
5a:59:b4:22:27:43:ce:04:b7:63:c5:73:2f:d0:bc:
2f:95:f0:a4:02:8f:37:5a:c4:56:d9:22:7b:7c:5d:
ad:d7:43:c0:2a:91:21:72:cf:1e:ff:9e:8e:b4:07:
6a:70:58:a5:0e:17:a9:a6:de:97:f0:e5:53:c9:6e:
b7:1d:70:b3:2e:53:b0:7c:df:82:2e:5f:14:15:27:
2c:90:c0:22:02:1f:6f:8a:da:90:af:51:65:33:89:
87:c2:22:98:1a:83:92:be:e2:c9:d1:48:78:79:27:
ea:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3E:11:CB:05:4B:E3:31:3C:88:8E:8F:66:20:3C:FD:36:BF:AC:57
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/0EED0EBABAA811EFB3FB887B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.73.40.0/22
Signature Algorithm: sha256WithRSAEncryption
88:65:6c:a8:a5:d2:b1:dc:48:f5:e8:96:46:35:0b:bc:5f:bb:
2d:0a:3e:48:d0:ca:00:c1:41:cc:30:93:9e:1b:a9:dc:7b:76:
be:9e:e5:eb:8c:e8:1a:68:1f:5b:18:41:c1:81:00:8f:8d:ef:
bc:d6:6c:08:48:58:f9:47:81:dd:d3:d5:c4:ee:e8:04:6a:4a:
6b:8e:fd:ff:d6:0f:33:bb:6c:fe:e2:b6:98:9a:ad:26:76:2b:
78:71:c5:eb:10:cd:77:d1:bf:eb:61:e9:a7:f5:f7:d3:7d:d3:
29:45:7f:b0:9d:11:f3:0c:78:4e:84:39:c5:a7:3c:b0:8d:77:
b4:3f:1b:ad:77:3c:12:da:9a:6b:0b:40:4d:5e:c2:37:96:16:
69:ec:92:07:9e:d3:94:b0:be:61:cb:f8:c2:69:85:d5:0a:03:
ff:56:ba:84:cc:e7:07:d2:a9:ec:1c:35:5b:af:6e:e8:40:14:
bd:75:34:94:90:2b:01:72:60:46:e8:b5:95:6c:1c:40:32:e8:
fc:f1:8e:78:c7:8f:8c:4a:be:31:69:ea:0d:cb:ee:82:c3:f6:
7c:05:4b:1e:e9:d4:a6:eb:c2:13:52:c8:c2:97:08:fb:95:ef:
e3:49:d3:bc:98:c4:1f:23:ec:83:f5:f6:76:2c:4e:a4:d8:4e:
03:4c:45:6e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkJGNDFBRjExMC8GA1UEBRMoM0Y2NzdGM0ExOEFDQUFFNkM5N0Y4MUY5OUFFODc5
NDY1NEUwNDEwQjAeFw0yNDEyMTUwNTQ3MjBaFw0zNDEyMTUwNTQ3MjBaMBgxFjAU
BgNVBAMTDTY3NWU2ZDZjLTljNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvXLDVztVRSd5vVU59laekUxtnuZsUYlNiMp0b3Ej+gfLEMllqsivq9xNO
CvnFFiSVihZ0T7fvJzo1jPE58+4VfdnBvJhC4RqIEnR93SdoCaSYxrmL3pboeXMc
7zjn0NlPjdwsUbySrCckFeMAxfuDL+P4IlvbqUGeuid2TvyNZ9d8JerwO6IX6VcZ
EnGL1Sn0CLEngFpZtCInQ84Et2PFcy/QvC+V8KQCjzdaxFbZInt8Xa3XQ8AqkSFy
zx7/no60B2pwWKUOF6mm3pfw5VPJbrcdcLMuU7B834IuXxQVJyyQwCICH2+K2pCv
UWUziYfCIpgag5K+4snRSHh5J+qBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQULz4R
ywVL4zE8iI6PZiA8/Ta/rFcwHwYDVR0jBBgwFoAUP2d/OhisqubJf4H5muh5RlTg
QQswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJCRjQxLzE0Q0RGOEIyMTBENjExRUU5NThDMEYxNTRBRDlFNkZDL1AyZF9P
aGlzcXViSmY0SDVtdWg1UmxUZ1FRcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1AyZF9PaGlzcXViSmY0SDVtdWg1UmxUZ1FRcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkJCRjQxLzE0Q0RGOEIyMTBENjExRUU5NThDMEYxNTRB
RDlFNkZDLzBFRUQwRUJBQkFBODExRUZCM0ZCODg3Qjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIpSSgwDQYJKoZIhvcNAQEL
BQADggEBAIhlbKil0rHcSPXolkY1C7xfuy0KPkjQygDBQcwwk54bqdx7dr6e5euM
6BpoH1sYQcGBAI+N77zWbAhIWPlHgd3T1cTu6ARqSmuO/f/WDzO7bP7itpiarSZ2
K3hxxesQzXfRv+th6af199N90ylFf7CdEfMMeE6EOcWnPLCNd7Q/G613PBLammsL
QE1ewjeWFmnskgee05SwvmHL+MJphdUKA/9WuoTM5wfSqewcNVuvbuhAFL11NJSQ
KwFyYEbotZVsHEAy6PzxjnjHj4xKvjFp6g3L7oLD9nwFSx7p1KbrwhNSyMKXCPuV
7+NJ07yYxB8j7IP19nYsTqTYTgNMRW4=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:50 2025 by rpki-client