Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/14BAD7B4165811EE86B69D444AD9E6FC.roa
File: 14BAD7B4165811EE86B69D444AD9E6FC.roa (raw, json)
Hash identifier: UxyBF5rX+G4TYv8OE0wk+ym5tGym3S7tzutJhM5D5uA=
Subject key identifier: 60:F8:0F:1D:DB:E7:18:7F:C5:AE:21:C1:B7:8E:93:56:69:C0:BC:21
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 09
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/14BAD7B4165811EE86B69D444AD9E6FC.roa
Signing time: Thu 29 Jun 2023 08:36:46 +0000
ROA not before: Thu 29 Jun 2023 08:36:41 +0000
ROA not after: Wed 29 Jun 2033 08:36:41 +0000
asID: 37105
IP address blocks: 41.216.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF
Validity
Not Before: Jun 29 08:36:41 2023 GMT
Not After : Jun 29 08:36:41 2033 GMT
Subject: CN=649d429d-1324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:31:4d:b5:90:83:5d:38:9a:f2:78:47:29:
8c:cd:45:5b:6a:9e:d4:5f:26:61:6d:1e:5c:b9:47:
22:89:c4:04:f4:4b:75:28:70:be:4d:5d:ff:cf:3b:
c3:0c:eb:63:80:b5:6d:ea:6c:08:95:a5:80:d7:2f:
9d:d3:ae:41:22:12:af:00:bf:41:ca:a9:77:f6:e6:
c1:a1:8e:9c:fc:2d:50:b6:88:79:60:6a:47:4f:fc:
92:4e:b6:cf:6e:04:76:14:f4:d9:e7:92:0a:8f:5a:
b0:ee:cf:9f:a7:3c:86:21:7d:63:d0:c7:46:07:00:
89:2a:66:d5:23:a2:88:29:d3:2f:80:7a:00:2c:c4:
c8:0e:ca:b9:cf:ae:fc:61:26:31:79:a0:cc:47:8f:
23:11:47:08:6d:94:ad:4a:19:4a:6b:c4:7b:21:3a:
0e:c3:53:94:9f:de:78:8b:ea:16:dd:82:dc:09:03:
c1:dd:6b:f0:41:d2:a0:05:b9:91:42:d6:cf:00:61:
b7:2f:4b:9b:e1:c2:fe:38:7d:9e:5a:d1:7b:bc:1d:
22:9b:e9:ed:c6:81:6b:5e:e0:8c:96:9e:90:f7:c8:
7c:8e:b4:75:17:10:78:29:1e:f4:cf:73:74:6e:b7:
44:ea:9f:dc:64:7c:dc:cb:f6:ed:a3:0d:04:59:fd:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F8:0F:1D:DB:E7:18:7F:C5:AE:21:C1:B7:8E:93:56:69:C0:BC:21
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/14BAD7B4165811EE86B69D444AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.193.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:6e:30:1b:6d:7a:31:27:04:e5:65:7c:a6:dd:ad:13:35:3d:
15:6d:7a:b5:7b:3a:c0:28:94:26:98:16:7f:a7:70:a1:14:7e:
39:32:ca:73:01:c4:e9:53:0f:81:15:23:e9:3c:13:36:e8:ca:
64:06:63:65:73:28:41:11:b2:3a:96:72:25:42:05:29:8c:48:
f3:b0:a3:c9:57:25:83:7e:05:0e:79:61:bf:89:63:3c:41:0b:
da:91:67:1a:e6:a7:89:f6:93:0a:e7:7a:0c:80:f2:73:02:4a:
7d:7f:18:e3:5b:e3:60:b8:43:17:53:d8:ef:02:d6:bf:72:24:
69:0b:e6:f6:13:94:9f:33:7a:df:9e:b5:d7:08:46:22:a2:66:
dc:12:c7:a3:dc:e1:d3:62:76:18:02:6f:c8:6c:67:b4:63:a3:
60:47:f1:05:b7:67:ee:bf:4a:fc:97:dc:65:e6:23:52:d0:9d:
48:71:3c:20:b7:7c:b6:7f:12:b7:05:30:05:ff:e0:8d:5b:77:
6a:f1:44:21:7f:1a:88:68:df:7b:22:0a:d7:8a:1a:1b:b4:3a:
d3:08:e8:ab:33:e1:f7:e2:b0:a6:bf:72:8a:b3:1b:49:b2:23:
ca:1a:f7:78:67:9c:d2:5c:1b:71:91:85:37:1e:71:2f:e8:2e:
64:a4:3a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:13:54 2025 by rpki-client