Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/94BB171C1BE411EEB11DDD1B4AD9E6FC.roa
File: 94BB171C1BE411EEB11DDD1B4AD9E6FC.roa (raw, json)
Hash identifier: L95FrMlRqHuF3NnVeqrSiT9iramLs6Ugo+h0+qYVnbc=
Subject key identifier: 11:62:A5:4B:95:97:21:07:49:32:CB:C7:34:EC:4E:B8:A6:09:BE:55
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 2A
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/94BB171C1BE411EEB11DDD1B4AD9E6FC.roa
Signing time: Thu 06 Jul 2023 10:05:06 +0000
ROA not before: Thu 06 Jul 2023 10:05:02 +0000
ROA not after: Wed 06 Jul 2033 10:05:02 +0000
asID: 37105
IP address blocks: 41.216.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF
Validity
Not Before: Jul 6 10:05:02 2023 GMT
Not After : Jul 6 10:05:02 2033 GMT
Subject: CN=64a691d2-10e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:05:24:65:48:4a:ba:fd:c5:db:d4:0f:6d:
3e:f6:18:08:6f:1c:7d:35:d6:a0:24:68:53:f8:d7:
8b:fd:99:33:b2:1c:35:11:62:ac:e4:7a:dd:41:39:
08:d4:34:e2:b0:71:d4:2f:f4:aa:e6:93:d2:d3:0a:
bd:f7:2a:f9:8b:10:c9:98:8e:35:43:6b:f8:e3:c0:
6b:c0:4a:c3:89:39:77:64:60:47:d0:7a:a4:da:09:
a9:90:08:ea:38:db:6b:99:be:73:97:8b:58:70:6f:
86:d3:99:e6:35:80:53:09:a0:bf:5e:63:dc:2b:1f:
08:ff:27:a8:b7:44:3f:16:7f:c8:fc:44:47:30:3f:
59:03:37:16:bb:5b:29:25:1f:26:75:fe:6a:d3:61:
31:f3:dd:11:bb:6c:f8:47:05:77:6b:78:2e:db:a9:
cd:5f:a9:87:ac:c8:15:4b:5e:37:fa:bd:3d:40:46:
7d:ae:80:98:a4:13:7f:fc:52:b9:26:d0:fb:77:70:
bd:2d:08:50:50:73:8f:5d:20:39:d1:f8:95:d7:70:
39:ed:e6:e1:e0:3e:76:b6:63:49:e2:4e:17:0c:33:
77:89:aa:a5:8a:ed:e1:6d:23:c5:94:3d:7c:52:34:
42:ba:15:93:d4:97:11:8b:3e:66:43:65:fb:7e:50:
a1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:62:A5:4B:95:97:21:07:49:32:CB:C7:34:EC:4E:B8:A6:09:BE:55
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/94BB171C1BE411EEB11DDD1B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.192.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:9f:c7:dd:1a:f2:ba:a7:2b:0a:2f:01:52:98:44:f4:fa:26:
db:d7:5c:f9:1a:4c:35:d0:69:a2:a8:65:7c:cc:ae:d8:64:34:
a3:14:cb:5b:44:39:bc:10:d4:55:71:61:f8:58:82:70:f2:0c:
80:70:f6:e0:86:18:02:60:0f:e0:7e:63:f0:fc:c6:e1:e8:6f:
9c:97:e3:cf:d2:e3:31:c3:f4:98:2d:a5:5a:68:8b:15:1f:25:
17:33:e6:b7:3f:36:af:aa:44:fb:6a:78:57:f0:72:b7:d3:30:
1e:3d:3d:64:bd:b9:6f:81:74:12:1c:b5:f8:cb:cf:4a:23:c9:
1c:c3:ff:d3:64:bb:b9:b0:b4:3a:0a:82:9f:70:18:af:7a:fe:
46:d1:34:e3:fb:1b:f2:ef:9c:49:c6:1c:b8:35:bd:ef:5c:37:
d0:a1:bc:4b:ba:ae:10:15:9f:fb:f7:32:98:32:98:62:32:62:
aa:14:51:50:73:08:53:dc:2c:06:0a:b4:e2:72:39:c7:c6:de:
1d:7f:12:01:d8:89:ac:ea:06:b1:15:3d:b4:a7:46:7e:d7:b8:
80:ac:cc:f8:90:93:cb:cb:4d:a0:af:6a:1a:e4:6b:cd:d5:91:
26:59:5b:38:8a:28:02:21:29:ca:32:6c:a0:2d:47:2a:81:fe:
95:c4:69:19
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBKjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
QkY0MUFGMTEwLwYDVQQFEygzRjY3N0YzQTE4QUNBQUU2Qzk3RjgxRjk5QUU4Nzk0
NjU0RTA0MTBCMB4XDTIzMDcwNjEwMDUwMloXDTMzMDcwNjEwMDUwMlowGDEWMBQG
A1UEAxMNNjRhNjkxZDItMTBlODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM0mBSRlSEq6/cXb1A9tPvYYCG8cfTXWoCRoU/jXi/2ZM7IcNRFirOR63UE5
CNQ04rBx1C/0quaT0tMKvfcq+YsQyZiONUNr+OPAa8BKw4k5d2RgR9B6pNoJqZAI
6jjba5m+c5eLWHBvhtOZ5jWAUwmgv15j3CsfCP8nqLdEPxZ/yPxERzA/WQM3Frtb
KSUfJnX+atNhMfPdEbts+EcFd2t4LtupzV+ph6zIFUteN/q9PUBGfa6AmKQTf/xS
uSbQ+3dwvS0IUFBzj10gOdH4lddwOe3m4eA+drZjSeJOFwwzd4mqpYrt4W0jxZQ9
fFI0QroVk9SXEYs+ZkNl+35QoeECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQRYqVL
lZchB0kyy8c07E64pgm+VTAfBgNVHSMEGDAWgBQ/Z386GKyq5sl/gfma6HlGVOBB
CzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QkJGNDEvMTRDREY4QjIxMEQ2MTFFRTk1OEMwRjE1NEFEOUU2RkMvUDJkX09o
aXNxdWJKZjRINW11aDVSbFRnUVFzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUDJkX09oaXNxdWJKZjRINW11aDVSbFRnUVFzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkJGNDEvMTRDREY4QjIxMEQ2MTFFRTk1OEMwRjE1NEFE
OUU2RkMvOTRCQjE3MUMxQkU0MTFFRUIxMURERDFCNEFEOUU2RkMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBCnYwDANBgkqhkiG9w0BAQsF
AAOCAQEAK5/H3RryuqcrCi8BUphE9Pom29dc+RpMNdBpoqhlfMyu2GQ0oxTLW0Q5
vBDUVXFh+FiCcPIMgHD24IYYAmAP4H5j8PzG4ehvnJfjz9LjMcP0mC2lWmiLFR8l
FzPmtz82r6pE+2p4V/Byt9MwHj09ZL25b4F0Ehy1+MvPSiPJHMP/02S7ubC0OgqC
n3AYr3r+RtE04/sb8u+cScYcuDW971w30KG8S7quEBWf+/cymDKYYjJiqhRRUHMI
U9wsBgq04nI5x8beHX8SAdiJrOoGsRU9tKdGfte4gKzM+JCTy8tNoK9qGuRrzdWR
JllbOIooAiEpyjJsoC1HKoH+lcRpGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:22 2025 by rpki-client