Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/3146E134315C11ED8C12EADDF1222468.roa
File: 3146E134315C11ED8C12EADDF1222468.roa (raw, json)
Hash identifier: lqWBskBN2CH5ZKMBUTcbnj5aOmZEzV1kwjyKrdG5dNM=
Subject key identifier: 13:05:75:12:60:05:36:A6:68:13:1B:9C:C4:01:F7:3C:E4:D7:74:88
Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial: 75
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/3146E134315C11ED8C12EADDF1222468.roa
Signing time: Sat 10 Sep 2022 22:59:15 +0000
ROA not before: Sat 10 Sep 2022 22:59:12 +0000
ROA not after: Fri 10 Sep 2032 22:59:12 +0000
asID: 33785
IP address blocks: 41.77.136.0/24 maxlen: 24
41.77.137.0/24 maxlen: 24
41.77.138.0/24 maxlen: 24
41.77.139.0/24 maxlen: 24
41.77.140.0/24 maxlen: 24
41.77.141.0/24 maxlen: 24
41.215.240.0/24 maxlen: 24
41.215.241.0/24 maxlen: 24
41.215.242.0/24 maxlen: 24
41.223.52.0/24 maxlen: 24
41.223.53.0/24 maxlen: 24
41.223.54.0/24 maxlen: 24
102.223.186.0/24 maxlen: 24
102.223.187.0/24 maxlen: 24
196.46.188.0/22 maxlen: 22
2c0f:fee0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC80AAF
Validity
Not Before: Sep 10 22:59:12 2022 GMT
Not After : Sep 10 22:59:12 2032 GMT
Subject: CN=631d16c3-868e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:d5:a1:84:26:3f:22:a7:70:11:4e:e1:b5:
e1:dc:31:88:82:0a:42:a3:99:cd:67:8d:63:a4:ca:
38:af:c2:d4:9b:72:78:25:5a:62:d4:50:c8:77:4e:
13:de:bb:5f:01:30:a6:50:e6:1c:33:b7:3b:fe:c9:
cd:3d:35:dd:ad:38:ef:0f:44:ab:c1:d2:a1:a8:38:
18:bb:f8:4a:60:7b:e3:68:96:d6:1d:a7:65:fa:7c:
71:34:af:bd:90:bb:c9:fa:01:98:f8:6b:dc:d3:34:
0f:c0:a3:2b:fc:9c:42:6b:cd:7a:11:54:b4:28:2d:
be:04:c2:1b:35:87:58:c6:35:89:78:e8:7e:98:e7:
bf:43:21:6e:1c:9d:67:9c:66:a3:c8:c1:2a:06:79:
09:67:40:fd:a1:f7:de:54:cd:e7:0a:da:46:4e:a3:
c3:35:92:59:07:58:77:53:04:eb:ee:21:8b:42:4f:
9d:37:c5:4c:36:66:f8:1d:63:6f:66:6c:2c:72:dd:
81:60:9b:9f:e3:8b:e2:fd:c6:7c:d2:4e:e3:7f:3f:
93:22:d2:58:56:2a:e7:e6:ab:9d:b0:fe:4a:5d:4a:
f8:c9:fe:31:44:fd:6e:ae:37:34:3a:91:09:e7:0b:
2f:14:20:77:39:7c:f4:a1:73:a8:ac:70:93:50:38:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:05:75:12:60:05:36:A6:68:13:1B:9C:C4:01:F7:3C:E4:D7:74:88
X509v3 Authority Key Identifier:
keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/3146E134315C11ED8C12EADDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.77.136.0-41.77.141.255
41.215.240.0-41.215.242.255
41.223.52.0-41.223.54.255
102.223.186.0/23
196.46.188.0/22
IPv6:
2c0f:fee0::/32
Signature Algorithm: sha256WithRSAEncryption
c0:02:df:8d:a9:05:33:42:46:a9:c4:21:9d:c0:c7:6d:b8:37:
6b:7e:17:9e:ef:43:d5:81:83:1d:8e:f5:37:58:a1:31:b5:f2:
22:0e:8b:82:97:e5:ac:a5:da:9e:cc:a5:a9:5a:fd:8b:fd:e6:
37:1a:aa:dd:a0:c6:12:7c:72:57:b2:e9:62:b3:c9:9b:a1:e1:
ae:14:cf:7f:4b:95:97:55:fd:ef:a3:12:a8:ed:fa:e4:cd:23:
5c:6c:c3:be:0a:0f:a2:4e:53:4f:78:d4:56:3e:88:f6:6e:30:
7f:8e:02:3a:80:87:01:eb:a6:18:a2:ff:a3:2c:16:7c:b7:52:
6f:ec:68:10:9f:56:c4:00:0d:f6:ab:11:92:37:9a:64:8f:c7:
41:78:a9:46:43:40:ba:3b:60:7f:35:3a:1b:66:c1:93:6b:2e:
68:7b:a3:a0:9f:c0:78:5b:7a:cb:00:ce:4e:a0:fe:1b:e6:ad:
74:5c:03:39:d4:6f:f3:10:9f:0d:16:fd:6c:c5:9c:86:8d:dc:
b3:7e:75:e4:f3:61:72:e1:98:68:1d:e0:f9:e6:90:2a:b3:24:
82:c8:ba:49:6e:bd:ca:32:ad:f9:77:29:ad:c8:27:3a:5e:b1:
59:bb:42:27:9f:41:b6:fc:4d:39:f0:24:a7:15:9a:6b:7f:2b:
07:dd:d8:44
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIBdTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZC
QzgwQUFGMTEwLwYDVQQFEyg4QzhGOENFMkFENTVCOTM2NkJFQzZFREY0OTJDRDlD
MTQ5OEUwNjY0MB4XDTIyMDkxMDIyNTkxMloXDTMyMDkxMDIyNTkxMlowGDEWMBQG
A1UEAwwNNjMxZDE2YzMtODY4ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMFE1aGEJj8ip3ARTuG14dwxiIIKQqOZzWeNY6TKOK/C1JtyeCVaYtRQyHdO
E967XwEwplDmHDO3O/7JzT013a047w9Eq8HSoag4GLv4SmB742iW1h2nZfp8cTSv
vZC7yfoBmPhr3NM0D8CjK/ycQmvNehFUtCgtvgTCGzWHWMY1iXjofpjnv0Mhbhyd
Z5xmo8jBKgZ5CWdA/aH33lTN5wraRk6jwzWSWQdYd1ME6+4hi0JPnTfFTDZm+B1j
b2ZsLHLdgWCbn+OL4v3GfNJO438/kyLSWFYq5+arnbD+Sl1K+Mn+MUT9bq43NDqR
CecLLxQgdzl89KFzqKxwk1A4wGkCAwEAAaOCAuQwggLgMB0GA1UdDgQWBBQTBXUS
YAU2pmgTG5zEAfc85Nd0iDAfBgNVHSMEGDAWgBSMj4zirVW5Nmvsbt9JLNnBSY4G
ZDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QkM4MEEvNDcyRUY1QjJFNzVDMTFFQzlEN0Y5MEQ4RjEyMjI0NjgvakktTTRx
MVZ1VFpyN0c3ZlNTelp3VW1PQm1RLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvakktTTRxMVZ1VFpyN0c3ZlNTelp3VW1PQm1RLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkM4MEEvNDcyRUY1QjJFNzVDMTFFQzlEN0Y5MEQ4RjEy
MjI0NjgvMzE0NkUxMzQzMTVDMTFFRDhDMTJFQURERjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDBeBggrBgEFBQcBBwEB/wRPME0wPAQCAAEwNjAMAwQDKU2IAwQBKU2MMAwDBAQp
1/ADBAAp1/IwDAMEAinfNAMEACnfNgMEAWbfugMEAsQuvDANBAIAAjAHAwUALA/+
4DANBgkqhkiG9w0BAQsFAAOCAQEAwALfjakFM0JGqcQhncDHbbg3a34Xnu9D1YGD
HY71N1ihMbXyIg6LgpflrKXansylqVr9i/3mNxqq3aDGEnxyV7LpYrPJm6HhrhTP
f0uVl1X976MSqO365M0jXGzDvgoPok5TT3jUVj6I9m4wf44COoCHAeumGKL/oywW
fLdSb+xoEJ9WxAAN9qsRkjeaZI/HQXipRkNAujtgfzU6G2bBk2suaHujoJ/AeFt6
ywDOTqD+G+atdFwDOdRv8xCfDRb9bMWcho3cs3515PNhcuGYaB3g+eaQKrMkgsi6
SW69yjKt+XcprcgnOl6xWbtCJ59BtvxNOfAkpxWaa38rB93YRA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:01 2025 by rpki-client