Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/6C20E300FCAB11EFA301CF8C762E951A.roa
File: 6C20E300FCAB11EFA301CF8C762E951A.roa (raw, json)
Hash identifier: OvsUXNSmfjEutAwyrB9JnPffvmOpMIjkA04wcKDLKRY=
Subject key identifier: BB:F9:FA:1D:EE:C0:C2:80:1F:B8:0D:6E:A8:28:65:DD:30:BF:C8:9B
Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial: 0433
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/6C20E300FCAB11EFA301CF8C762E951A.roa
Signing time: Sun 09 Mar 2025 05:57:46 +0000
ROA not before: Sun 09 Mar 2025 05:57:42 +0000
ROA not after: Sat 31 Mar 2035 05:57:42 +0000
asID: 33785
IP address blocks: 41.77.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1075 (0x433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC80AAF
Validity
Not Before: Mar 9 05:57:42 2025 GMT
Not After : Mar 31 05:57:42 2035 GMT
Subject: CN=67cd2dd9-5e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:3d:09:7f:13:6b:ee:cd:bb:1d:3d:4c:de:
0c:e0:eb:7e:e0:e3:49:6f:c0:af:fd:a6:7f:76:bb:
98:4a:48:38:c0:7f:5d:30:82:f8:b4:30:45:50:d2:
52:06:ad:4c:da:36:08:fd:9a:4a:e5:9b:d9:d4:b3:
09:5e:21:35:09:08:26:b0:66:3f:4a:b7:4c:a3:07:
04:98:ec:56:39:c1:69:45:4a:ae:17:3b:20:58:74:
04:65:82:02:cc:a5:29:4a:e9:7c:f7:6c:e4:9b:45:
6c:d3:63:52:87:1f:61:9d:da:cc:f5:14:7e:57:13:
18:c7:e5:bd:e5:53:b6:ee:76:d9:1d:4f:2a:e8:d7:
1c:5f:f8:55:0b:53:48:d7:d7:d4:60:53:7f:50:5d:
e5:bd:40:08:47:61:64:48:dd:88:39:e5:09:1d:16:
58:0f:98:9e:84:99:0f:51:01:13:be:09:4f:eb:ad:
07:65:f7:69:a0:89:7f:b9:4a:e5:38:8f:99:e2:ee:
08:6e:ce:07:5c:55:99:98:f6:44:b4:e2:e8:13:94:
05:4d:5d:db:1e:36:cc:2d:e9:bb:bd:d1:73:7c:0f:
63:fe:84:b1:b8:f8:91:c4:e2:79:3d:4a:dc:57:c2:
b1:86:22:4e:8f:76:96:8b:ef:21:c3:fe:85:ee:ad:
b4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F9:FA:1D:EE:C0:C2:80:1F:B8:0D:6E:A8:28:65:DD:30:BF:C8:9B
X509v3 Authority Key Identifier:
keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/6C20E300FCAB11EFA301CF8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.77.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:bd:24:c3:b0:bf:2a:50:27:02:cd:fc:10:23:7d:e7:49:19:
8b:7f:2d:97:68:dd:6a:75:a4:fd:e5:b5:5b:53:14:b6:f6:50:
79:bd:98:d2:7a:d3:48:e8:f6:c9:36:05:a4:3d:f3:e6:d2:a3:
f4:fa:9f:70:6b:bd:98:fa:f9:38:10:79:ba:08:6c:a8:40:e1:
4c:ef:27:ff:81:b1:9d:38:4a:20:d0:bb:63:91:88:69:90:70:
04:4d:5b:6b:29:ad:a6:bd:8c:6b:f6:33:7a:1c:de:77:bb:ce:
08:f4:08:5d:e7:e2:c3:23:89:dc:52:53:ff:c9:27:45:2e:cf:
d6:5d:85:59:47:78:2c:9f:c7:0a:61:f5:19:6c:a5:a8:9c:8e:
c6:62:b0:cb:2a:42:c9:d5:6a:19:30:4d:65:35:a0:59:51:e4:
36:9a:82:3b:6f:ab:af:c5:74:79:ff:42:9e:d0:7f:62:e6:8b:
e8:53:31:79:ab:04:db:f6:f4:04:db:69:fb:3c:c3:98:58:04:
9d:50:ef:25:38:1f:24:53:ac:c1:57:a6:ce:56:7c:61:8e:d6:
77:8c:4d:b9:01:01:0f:c4:7e:24:b1:97:43:c7:38:d4:2d:25:
d3:46:f1:cb:6e:b2:95:30:62:fd:ff:49:3b:e7:1e:ef:49:1e:
4e:28:c1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:20 2025 by rpki-client