Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/BEB0D28EFCAA11EF97EC4A88762E951A.roa
File: BEB0D28EFCAA11EF97EC4A88762E951A.roa (raw, json)
Hash identifier: jZflyQkEOdvyH7cORlNM6RzxEc6T6GfFgEfB6W779Ik=
Subject key identifier: 17:F5:5D:A3:1E:B0:95:4D:E3:0B:4B:59:15:A3:40:3D:D6:7A:5B:C0
Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial: 042F
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/BEB0D28EFCAA11EF97EC4A88762E951A.roa
Signing time: Sun 09 Mar 2025 05:52:54 +0000
ROA not before: Sun 09 Mar 2025 05:52:50 +0000
ROA not after: Sat 31 Mar 2035 05:52:50 +0000
asID: 33785
IP address blocks: 41.77.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1071 (0x42f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC80AAF
Validity
Not Before: Mar 9 05:52:50 2025 GMT
Not After : Mar 31 05:52:50 2035 GMT
Subject: CN=67cd2cb6-897d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:1c:33:55:ba:cc:49:61:b1:fe:23:2a:61:
e4:b1:0c:c9:d2:16:35:80:f0:ad:16:84:26:36:21:
92:18:c3:d4:2c:fd:0c:52:33:67:28:e8:23:28:d4:
4e:ee:cf:83:33:99:4d:80:63:d4:20:ab:db:79:c3:
5a:7f:3d:20:4f:0d:cc:11:56:4a:7c:1d:d1:96:f8:
9a:df:2d:7c:05:12:5b:e8:14:d0:2b:98:37:c1:2f:
68:02:6e:54:17:9e:b7:7c:8a:18:cd:97:7e:ca:c9:
62:22:23:8a:84:e6:5b:ca:b3:ec:8d:50:52:40:1b:
e3:d0:cf:81:bb:c3:d1:f4:79:b9:01:b3:9f:74:c6:
d3:16:ad:59:c9:b6:0d:7a:0f:b4:0e:8f:c2:7a:e9:
f7:e7:a6:1f:27:a2:19:20:2e:e9:e5:0e:0a:a3:ff:
ea:d9:8c:e5:7f:a2:8b:18:dc:36:3d:f5:21:8c:56:
89:2c:57:e6:68:0b:a6:4e:58:3c:6e:12:1e:b0:f2:
53:62:f3:4c:df:d1:ff:14:cf:f8:8a:c1:42:2e:21:
37:98:5b:62:4c:88:39:4a:a2:be:ef:2b:d7:c5:ba:
9b:a8:1c:a8:6d:2a:31:6b:b7:64:cc:dd:3d:15:a8:
af:1b:d6:46:36:b7:59:66:2b:68:a7:57:5f:e6:e5:
62:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F5:5D:A3:1E:B0:95:4D:E3:0B:4B:59:15:A3:40:3D:D6:7A:5B:C0
X509v3 Authority Key Identifier:
keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/BEB0D28EFCAA11EF97EC4A88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.77.136.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:8a:f6:76:02:64:0f:b8:85:e0:ed:c4:2c:a9:89:07:eb:59:
25:ac:7e:20:03:a2:80:5c:76:e0:d8:1b:a8:6e:5b:a9:b1:50:
31:d0:03:4d:53:b6:f1:6b:7b:b3:c8:65:d2:3e:ba:0f:9b:d8:
3f:1e:a2:db:29:1b:37:9c:b5:ef:ba:a8:25:73:e3:1f:a8:c2:
49:be:58:5d:03:0c:e5:8a:e3:9f:56:f2:77:e6:e2:27:a1:78:
1c:5b:4c:fe:48:40:63:9e:be:6a:35:10:03:fe:b3:18:2c:b8:
07:c9:cf:7b:78:0a:cd:5e:fb:24:28:27:2c:a6:11:46:23:5e:
81:64:3b:37:79:ea:fe:a5:d1:a5:82:75:14:5d:f8:52:f0:34:
94:74:44:13:4d:f1:ab:5b:af:08:48:5c:5e:e4:f7:b7:0d:2a:
d3:b9:19:60:68:85:88:8c:7e:4a:bf:3c:80:44:24:e0:c7:b1:
f4:c9:cf:b1:af:33:49:64:a3:e6:ff:d3:a2:6e:3f:ae:28:bf:
e8:5a:f0:25:32:e2:7a:11:78:98:4c:f5:1a:f0:f6:0a:62:a0:
34:24:cb:0c:d9:9c:31:80:b5:66:1a:01:79:4b:93:a7:4c:d6:
61:51:04:dd:13:b1:eb:21:f4:a3:33:11:4e:f8:4e:45:d1:9c:
97:fd:dd:0f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBC8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkM4MEFBRjExMC8GA1UEBRMoOEM4RjhDRTJBRDU1QjkzNjZCRUM2RURGNDkyQ0Q5
QzE0OThFMDY2NDAeFw0yNTAzMDkwNTUyNTBaFw0zNTAzMzEwNTUyNTBaMBgxFjAU
BgNVBAMTDTY3Y2QyY2I2LTg5N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuYhwzVbrMSWGx/iMqYeSxDMnSFjWA8K0WhCY2IZIYw9Qs/QxSM2co6CMo
1E7uz4MzmU2AY9Qgq9t5w1p/PSBPDcwRVkp8HdGW+JrfLXwFElvoFNArmDfBL2gC
blQXnrd8ihjNl37KyWIiI4qE5lvKs+yNUFJAG+PQz4G7w9H0ebkBs590xtMWrVnJ
tg16D7QOj8J66ffnph8nohkgLunlDgqj/+rZjOV/oosY3DY99SGMVoksV+ZoC6ZO
WDxuEh6w8lNi80zf0f8Uz/iKwUIuITeYW2JMiDlKor7vK9fFupuoHKhtKjFrt2TM
3T0VqK8b1kY2t1lmK2inV1/m5WLTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUF/Vd
ox6wlU3jC0tZFaNAPdZ6W8AwHwYDVR0jBBgwFoAUjI+M4q1VuTZr7G7fSSzZwUmO
BmQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJDODBBLzQ3MkVGNUIyRTc1QzExRUM5RDdGOTBEOEYxMjIyNDY4L2pJLU00
cTFWdVRacjdHN2ZTU3pad1VtT0JtUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pJLU00cTFWdVRacjdHN2ZTU3pad1VtT0JtUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkJDODBBLzQ3MkVGNUIyRTc1QzExRUM5RDdGOTBEOEYx
MjIyNDY4L0JFQjBEMjhFRkNBQTExRUY5N0VDNEE4ODc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAApTYgwDQYJKoZIhvcNAQEL
BQADggEBAMeK9nYCZA+4heDtxCypiQfrWSWsfiADooBcduDYG6huW6mxUDHQA01T
tvFre7PIZdI+ug+b2D8eotspGzecte+6qCVz4x+owkm+WF0DDOWK459W8nfm4ieh
eBxbTP5IQGOevmo1EAP+sxgsuAfJz3t4Cs1e+yQoJyymEUYjXoFkOzd56v6l0aWC
dRRd+FLwNJR0RBNN8atbrwhIXF7k97cNKtO5GWBohYiMfkq/PIBEJODHsfTJz7Gv
M0lko+b/06JuP64ov+ha8CUy4noReJhM9Rrw9gpioDQkywzZnDGAtWYaAXlLk6dM
1mFRBN0Tsesh9KMzEU74TkXRnJf93Q8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:40 2025 by rpki-client