Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/D4C1004CFCAC11EF87CD1196762E951A.roa
File: D4C1004CFCAC11EF87CD1196762E951A.roa (raw, json)
Hash identifier: fLCcmeTVgTEV53OJny1Gldrpxh7k8xccoM8fDP287hI=
Subject key identifier: AD:5F:0E:80:AE:77:27:E7:E7:11:B4:6A:A2:AC:23:E4:D7:BD:82:1A
Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial: 043E
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/D4C1004CFCAC11EF87CD1196762E951A.roa
Signing time: Sun 09 Mar 2025 06:07:50 +0000
ROA not before: Sun 09 Mar 2025 06:07:47 +0000
ROA not after: Sat 31 Mar 2035 06:07:47 +0000
asID: 33785
IP address blocks: 41.215.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1086 (0x43e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC80AAF
Validity
Not Before: Mar 9 06:07:47 2025 GMT
Not After : Mar 31 06:07:47 2035 GMT
Subject: CN=67cd3036-faf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:64:00:48:05:82:37:e9:47:35:2e:64:60:
21:09:07:20:23:59:14:cc:62:3d:21:0f:79:ac:ce:
23:f2:b0:56:f9:cb:74:e7:86:c1:38:8d:98:46:1b:
ba:b8:78:f3:19:4d:ec:74:19:2e:2d:02:ef:40:6a:
3c:dd:16:b5:bd:2f:8d:8b:8c:c5:7a:17:d0:b6:63:
72:e7:fa:29:53:3c:4a:2b:65:fc:1e:d1:73:f3:f9:
ac:b8:4c:f9:04:cf:74:82:c0:41:99:7d:81:8b:75:
04:83:75:2c:c0:02:26:54:e2:8e:0c:f4:ad:67:83:
92:2b:e4:73:7a:f5:44:c6:bb:14:b2:57:2b:5a:7e:
d4:14:09:86:31:84:25:4b:1c:76:04:51:10:d7:e4:
ae:74:ff:11:98:6d:de:54:6e:2f:94:0f:3d:41:9a:
9d:1f:88:19:f6:9d:bd:d1:3b:0f:e9:26:c8:2b:f6:
8d:cb:01:a2:10:c5:bd:5f:39:54:36:de:45:3a:00:
2f:5a:28:ba:e5:65:0c:07:5b:e8:09:6d:b7:80:9e:
72:79:39:12:97:d9:00:bc:64:c1:a3:c7:9c:2e:0b:
a4:ee:c0:6f:b3:cc:be:66:30:ec:c9:43:76:1d:41:
0c:9d:0b:43:9d:64:58:79:17:5d:ff:59:34:0e:bc:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5F:0E:80:AE:77:27:E7:E7:11:B4:6A:A2:AC:23:E4:D7:BD:82:1A
X509v3 Authority Key Identifier:
keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/D4C1004CFCAC11EF87CD1196762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.215.241.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b8:34:ad:f4:51:e9:4e:4b:18:1f:65:ca:1b:ac:c6:8b:db:
18:16:e4:2e:77:94:db:03:78:48:d5:56:62:ee:28:d9:97:32:
f0:48:b7:d9:00:22:6b:14:ee:4d:ca:3f:de:f1:a3:f2:99:90:
28:52:5d:19:97:7f:7f:cd:82:b3:a3:5c:0a:cc:68:63:2b:24:
e2:23:37:1a:17:ca:28:13:5f:63:4c:c9:f8:da:89:d1:0a:1c:
75:1f:70:88:e4:4b:d3:0c:b6:05:80:33:4a:1d:84:2c:7b:99:
a1:bc:b2:23:6a:b2:c8:f8:b8:b9:47:a2:9e:09:31:d0:66:cc:
d7:71:35:f6:14:c1:4e:28:15:c7:da:d5:86:e1:fd:52:7c:ff:
fc:7b:60:78:b7:a8:8b:3c:4f:08:9f:24:04:48:ff:c9:b4:22:
4c:11:af:24:ef:9a:d9:5d:ac:bc:b6:14:28:fd:cb:d7:1a:ee:
3f:f8:c7:20:62:7d:6f:1b:dc:cf:09:8f:18:b9:c5:d4:c6:35:
ec:b8:80:2a:37:15:68:62:27:95:e8:2d:f3:3e:0e:2c:a6:e2:
c9:86:cf:61:cd:a2:86:be:b9:e5:79:67:66:3a:d7:17:4c:51:
de:f2:f4:ef:f8:af:c3:99:01:40:93:95:0f:f4:7c:ec:2f:ed:
97:bb:71:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:38:16 2025 by rpki-client