Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/931E9D64F1E611EF9602D94F762E951A.roa
File: 931E9D64F1E611EF9602D94F762E951A.roa (raw, json)
Hash identifier: pu2PP2qQRpHTl0P12WcevM+SHqavoog2ZfvG3UTYFMs=
Subject key identifier: 37:06:FA:E4:07:60:6B:0D:57:9F:3F:81:03:F4:BB:9B:60:EA:28:91
Certificate issuer: /CN=F36D289CRI/serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
Certificate serial: 0840
Authority key identifier: 6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30
Authority info access: rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/931E9D64F1E611EF9602D94F762E951A.roa
Signing time: Sun 23 Feb 2025 13:03:29 +0000
ROA not before: Sun 23 Feb 2025 13:03:24 +0000
ROA not after: Thu 28 Feb 2030 13:03:24 +0000
asID: 327754
IP address blocks: 80.95.0.0/22 maxlen: 22
80.95.0.0/24 maxlen: 24
80.95.1.0/24 maxlen: 24
80.95.2.0/24 maxlen: 24
80.95.3.0/24 maxlen: 24
80.95.4.0/22 maxlen: 22
80.95.4.0/24 maxlen: 24
80.95.5.0/24 maxlen: 24
80.95.6.0/24 maxlen: 24
80.95.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2112 (0x840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D289CRI
Validity
Not Before: Feb 23 13:03:24 2025 GMT
Not After : Feb 28 13:03:24 2030 GMT
Subject: CN=67bb1ca0-3fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:64:e7:7c:ab:ea:ad:2c:f0:d2:21:16:f3:15:
32:c5:63:62:f0:aa:4b:e1:f4:53:c5:87:42:a1:20:
18:06:86:78:a8:50:26:c4:fa:07:e1:ff:d4:6b:cf:
f3:f8:2c:34:f3:57:f1:6d:37:11:43:1a:61:21:10:
a4:e9:b1:89:f0:05:3f:3c:26:18:48:c4:9a:6a:38:
5c:d3:b9:0f:1d:42:9d:4b:0c:9f:d3:ce:25:c8:bb:
23:3c:b1:af:7f:70:c6:8a:f7:af:6f:95:ee:68:bd:
75:fe:79:c2:3d:96:a0:91:de:9b:18:fe:0b:06:29:
c7:5e:98:ab:69:8d:80:e4:85:60:ea:64:d4:6c:4e:
02:b9:9d:8a:11:be:3a:33:55:cb:b3:23:7a:ec:18:
4d:fd:48:f9:20:99:c3:03:ed:b1:61:5e:78:b2:99:
cf:c7:aa:2b:72:3d:20:dc:d1:67:af:b3:61:5a:16:
28:58:9a:2f:ae:95:80:cd:2c:55:47:23:20:f3:12:
80:fe:03:e5:25:3a:3f:1b:b5:f1:02:e1:34:b7:37:
c2:3c:c4:32:88:44:bc:de:42:5f:f9:d3:19:30:ef:
7d:fa:38:66:ad:d4:5e:76:13:a8:43:f6:71:a2:c4:
c5:8c:e1:8d:06:69:f3:ad:1d:4e:19:04:ea:24:e1:
8b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:06:FA:E4:07:60:6B:0D:57:9F:3F:81:03:F4:BB:9B:60:EA:28:91
X509v3 Authority Key Identifier:
keyid:6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/931E9D64F1E611EF9602D94F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
80.95.0.0/21
Signature Algorithm: sha256WithRSAEncryption
77:2d:03:64:f5:85:3e:7c:bb:35:66:4d:87:2b:d9:f4:42:2b:
1a:06:a5:cd:1b:04:46:ae:99:b1:93:98:5e:2f:09:e6:3b:d4:
05:42:be:83:fc:60:1e:50:12:f3:dd:46:87:c8:b5:b6:14:69:
f4:af:1d:bf:87:9c:b6:02:65:9f:2d:3b:be:45:75:c5:f4:b5:
1e:c4:c6:69:68:a0:65:76:9f:ad:3c:ee:9c:a4:3b:6c:cc:c2:
de:a5:14:0a:96:2f:b7:73:1f:30:34:81:c1:85:71:a5:28:27:
0a:94:f7:ce:82:66:8b:ce:57:2b:9c:69:b2:15:b5:4e:68:c1:
4c:70:dc:d1:9b:bf:59:ef:60:d0:37:76:b3:76:66:4b:d0:2d:
a1:ce:8f:98:80:88:dc:44:d6:b3:9a:15:1a:73:cb:d9:17:04:
5d:25:33:64:40:8e:1f:8f:75:7b:ef:f0:3d:e8:01:f8:aa:2e:
b5:32:e3:4d:08:c1:97:71:4b:27:fc:28:dd:8d:6f:29:1e:00:
02:a2:d9:95:e6:38:0e:73:49:b2:1a:4c:77:cc:73:a9:f6:c5:
37:96:6f:42:73:ea:53:80:f4:3a:37:89:cf:29:e0:d8:61:ff:
8e:fe:8f:e1:86:66:45:0c:87:0c:eb:ae:f1:6b:6d:60:41:5e:
cb:e9:0b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:02 2025 by rpki-client