Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/0EB8532CE6E611EFA1284861762E951A.roa
File: 0EB8532CE6E611EFA1284861762E951A.roa (raw, json)
Hash identifier: +Ok9dLqiCTNEexkoRFgNd4UM629LDyyikx+fFXEssiA=
Subject key identifier: B7:1E:6A:D2:4B:A1:BA:10:29:DB:20:C1:49:9C:19:A4:AF:43:87:58
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 0520
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/0EB8532CE6E611EFA1284861762E951A.roa
Signing time: Sun 09 Feb 2025 13:02:04 +0000
ROA not before: Sun 09 Feb 2025 13:02:00 +0000
ROA not after: Sun 31 Dec 2028 13:02:00 +0000
asID: 21003
IP address blocks: 41.254.0.0/24 maxlen: 24
41.254.1.0/24 maxlen: 24
41.254.2.0/24 maxlen: 24
41.254.3.0/24 maxlen: 24
41.254.4.0/24 maxlen: 24
41.254.5.0/24 maxlen: 24
41.254.6.0/24 maxlen: 24
41.254.7.0/24 maxlen: 24
41.254.8.0/24 maxlen: 24
41.254.9.0/24 maxlen: 24
41.254.10.0/24 maxlen: 24
41.254.16.0/24 maxlen: 24
41.254.32.0/24 maxlen: 24
41.254.34.0/24 maxlen: 24
41.254.38.0/24 maxlen: 24
41.254.39.0/24 maxlen: 24
41.254.40.0/24 maxlen: 24
41.254.42.0/24 maxlen: 24
41.254.43.0/24 maxlen: 24
41.254.44.0/24 maxlen: 24
41.254.46.0/24 maxlen: 24
41.254.47.0/24 maxlen: 24
41.254.48.0/24 maxlen: 24
41.254.49.0/24 maxlen: 24
41.254.50.0/24 maxlen: 24
41.254.52.0/24 maxlen: 24
41.254.53.0/24 maxlen: 24
41.254.55.0/24 maxlen: 24
41.254.56.0/24 maxlen: 24
41.254.57.0/24 maxlen: 24
41.254.61.0/24 maxlen: 24
41.254.63.0/24 maxlen: 24
41.254.64.0/24 maxlen: 24
41.254.65.0/24 maxlen: 24
41.254.66.0/24 maxlen: 24
41.254.67.0/24 maxlen: 24
41.254.68.0/24 maxlen: 24
41.254.69.0/24 maxlen: 24
41.254.70.0/24 maxlen: 24
41.254.71.0/24 maxlen: 24
41.254.72.0/24 maxlen: 24
41.254.73.0/24 maxlen: 24
41.254.74.0/24 maxlen: 24
41.254.75.0/24 maxlen: 24
41.254.76.0/24 maxlen: 24
41.254.77.0/24 maxlen: 24
41.254.78.0/24 maxlen: 24
41.254.79.0/24 maxlen: 24
41.254.80.0/24 maxlen: 24
41.254.81.0/24 maxlen: 24
41.254.82.0/24 maxlen: 24
41.254.83.0/24 maxlen: 24
41.254.84.0/24 maxlen: 24
41.254.85.0/24 maxlen: 24
41.254.86.0/24 maxlen: 24
41.254.87.0/24 maxlen: 24
41.254.88.0/24 maxlen: 24
41.254.89.0/24 maxlen: 24
41.254.90.0/24 maxlen: 24
41.254.91.0/24 maxlen: 24
41.254.92.0/24 maxlen: 24
41.254.93.0/24 maxlen: 24
41.254.94.0/24 maxlen: 24
41.254.95.0/24 maxlen: 24
41.254.104.0/24 maxlen: 24
41.254.107.0/24 maxlen: 24
41.254.108.0/24 maxlen: 24
41.254.169.0/24 maxlen: 24
41.254.170.0/24 maxlen: 24
41.254.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1312 (0x520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF
Validity
Not Before: Feb 9 13:02:00 2025 GMT
Not After : Dec 31 13:02:00 2028 GMT
Subject: CN=67a8a74b-d447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:7a:9d:30:c9:71:48:b2:bf:c9:25:ae:92:
99:0e:e6:0b:32:6b:fb:23:55:77:01:2f:dc:61:9c:
34:80:9f:3c:dc:3e:97:29:4c:9c:52:90:35:66:2d:
af:83:2d:d7:84:d1:d8:14:5e:ed:f1:fd:d3:c3:26:
27:13:92:40:ee:ed:0a:46:3e:a0:a5:e1:de:1d:16:
98:d0:03:e1:b2:52:fe:04:7e:cf:4e:76:51:0c:1d:
26:fb:98:69:2b:1c:8a:8f:b9:66:c3:0c:35:5a:f2:
ea:18:76:b0:1b:6e:0a:b3:64:ba:43:bc:7c:36:a1:
6b:28:10:ca:33:08:df:86:d2:63:58:b1:59:db:25:
62:e0:d4:1f:1f:1c:ef:f6:43:b9:6d:2a:69:83:70:
f9:fe:5e:e5:37:19:83:5c:9d:b2:b8:83:51:b1:39:
82:4b:da:b6:6f:b2:a5:61:30:df:97:be:f1:26:d7:
da:ea:42:98:91:94:15:6b:8c:97:7d:ce:04:4a:a1:
ba:8a:11:73:c1:df:24:c7:66:cb:20:f7:91:97:cb:
14:51:9e:ae:a6:9e:2d:8b:da:7d:31:39:84:34:16:
57:f3:53:d2:0c:1f:79:50:69:51:0c:3b:ef:6c:a3:
71:dd:ce:cb:b0:b2:82:59:8a:5b:83:44:bf:de:87:
b1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1E:6A:D2:4B:A1:BA:10:29:DB:20:C1:49:9C:19:A4:AF:43:87:58
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/0EB8532CE6E611EFA1284861762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.254.0.0-41.254.10.255
41.254.16.0/24
41.254.32.0/24
41.254.34.0/24
41.254.38.0-41.254.40.255
41.254.42.0-41.254.44.255
41.254.46.0-41.254.50.255
41.254.52.0/23
41.254.55.0-41.254.57.255
41.254.61.0/24
41.254.63.0-41.254.95.255
41.254.104.0/24
41.254.107.0-41.254.108.255
41.254.169.0-41.254.171.255
Signature Algorithm: sha256WithRSAEncryption
80:e0:23:4d:f4:58:0a:13:4a:56:00:b7:1e:50:19:13:5f:63:
8f:87:3f:45:71:ae:2b:0c:3b:4f:9d:bc:ea:50:9f:67:da:2d:
55:56:c7:78:4e:f6:23:8a:d1:eb:95:73:de:49:3c:df:80:ff:
4d:d1:d9:13:25:80:87:c5:57:14:72:bb:10:49:32:15:21:65:
60:2b:cf:4b:5a:fc:21:b9:f0:56:74:9a:7a:d3:97:6b:1d:47:
eb:8c:db:e5:4b:12:15:b5:c8:59:57:41:26:6f:ee:4f:37:61:
da:2b:02:fb:99:5a:63:8f:23:62:32:aa:ca:76:06:ff:fe:6f:
42:bc:aa:13:29:dd:7a:6c:e5:99:92:58:bc:61:05:38:fb:51:
2a:13:58:93:7e:e1:93:89:d5:f8:11:6e:e1:3d:3a:b6:69:a0:
6b:2b:b5:e3:34:c0:ff:8c:4f:4e:1a:d4:70:ab:f1:17:61:04:
8a:1c:db:2d:4c:cf:3d:9d:32:ef:4e:75:da:3f:e5:77:2d:dd:
ae:0c:c6:c4:9c:62:c4:3c:db:6d:ef:2f:32:4a:cc:b7:44:c3:
1f:76:93:48:16:96:6a:68:7d:9e:0e:a3:5d:cd:d4:c6:d8:43:
c1:93:09:ec:43:1c:82:33:91:93:10:a6:be:88:d8:a0:f0:95:
08:3a:62:02
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjhGNEZBRjExMC8GA1UEBRMoREMxN0EwRUM1ODY1MkQzMTg5NjEyM0E2NTYxMEMz
QTMyMDQ2NTU2QjAeFw0yNTAyMDkxMzAyMDBaFw0yODEyMzExMzAyMDBaMBgxFjAU
BgNVBAMTDTY3YThhNzRiLWQ0NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrHnqdMMlxSLK/ySWukpkO5gsya/sjVXcBL9xhnDSAnzzcPpcpTJxSkDVm
La+DLdeE0dgUXu3x/dPDJicTkkDu7QpGPqCl4d4dFpjQA+GyUv4Efs9OdlEMHSb7
mGkrHIqPuWbDDDVa8uoYdrAbbgqzZLpDvHw2oWsoEMozCN+G0mNYsVnbJWLg1B8f
HO/2Q7ltKmmDcPn+XuU3GYNcnbK4g1GxOYJL2rZvsqVhMN+XvvEm19rqQpiRlBVr
jJd9zgRKobqKEXPB3yTHZssg95GXyxRRnq6mni2L2n0xOYQ0FlfzU9IMH3lQaVEM
O+9so3HdzsuwsoJZiluDRL/eh7HvAgMBAAGjggM3MIIDMzAdBgNVHQ4EFgQUtx5q
0kuhuhAp2yDBSZwZpK9Dh1gwHwYDVR0jBBgwFoAU3Beg7FhlLTGJYSOmVhDDoyBG
VWswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY4RjRGLzhBMzc3QkJDMkE3NTExRUM5MDgxNzU1OUQ4QTAxNENFLzNCZWc3
RmhsTFRHSllTT21WaEREb3lCR1ZXcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzNCZWc3RmhsTFRHSllTT21WaEREb3lCR1ZXcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkY4RjRGLzhBMzc3QkJDMkE3NTExRUM5MDgxNzU1OUQ4
QTAxNENFLzBFQjg1MzJDRTZFNjExRUZBMTI4NDg2MTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwgbAGCCsGAQUFBwEHAQH/BIGgMIGdMIGaBAIAATCBkzALAwMBKf4DBAAp/goD
BAAp/hADBAAp/iADBAAp/iIwDAMEASn+JgMEACn+KDAMAwQBKf4qAwQAKf4sMAwD
BAEp/i4DBAAp/jIDBAEp/jQwDAMEACn+NwMEASn+OAMEACn+PTAMAwQAKf4/AwQF
Kf5AAwQAKf5oMAwDBAAp/msDBAAp/mwwDAMEACn+qQMEAin+qDANBgkqhkiG9w0B
AQsFAAOCAQEAgOAjTfRYChNKVgC3HlAZE19jj4c/RXGuKww7T5286lCfZ9otVVbH
eE72I4rR65Vz3kk834D/TdHZEyWAh8VXFHK7EEkyFSFlYCvPS1r8IbnwVnSaetOX
ax1H64zb5UsSFbXIWVdBJm/uTzdh2isC+5laY48jYjKqynYG//5vQryqEyndemzl
mZJYvGEFOPtRKhNYk37hk4nV+BFu4T06tmmgayu14zTA/4xPThrUcKvxF2EEihzb
LUzPPZ0y70512j/ldy3drgzGxJxixDzbbe8vMkrMt0TDH3aTSBaWamh9ng6jXc3U
xthDwZMJ7EMcgjORkxCmvojYoPCVCDpiAg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:43 2025 by rpki-client