Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/6F7B2D9CE6EB11EFAF676182762E951A.roa
File: 6F7B2D9CE6EB11EFAF676182762E951A.roa (raw, json)
Hash identifier: ywXo19J7zzDJozIEEmOFi9+A4iofR1mYhpmq35OcaZk=
Subject key identifier: 4E:46:9D:B0:6C:B3:84:75:3B:9D:2C:61:C9:AD:2D:B6:50:CB:C5:C8
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 0522
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/6F7B2D9CE6EB11EFAF676182762E951A.roa
Signing time: Sun 09 Feb 2025 13:40:33 +0000
ROA not before: Sun 09 Feb 2025 13:40:29 +0000
ROA not after: Sun 31 Dec 2028 13:40:29 +0000
asID: 21003
IP address blocks: 41.252.64.0/19 maxlen: 19
41.252.96.0/20 maxlen: 20
41.252.112.0/21 maxlen: 21
41.252.160.0/19 maxlen: 19
41.252.192.0/19 maxlen: 19
41.252.224.0/19 maxlen: 19
41.253.64.0/19 maxlen: 19
41.253.96.0/19 maxlen: 19
41.253.128.0/20 maxlen: 20
41.253.144.0/20 maxlen: 20
41.253.160.0/20 maxlen: 20
41.253.176.0/21 maxlen: 21
41.253.184.0/21 maxlen: 21
41.253.192.0/19 maxlen: 19
41.253.192.0/20 maxlen: 20
41.253.208.0/20 maxlen: 20
41.253.224.0/19 maxlen: 19
41.254.4.0/23 maxlen: 23
41.254.6.0/23 maxlen: 23
41.254.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1314 (0x522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF
Validity
Not Before: Feb 9 13:40:29 2025 GMT
Not After : Dec 31 13:40:29 2028 GMT
Subject: CN=67a8b051-8816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:be:ac:e1:88:7f:a5:04:bb:43:75:5d:92:
99:a3:4f:a9:d8:b4:c1:14:f6:cd:77:d4:d8:2d:48:
2e:d4:4a:fb:48:32:2c:55:a3:94:0e:8b:b2:da:ea:
1e:f8:20:d9:49:47:59:d4:7f:53:38:2f:e0:d3:5c:
f1:1b:88:f2:00:47:ff:20:7d:86:c3:2b:10:30:7a:
dd:8f:b8:9d:64:90:9e:af:5c:8d:dd:ec:c0:4a:76:
65:fb:02:7c:c7:0e:05:c5:19:fa:d4:29:59:4b:73:
2c:fc:0e:09:59:f5:e2:63:56:44:01:35:f3:87:ee:
a6:cc:ab:bb:2f:db:b3:ea:7b:69:64:0a:40:63:21:
a6:44:11:15:bf:06:b2:c1:ff:71:4c:53:c1:02:fe:
68:3c:82:07:9f:9a:a7:61:a4:1e:ab:36:95:a9:f4:
68:c4:a6:91:a0:9f:ae:8d:94:96:7c:ec:4e:50:da:
d8:42:52:64:9a:d3:8f:e6:54:ce:15:74:b1:33:75:
f3:ba:89:fe:bb:f9:99:89:5c:92:4b:b6:7c:cb:64:
9d:39:73:ac:c3:50:ec:1f:d2:a9:7e:f8:58:36:e2:
db:1d:5d:07:77:5e:68:24:22:14:42:ad:b7:d4:75:
84:ac:4a:f9:bd:ac:8c:2e:b0:e2:04:de:1e:26:ba:
40:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:46:9D:B0:6C:B3:84:75:3B:9D:2C:61:C9:AD:2D:B6:50:CB:C5:C8
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/6F7B2D9CE6EB11EFAF676182762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.252.64.0-41.252.119.255
41.252.160.0-41.252.255.255
41.253.64.0-41.253.255.255
41.254.4.0/22
41.254.32.0/19
Signature Algorithm: sha256WithRSAEncryption
56:f2:ee:0a:ba:45:77:7a:c9:58:2f:64:54:55:d1:8b:63:18:
8b:6f:71:02:4d:cb:1d:90:d3:57:1a:16:87:53:c6:56:11:da:
3c:e4:a6:7a:ba:34:62:9b:f6:82:e1:75:1f:d5:12:12:28:82:
5c:9d:e8:e4:76:d9:21:ff:e8:8f:d1:68:35:2c:b7:de:df:5f:
79:80:ce:26:49:4e:d0:b1:e1:78:25:0a:02:4e:56:cc:01:91:
1b:b4:a6:2d:4c:73:4d:d9:d0:59:9f:c4:0c:22:ca:6e:e5:49:
e3:8c:69:73:04:ab:e0:6b:4e:e5:71:a0:2e:24:1d:53:5b:83:
bb:21:f2:ba:a6:11:0f:f9:18:4c:68:0b:3d:d9:d9:f8:7b:8f:
f4:7c:09:d3:32:a2:4c:ef:8e:18:e9:a8:77:2b:a4:5a:b3:14:
d9:3e:6c:53:c2:f8:41:83:72:04:bc:30:b9:ce:28:6d:6a:cb:
8e:ec:44:09:23:ab:cd:4a:05:d0:05:c8:f1:d5:22:b9:a1:fa:
2d:e1:77:e2:78:99:b3:f8:d0:6b:da:e2:11:18:d5:91:e0:46:
b8:95:43:20:50:07:01:05:2b:df:de:64:56:fe:28:7d:04:fe:
41:14:e4:4d:e8:4c:63:0e:1a:f3:a8:af:bb:af:d3:b2:e9:10:
af:c4:35:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:46 2025 by rpki-client