Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/70E6B838EAAA11EE8A93F24E775412E6.roa
File: 70E6B838EAAA11EE8A93F24E775412E6.roa (raw, json)
Hash identifier: zEUrkuNTREb3r5McBooHFqJ4/0lPKiN0ZbSMvETqe3o=
Subject key identifier: D4:97:CA:A9:C0:9F:13:3B:ED:EB:A9:60:27:13:AB:6A:5E:7B:25:FA
Certificate issuer: /CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Certificate serial: 0275
Authority key identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/70E6B838EAAA11EE8A93F24E775412E6.roa
Signing time: Mon 25 Mar 2024 13:20:25 +0000
ROA not before: Mon 25 Mar 2024 13:20:22 +0000
ROA not after: Fri 31 Mar 2034 13:20:22 +0000
asID: 329063
IP address blocks: 2c0f:7680:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614D1DAF
Validity
Not Before: Mar 25 13:20:22 2024 GMT
Not After : Mar 31 13:20:22 2034 GMT
Subject: CN=66017a19-f2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:2e:fb:f7:74:7a:f8:1c:4b:88:d0:bc:59:
ad:80:cd:76:17:13:5f:58:96:89:af:86:cc:c3:20:
d8:fa:0c:03:53:d1:96:ba:44:2b:7a:a4:f3:a2:18:
9d:9c:38:66:f0:39:4a:97:6c:8d:63:2f:30:64:22:
f5:00:b4:d9:d8:cc:89:9a:3c:f0:e0:1a:f9:fc:52:
52:e9:bd:56:bb:00:a3:2f:20:ec:89:3a:d1:2d:d8:
b4:80:2b:7c:2d:af:ae:59:b3:94:9f:26:56:99:ff:
5d:a9:2a:f5:4f:d5:cf:a8:4b:39:ec:12:84:f8:21:
c3:41:4f:de:f2:77:29:17:41:a9:7b:d0:c4:ff:2f:
7d:b5:0f:d0:10:99:d5:ae:b2:9e:15:50:6d:7c:e6:
14:f7:53:70:0d:64:cb:7c:2a:d6:57:c3:aa:b7:99:
6d:2d:8e:3d:a0:0c:ff:fb:2a:4c:b2:26:51:45:9a:
ef:a8:82:48:29:9f:23:09:5d:6c:36:d6:57:9e:42:
14:a7:5c:08:b6:d9:d0:32:df:3f:cd:d3:ea:b3:13:
47:2f:43:db:32:41:94:2a:f7:f9:17:cf:fa:1a:6d:
0f:3a:4f:7b:18:06:55:18:65:52:13:27:07:2a:5d:
26:88:0b:7d:ad:30:b8:1c:34:78:d3:a7:5a:66:b6:
11:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:97:CA:A9:C0:9F:13:3B:ED:EB:A9:60:27:13:AB:6A:5E:7B:25:FA
X509v3 Authority Key Identifier:
keyid:27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/70E6B838EAAA11EE8A93F24E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:7680:8000::/33
Signature Algorithm: sha256WithRSAEncryption
64:d8:5a:34:f7:e0:27:e8:a6:2a:eb:07:0e:b7:06:d5:4c:29:
ac:08:e1:45:55:4b:44:06:71:a2:11:54:b3:20:6d:f3:28:4a:
86:b6:52:f5:3c:c0:98:18:15:fc:ed:17:1e:bd:50:8c:7a:2a:
5f:2f:6a:8d:c5:3f:ec:8b:a7:15:a2:32:ba:29:4b:0a:0f:4b:
c0:75:fb:de:e0:ed:d4:a0:a7:78:9d:83:57:d8:09:cf:44:95:
9c:56:c5:ab:e6:3b:67:02:ae:0f:fe:90:35:12:7f:66:e1:64:
0f:48:db:d7:86:d6:f2:d9:d9:39:29:62:af:4f:87:fa:0e:95:
53:be:9e:cb:11:a8:e9:85:50:a4:fe:93:f2:63:1e:04:a7:51:
5a:75:b8:d4:b9:fb:5f:6a:5f:46:2f:d0:08:89:cd:5d:b3:4e:
65:13:00:ac:a8:13:8b:cb:24:e6:18:b3:2a:16:ee:45:c1:f1:
62:47:a9:fa:cc:32:86:2b:5b:1e:a8:09:46:8a:70:46:4a:6c:
38:07:0c:b6:39:95:78:2f:20:8b:27:92:bb:72:17:4c:69:18:
1f:c8:67:69:5b:c9:c0:6c:64:29:85:d5:11:76:76:5a:ce:cd:
d6:4c:20:80:0c:41:96:d1:e2:ef:42:8f:8a:ad:b1:92:41:81:
1d:e2:8f:4f
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTREMURBRjExMC8GA1UEBRMoMjc3OTNEMjE1RjA4ODA1REI4RDBCQTg5MkQzMzZG
MjlBQjdCQjA1QjAeFw0yNDAzMjUxMzIwMjJaFw0zNDAzMzExMzIwMjJaMBgxFjAU
BgNVBAMTDTY2MDE3YTE5LWYyYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDU1S7793R6+BxLiNC8Wa2AzXYXE19YlomvhszDINj6DANT0Za6RCt6pPOi
GJ2cOGbwOUqXbI1jLzBkIvUAtNnYzImaPPDgGvn8UlLpvVa7AKMvIOyJOtEt2LSA
K3wtr65Zs5SfJlaZ/12pKvVP1c+oSznsEoT4IcNBT97ydykXQal70MT/L321D9AQ
mdWusp4VUG185hT3U3ANZMt8KtZXw6q3mW0tjj2gDP/7KkyyJlFFmu+ogkgpnyMJ
XWw21leeQhSnXAi22dAy3z/N0+qzE0cvQ9syQZQq9/kXz/oabQ86T3sYBlUYZVIT
JwcqXSaIC32tMLgcNHjTp1pmthERAgMBAAGjggKnMIICozAdBgNVHQ4EFgQU1JfK
qcCfEzvt66lgJxOral57JfowHwYDVR0jBBgwFoAUJ3k9IV8IgF240LqJLTNvKat7
sFswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0RDFELzU4Q0YzMEU0MjkyODExRUQ4RTY4RThGOEYxMjIyNDY4L0ozazlJ
VjhJZ0YyNDBMcUpMVE52S2F0N3NGcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ozazlJVjhJZ0YyNDBMcUpMVE52S2F0N3NGcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0RDFELzU4Q0YzMEU0MjkyODExRUQ4RTY4RThGOEYx
MjIyNDY4LzcwRTZCODM4RUFBQTExRUU4QTkzRjI0RTc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgcsD3aAgDANBgkqhkiG9w0B
AQsFAAOCAQEAZNhaNPfgJ+imKusHDrcG1UwprAjhRVVLRAZxohFUsyBt8yhKhrZS
9TzAmBgV/O0XHr1QjHoqXy9qjcU/7IunFaIyuilLCg9LwHX73uDt1KCneJ2DV9gJ
z0SVnFbFq+Y7ZwKuD/6QNRJ/ZuFkD0jb14bW8tnZOSlir0+H+g6VU76eyxGo6YVQ
pP6T8mMeBKdRWnW41Ln7X2pfRi/QCInNXbNOZRMArKgTi8sk5hizKhbuRcHxYkep
+swyhitbHqgJRopwRkpsOAcMtjmVeC8giyeSu3IXTGkYH8hnaVvJwGxkKYXVEXZ2
Ws7N1kwggAxBltHi70KPiq2xkkGBHeKPTw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:05 2025 by rpki-client