Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/26CEAFEEF9C211EF8BFA8A60762E951A.roa
File: 26CEAFEEF9C211EF8BFA8A60762E951A.roa (raw, json)
Hash identifier: N5WFGVxirsRLfwzk7wqVUbAA2T7zj2v/qiYQhs/x+7c=
Subject key identifier: B6:32:F4:C1:14:58:DE:A2:78:14:04:6B:A9:74:95:6F:6D:5A:F3:EB
Certificate issuer: /CN=F362412ERI/serialNumber=313CBFEF72A426B047884E074BB1BB0B02FC5649
Certificate serial: 02
Authority key identifier: 31:3C:BF:EF:72:A4:26:B0:47:88:4E:07:4B:B1:BB:0B:02:FC:56:49
Authority info access: rsync://rpki.afrinic.net/repository/ripe/MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/26CEAFEEF9C211EF8BFA8A60762E951A.roa
Signing time: Wed 05 Mar 2025 13:02:54 +0000
ROA not before: Wed 05 Mar 2025 13:02:50 +0000
ROA not after: Sun 05 Mar 2045 13:02:50 +0000
asID: 36962
IP address blocks: 213.193.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362412ERI
Validity
Not Before: Mar 5 13:02:50 2025 GMT
Not After : Mar 5 13:02:50 2045 GMT
Subject: CN=67c84b7e-27db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:96:fc:38:1d:30:03:eb:7c:24:29:c9:78:
03:ec:c7:9d:06:37:67:68:11:0f:c8:36:77:7b:5a:
d1:0e:a6:70:8a:29:36:d3:64:e2:8b:3d:0c:ec:57:
62:16:3e:a1:10:4c:f5:27:f4:8e:cd:61:75:b0:cc:
fd:c7:a0:38:4d:fd:1d:79:3a:9b:55:dc:c5:51:c4:
3c:4e:3f:49:01:1d:83:84:6d:6a:6d:9e:97:6c:f9:
a7:5e:f5:9e:8c:06:d7:5d:a3:5b:b9:1f:d9:c0:32:
47:05:86:66:f1:48:52:f0:63:d8:2b:52:5e:fa:ae:
27:13:2d:8c:4c:70:a8:69:b5:75:13:0a:19:fb:b8:
ae:fa:80:c8:51:36:e4:d7:0f:38:5d:d6:0e:46:27:
64:e7:c2:03:fb:d8:b6:e9:21:5d:e5:7b:48:99:3e:
2c:7e:b0:f3:2d:86:bb:c0:cb:ee:5e:a4:45:d4:eb:
2a:85:49:56:62:e8:e4:49:8f:0d:29:d6:ae:fe:ed:
3b:f9:6e:17:e5:43:bd:f8:71:91:d1:65:b8:b8:6c:
01:45:71:86:f2:c4:12:ba:11:74:24:09:9a:fb:cb:
d0:1b:e3:e7:c8:fc:4e:5a:07:39:dc:5a:a4:1f:e1:
a8:01:6b:ed:b3:9e:dd:c7:f7:be:70:14:2f:17:a2:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:32:F4:C1:14:58:DE:A2:78:14:04:6B:A9:74:95:6F:6D:5A:F3:EB
X509v3 Authority Key Identifier:
keyid:31:3C:BF:EF:72:A4:26:B0:47:88:4E:07:4B:B1:BB:0B:02:FC:56:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/26CEAFEEF9C211EF8BFA8A60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
213.193.32.0/21
Signature Algorithm: sha256WithRSAEncryption
97:ee:d6:28:90:04:bb:20:c5:b1:5b:66:b1:fb:4d:ae:1c:6f:
d2:7c:c7:58:9c:a4:6c:0c:a7:7c:17:b3:dd:f7:03:63:e7:73:
a4:39:59:f4:dd:c3:bb:f0:78:0f:05:c9:d8:b0:ab:49:14:a6:
e0:23:2c:a2:aa:41:62:c5:a4:fc:16:33:c3:40:77:af:28:ee:
4a:39:f1:85:8c:67:cd:93:00:04:da:2b:ef:ed:4a:f8:c3:52:
e0:76:44:ce:98:eb:00:f2:5f:ac:8f:ef:04:7d:45:5a:19:9e:
4f:24:73:9a:95:4b:b8:cf:fa:2d:39:62:39:dc:88:c1:42:fc:
0c:37:60:7b:cf:3e:aa:a6:7e:20:d7:6e:18:47:a9:be:54:5b:
98:31:4c:4a:3d:79:0d:a6:f0:c8:4b:84:31:19:76:90:58:f6:
7f:12:fe:e9:38:f4:d6:9d:ab:04:fc:76:84:4f:97:fd:6f:1f:
1b:7f:b0:f8:57:e2:13:f7:57:48:50:a1:5b:ce:f9:ed:e9:66:
38:8b:14:10:58:3c:8f:8c:9a:29:35:d0:36:2f:1d:c7:d9:6d:
bd:d8:b1:ed:05:5d:28:6a:49:02:26:7b:d3:3a:af:de:38:02:
51:05:f2:2a:87:7e:32:9b:c8:a7:de:9f:69:bb:54:23:a4:ec:
0d:39:4a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:44:53 2025 by rpki-client