![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/48A838F4F93111ECBE9EE388F1222468.roa
File: 48A838F4F93111ECBE9EE388F1222468.roa (raw, json)
Hash identifier: NPEImA7F+Ur3FNr9HiE/AvEd4Yk5gaf4dPIpJJguxBQ=
Subject key identifier: F6:EA:14:5B:8C:39:C2:0D:0F:F0:39:95:4D:6E:6F:A0:8E:74:C8:77
Certificate issuer: /CN=F3639454AF/serialNumber=E0BE2C42A62AE6D7529C17D344C2D2177637A966
Certificate serial: 04
Authority key identifier: E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/48A838F4F93111ECBE9EE388F1222468.roa
Signing time: Fri 01 Jul 2022 11:31:01 +0000
ROA not before: Fri 01 Jul 2022 11:30:57 +0000
ROA not after: Thu 31 Jul 2025 11:30:57 +0000
asID: 328468
IP address blocks: 2c0f:ed50::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3639454AF
Validity
Not Before: Jul 1 11:30:57 2022 GMT
Not After : Jul 31 11:30:57 2025 GMT
Subject: CN=62bedaf5-e268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:e5:8c:04:8c:57:5d:9f:b9:02:b0:4a:94:
c2:aa:e4:55:5f:0b:94:fc:cc:f3:b4:71:bd:2f:e3:
0d:c6:68:c2:c4:1d:0c:06:99:55:81:86:2b:92:3d:
19:8d:df:37:24:69:c4:8c:67:dd:70:9b:04:ce:4a:
78:a3:3f:cf:d0:d9:5a:99:a7:d6:28:d7:b6:99:9a:
61:41:bf:7d:db:8a:d6:98:80:21:4f:0e:40:cd:24:
3e:d0:b9:ef:c2:2e:bf:2d:69:26:03:56:84:e4:0e:
6b:96:1a:19:ba:ee:8d:52:2f:73:e1:78:ca:55:e9:
81:ca:d7:53:85:98:21:5d:fe:a3:28:1b:58:f7:e5:
5c:af:e2:e9:74:45:6e:49:7f:50:81:ee:e8:c4:e0:
d1:1d:15:c4:02:d7:e8:f1:a3:04:9e:e2:76:61:fc:
31:4e:1e:ed:27:25:53:69:70:5d:06:94:0a:4b:e8:
bc:a9:d6:b7:01:2b:62:74:01:ac:e5:5d:27:8f:ca:
b4:21:50:b6:5c:b6:6b:6a:70:95:21:bb:27:33:b4:
31:49:c5:a1:b9:fd:ed:94:40:24:e9:16:d1:22:1d:
b9:73:e5:b2:4b:3a:2f:44:00:07:36:1f:d4:57:ce:
f9:ea:4a:f9:94:96:0d:d1:13:e6:e6:ea:bb:7f:af:
fe:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EA:14:5B:8C:39:C2:0D:0F:F0:39:95:4D:6E:6F:A0:8E:74:C8:77
X509v3 Authority Key Identifier:
keyid:E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/48A838F4F93111ECBE9EE388F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ed50::/32
Signature Algorithm: sha256WithRSAEncryption
60:3a:29:b4:c8:ba:77:f8:87:d5:a8:c6:5c:0e:7a:32:1d:21:
e0:10:0b:bf:b6:4f:20:32:ef:d2:db:9b:50:0d:3b:47:b1:9f:
18:2f:c5:08:60:37:80:37:fc:33:ba:3e:1f:5f:d9:4c:ae:af:
cc:c8:94:92:55:79:bf:a6:e9:ac:8e:a5:83:a8:f0:61:7e:da:
5b:f6:cb:71:a0:d8:b7:31:5e:7b:25:7b:d7:b9:45:30:db:e8:
10:80:b4:91:20:29:51:c7:f7:21:07:1b:8c:92:85:39:31:4f:
55:a6:50:91:dc:6a:ac:22:e5:e5:33:ce:cd:e3:46:31:61:12:
1b:31:1e:e0:7a:37:73:7d:8f:28:cd:30:e2:8b:fd:d3:97:4c:
87:3d:61:3d:74:40:0b:d1:39:27:56:ad:4d:70:83:08:40:b2:
6b:4e:e3:02:f8:37:6a:71:1e:57:80:88:53:14:2b:63:8d:54:
2b:6a:5a:02:82:cd:90:9b:0b:86:95:3a:bc:27:33:0f:c7:9e:
37:8d:23:f8:e4:d6:06:99:ff:9a:11:6d:5e:2b:30:5b:62:d0:
16:82:28:40:15:da:8a:99:fc:d9:3f:c6:77:01:68:2a:ee:f9:
34:fd:39:89:f1:51:c8:00:b6:c2:a6:be:e1:6d:3c:d6:cd:0e:
9a:f0:3c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:14 2025 by rpki-client