Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/D6A353C23E9A11EFB1A9DA58762E951A.roa
File: D6A353C23E9A11EFB1A9DA58762E951A.roa (raw, json)
Hash identifier: zjYceRZMdmdc00axCHCL+H4eSNFidEdxSp7wrfGOu8g=
Subject key identifier: B8:97:FA:9A:B5:82:56:19:80:86:11:48:C2:9E:20:AE:C1:FF:77:FA
Certificate issuer: /CN=F364C81DAF/serialNumber=BCCE86D612D43F841AB0416EC5A884070F5CE5D6
Certificate serial: 078B
Authority key identifier: BC:CE:86:D6:12:D4:3F:84:1A:B0:41:6E:C5:A8:84:07:0F:5C:E5:D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/D6A353C23E9A11EFB1A9DA58762E951A.roa
Signing time: Wed 10 Jul 2024 09:00:22 +0000
ROA not before: Wed 10 Jul 2024 09:00:18 +0000
ROA not after: Thu 01 Jan 2026 09:00:18 +0000
asID: 327822
IP address blocks: 2c0f:ed70::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1931 (0x78b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364C81DAF
Validity
Not Before: Jul 10 09:00:18 2024 GMT
Not After : Jan 1 09:00:18 2026 GMT
Subject: CN=668e4da6-624c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:20:ee:96:3d:60:a2:a5:30:15:48:8f:ca:
5c:ba:23:3a:a2:ee:4e:1a:25:9a:2d:f8:95:df:38:
74:3a:b9:08:76:da:67:f6:31:e6:24:6d:a4:ef:9c:
3e:26:a9:8b:0c:c3:96:d7:bf:cb:2c:85:6a:c8:53:
54:42:9d:75:26:c1:0b:4e:88:1a:79:b9:36:92:e1:
f4:ae:a8:ad:57:d4:e3:39:d0:0c:03:e6:a6:7e:c1:
0b:65:d4:fa:fb:0e:06:9a:bc:17:04:5f:d5:63:bd:
c9:5f:5c:d5:9a:df:d0:81:02:7b:b7:12:12:8e:a9:
c0:17:6b:e2:fc:41:e1:df:8b:fd:a6:59:cc:2b:0e:
f4:1f:ba:b3:7a:2f:1c:66:56:23:c1:3f:c5:f0:0b:
99:7a:ce:95:34:f6:12:51:f5:f4:82:11:2f:1e:dd:
6b:45:e7:3d:f3:2f:da:30:5f:36:3d:9f:7e:c5:0d:
60:ae:79:d3:22:1d:19:dc:3a:c5:13:15:d2:af:85:
50:3e:41:c3:00:0a:51:48:a3:a4:67:38:35:55:52:
08:2f:55:e8:7d:36:d8:e8:94:f2:98:a8:28:2e:76:
2f:12:9f:60:46:7a:e5:fb:c8:08:6c:97:bc:32:fa:
78:56:49:b1:9c:72:b8:1d:20:e1:0a:b1:74:76:ee:
9b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:97:FA:9A:B5:82:56:19:80:86:11:48:C2:9E:20:AE:C1:FF:77:FA
X509v3 Authority Key Identifier:
keyid:BC:CE:86:D6:12:D4:3F:84:1A:B0:41:6E:C5:A8:84:07:0F:5C:E5:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/D6A353C23E9A11EFB1A9DA58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ed70::/32
Signature Algorithm: sha256WithRSAEncryption
6c:21:4c:f1:a4:4a:ac:a6:c4:37:ea:e0:39:03:f5:10:a3:dc:
3b:85:4b:ac:d9:26:f4:ca:f9:f7:4a:40:6b:46:8b:38:fa:1f:
3b:3b:9f:32:8f:33:d6:f5:4c:ab:6f:42:df:22:6f:71:51:a3:
b9:0a:4d:01:ce:51:0e:2a:e4:26:ff:c2:7e:97:e3:9e:80:e3:
5e:8c:04:63:49:cd:ea:33:be:08:73:51:be:c1:55:48:4d:08:
27:80:b3:67:79:99:99:a4:eb:8f:57:5d:99:38:09:03:24:bf:
79:f0:c5:d2:a9:e0:db:13:d3:e0:b4:fc:73:79:80:c6:7f:a7:
66:db:63:32:4f:df:4c:ad:e8:49:34:01:ec:69:9c:f3:62:41:
c7:e0:f5:50:7d:b3:d1:ac:1b:95:d0:35:94:5e:2f:8b:22:60:
8b:99:1a:a0:02:52:28:1d:86:b1:6d:7a:e9:1f:79:88:bb:70:
b9:a6:ba:69:5c:be:b9:90:e6:6d:b1:98:e8:b9:93:c2:69:f5:
ca:f3:35:1f:e0:d5:93:b2:a8:0e:bc:79:9c:f2:45:11:e0:32:
6c:04:e4:af:3a:5e:a9:af:71:61:af:53:1d:f2:7d:76:02:98:
fc:0b:0a:20:c8:21:62:cf:3b:7c:3b:95:3b:33:16:01:af:73:
69:5c:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:25 2025 by rpki-client