Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/1E76759CB6E311EFB3CF7A44762E951A.roa
File: 1E76759CB6E311EFB3CF7A44762E951A.roa (raw, json)
Hash identifier: W/c0Kk3I+J2yYg1lYlt6Jh0twnCYr8+m8FqL7jZfB8o=
Subject key identifier: 1F:A9:12:31:58:A7:ED:3C:6D:CA:8D:38:21:69:81:AF:FE:37:DB:F0
Certificate issuer: /CN=F36580B0AF/serialNumber=8361D5A6D0F3D49C6760C0EA686C67C4149DD6DF
Certificate serial: 01F2
Authority key identifier: 83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/1E76759CB6E311EFB3CF7A44762E951A.roa
Signing time: Tue 10 Dec 2024 10:40:06 +0000
ROA not before: Tue 10 Dec 2024 10:40:02 +0000
ROA not after: Sun 10 Dec 2034 10:40:02 +0000
asID: 327992
IP address blocks: 2c0f:eea0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36580B0AF
Validity
Not Before: Dec 10 10:40:02 2024 GMT
Not After : Dec 10 10:40:02 2034 GMT
Subject: CN=67581a86-3765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:e1:35:43:d7:ce:3b:3b:64:0c:80:1c:52:
aa:07:5d:17:ae:fc:86:da:fa:e0:23:6a:a8:01:3d:
1b:01:99:8d:78:e2:d6:7b:9a:1b:61:e3:a5:b7:23:
bc:a2:66:d8:cd:71:bb:45:d0:b4:4f:f2:c2:7f:0c:
31:32:2b:bc:65:f6:3e:1e:18:da:11:15:2f:fd:f3:
b7:d1:18:c5:51:53:1e:55:37:6c:df:ee:b0:0f:9d:
b3:f6:0a:63:a2:d3:14:6f:53:1b:f2:91:ec:b5:35:
7b:cd:4a:cd:68:67:59:47:53:2c:fe:2e:4f:79:01:
08:c5:b5:05:ad:cd:64:97:e0:40:4b:39:f0:53:dc:
4d:1d:e3:26:49:9a:b4:71:59:10:c4:f5:12:64:84:
f7:77:ab:e1:99:a5:1e:3d:9a:e7:5f:1c:5b:c0:f7:
2c:60:73:3f:f7:2a:ec:42:8f:31:0b:fb:dc:b5:1b:
f1:2d:8e:bb:c9:0c:46:a4:2f:63:35:5f:c6:1a:2b:
53:f5:2e:9f:5e:31:a1:82:e8:4b:ea:aa:b8:0d:fe:
28:bf:94:e8:76:71:7b:5e:86:10:3b:74:3b:92:7a:
3c:37:ae:7b:ab:61:fb:86:a7:25:90:35:85:47:c0:
94:d2:77:8a:3a:a8:ad:b2:7a:10:0f:03:ad:44:0a:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A9:12:31:58:A7:ED:3C:6D:CA:8D:38:21:69:81:AF:FE:37:DB:F0
X509v3 Authority Key Identifier:
keyid:83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/1E76759CB6E311EFB3CF7A44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:eea0::/48
Signature Algorithm: sha256WithRSAEncryption
a0:13:59:f8:c4:7a:f1:7e:10:25:dc:ea:5f:e1:39:36:c0:e7:
d5:9c:b6:f5:16:0c:a7:96:91:e1:75:7e:d0:5b:cb:92:e0:56:
65:0d:8a:0b:1f:12:bc:4b:94:96:f6:37:6b:05:4b:c1:77:40:
74:c2:1f:46:0c:7b:45:03:7e:de:c2:92:aa:69:d7:33:fc:e1:
ad:7e:28:f1:db:fa:d6:44:65:cc:0b:82:3d:9c:73:ab:48:54:
94:41:d1:19:2b:d8:9d:05:ed:af:45:1f:68:1c:bd:e5:54:e8:
52:f8:ae:f8:07:31:d7:ab:40:16:a9:27:6d:29:c0:41:81:81:
a2:49:e5:57:46:9f:f4:ca:ae:40:aa:67:29:ca:31:96:58:ef:
91:2e:91:52:2f:8b:5b:ac:f9:3a:8e:df:df:9b:f6:dd:a8:ad:
9d:65:24:07:b7:33:a1:c9:a3:6c:47:78:b2:f3:8d:9f:e1:b3:
e0:52:56:ee:7d:6c:7c:ca:16:85:87:ea:c4:f1:30:ee:62:4e:
b0:56:05:5f:10:c7:8b:ec:e3:92:66:f3:34:c7:e9:fd:e4:ed:
0b:37:25:98:cf:db:08:ba:f1:d1:ff:bf:44:4c:3a:a6:69:b2:
74:a1:e5:f1:c6:2c:bf:a7:7a:40:3a:ef:3f:cc:3f:10:14:9e:
84:5d:57:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:15 2025 by rpki-client