Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/2CB11612097C11F0B1B609AC762E951A.roa
File: 2CB11612097C11F0B1B609AC762E951A.roa (raw, json)
Hash identifier: Kwmd09ofIif31S12hSjzL7BsuLgXOAF7knYqTDHIeU8=
Subject key identifier: 53:DF:6C:21:DA:CA:D0:C2:EC:BD:FF:8A:4B:82:38:E8:1A:5D:11:BF
Certificate issuer: /CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Certificate serial: 0185
Authority key identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/2CB11612097C11F0B1B609AC762E951A.roa
Signing time: Tue 25 Mar 2025 13:22:18 +0000
ROA not before: Tue 25 Mar 2025 13:22:14 +0000
ROA not after: Mon 25 Mar 2030 13:22:14 +0000
asID: 329371
IP address blocks: 2c0f:ac0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3679680AF
Validity
Not Before: Mar 25 13:22:14 2025 GMT
Not After : Mar 25 13:22:14 2030 GMT
Subject: CN=67e2ae0a-8625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:5f:e1:dc:cb:a4:c9:ee:ff:77:3f:48:43:
eb:0b:f0:50:ac:f6:49:39:49:2b:1f:fa:63:58:a1:
a1:da:65:35:89:3d:e1:6a:cc:f2:48:f6:5c:f8:5b:
7c:4f:d1:f8:64:94:11:82:fe:eb:25:12:33:75:02:
6c:62:f6:3f:c3:18:18:37:03:2d:21:41:21:c3:bc:
ac:97:19:69:56:2e:3e:1e:32:81:9a:40:aa:8c:13:
6d:83:2c:5b:fe:64:85:53:e7:b2:8a:9c:d6:3e:b9:
9d:a0:3b:63:1d:21:d5:50:b7:6e:8b:73:8f:4e:50:
44:4f:1d:be:58:7f:b7:b7:1f:bd:02:13:87:ff:85:
7f:2c:12:d5:d9:2e:ee:9b:b9:bd:da:88:78:33:3d:
03:93:19:97:e0:37:0b:d7:cd:2a:12:aa:94:df:4b:
ca:cb:02:fb:71:1a:1e:40:aa:27:63:6f:fa:6a:d8:
ec:20:b0:04:9f:28:d5:21:6a:3b:7d:f0:06:f5:d3:
c3:6e:61:1b:60:25:4e:aa:41:ea:cc:fd:19:04:b3:
2f:f5:99:fc:2e:89:04:a1:6e:c7:42:2e:bc:b1:7b:
79:83:2b:31:cd:ea:2b:d7:10:5c:7c:f0:44:7d:ff:
59:c5:da:43:44:92:8a:31:0a:df:19:cb:e5:5d:89:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DF:6C:21:DA:CA:D0:C2:EC:BD:FF:8A:4B:82:38:E8:1A:5D:11:BF
X509v3 Authority Key Identifier:
keyid:BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/2CB11612097C11F0B1B609AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ac0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:ea:29:3f:4b:39:f0:aa:14:36:59:dd:17:19:dc:7f:48:59:
c7:39:cd:00:14:2f:a6:80:6d:46:02:40:c6:87:81:71:48:d0:
1d:01:1b:ff:6e:ab:11:12:7a:02:66:7e:aa:86:fa:d7:d1:af:
4a:73:88:ab:8f:a8:92:5c:75:67:34:c3:52:3a:b0:84:d1:04:
3d:4b:03:d5:07:72:7f:5b:3b:22:c2:ad:25:9f:da:a4:68:a8:
53:d0:a7:71:71:7f:57:6a:68:51:82:e3:6a:16:b6:bb:6f:09:
2e:63:e9:cb:68:dc:0c:cb:77:bd:01:4a:76:9d:a8:9f:66:ef:
58:1a:50:45:59:0a:78:5f:fb:bc:54:86:83:b5:6a:aa:7a:c8:
d3:71:de:4d:93:08:87:d4:52:be:8a:12:ba:23:ee:04:77:11:
26:9f:36:1a:a9:21:3f:61:c4:5b:2d:56:61:ea:bd:60:e9:55:
0b:f1:d4:1e:41:ff:11:af:c1:53:47:f7:e3:b5:9d:55:ff:51:
45:d0:45:28:bc:e3:2a:ab:a8:ad:85:29:86:ed:fa:0e:d4:62:
6a:de:b4:ae:54:5a:61:0f:d5:20:89:f1:72:2f:9e:ff:24:94:
bb:57:41:ed:56:66:ac:3a:df:8e:73:b6:ff:5d:0d:2e:ed:06:
8d:63:29:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:15:47 2025 by rpki-client