Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/4A7830A0D18B11EFAB9E6B88762E951A.roa
File: 4A7830A0D18B11EFAB9E6B88762E951A.roa (raw, json)
Hash identifier: xV745XWxYsFhNII926E/fN4gSuSPSdyN3viLNfdZy9M=
Subject key identifier: 7E:84:F1:3C:71:87:E5:35:02:DA:76:F0:C2:78:C7:BE:07:C7:45:D1
Certificate issuer: /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial: 02BF
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/4A7830A0D18B11EFAB9E6B88762E951A.roa
Signing time: Mon 13 Jan 2025 08:49:25 +0000
ROA not before: Mon 13 Jan 2025 08:49:21 +0000
ROA not after: Sat 13 Jan 2035 08:49:21 +0000
asID: 30986
IP address blocks: 2c0f:f7c0:2000::/48 maxlen: 64
2c0f:f7c0:3000::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703 (0x2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3681ED0AF
Validity
Not Before: Jan 13 08:49:21 2025 GMT
Not After : Jan 13 08:49:21 2035 GMT
Subject: CN=6784d395-36f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:75:a6:c8:ce:fd:8b:b9:84:43:92:68:39:
2d:60:6d:32:c8:21:37:d9:fd:a3:36:e6:80:c8:86:
25:cf:5b:6a:1a:ff:80:09:47:34:dc:60:5d:7d:23:
b8:f2:26:05:9d:da:3a:8a:ac:2c:01:46:f8:6e:73:
6e:e8:44:60:49:d2:57:24:00:19:a4:ed:24:0c:e3:
4a:53:70:6f:c7:85:81:34:60:4b:9c:8b:05:c9:5f:
2c:91:f6:86:01:75:41:fd:66:b8:63:fb:18:b8:e6:
cf:5c:b0:69:70:c8:af:fd:47:c9:f5:0e:2b:7d:d4:
80:1c:84:e3:ed:f8:ad:65:16:4c:2a:72:c5:c0:33:
04:a2:ab:fa:9a:1a:af:08:32:7d:d2:77:20:cc:61:
a2:29:3d:18:8f:84:42:de:93:93:bf:50:7b:ed:46:
f8:83:a9:86:af:b4:94:60:d9:8f:d3:69:98:71:ea:
ca:07:d6:ac:9c:7e:79:23:f5:fd:eb:7d:e2:fe:eb:
66:1f:b8:cd:44:01:27:2e:58:aa:2d:22:c9:1f:49:
07:ae:f7:5a:57:83:f9:db:cb:7e:38:c3:d7:f1:29:
cd:88:cb:11:63:32:29:dd:62:64:fb:07:7a:8c:e4:
04:14:fc:fd:2f:15:1d:5e:12:b2:be:ff:e4:37:c5:
b5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:84:F1:3C:71:87:E5:35:02:DA:76:F0:C2:78:C7:BE:07:C7:45:D1
X509v3 Authority Key Identifier:
keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/4A7830A0D18B11EFAB9E6B88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f7c0:2000::/48
2c0f:f7c0:3000::/48
Signature Algorithm: sha256WithRSAEncryption
97:7d:41:05:3c:c7:c3:1d:f9:cf:9d:d8:ac:22:c7:f2:6c:b1:
83:5c:b2:3f:c4:84:f8:a7:0e:e2:5c:6a:62:2c:24:4c:c0:2b:
e9:c3:88:1e:18:34:f4:05:f1:df:3e:d3:9c:4e:3b:4b:64:0e:
53:d2:5e:82:d1:fc:6c:0d:ef:3c:b2:eb:cb:eb:95:ae:ce:fb:
6b:fc:f3:22:9d:3c:a2:0c:9b:25:79:77:56:ff:cc:1e:c9:27:
5a:c0:10:cc:ed:13:06:cf:fc:a0:d4:b8:44:cb:b4:26:c7:37:
9c:3b:26:1b:bd:13:11:78:06:59:92:fa:4d:bb:1b:50:2f:81:
cc:34:cd:2b:40:fb:04:08:6b:a2:9b:2e:61:72:a2:6b:78:9f:
08:c7:95:94:48:12:60:aa:da:ef:23:1b:49:1c:86:93:37:32:
c2:a4:09:f1:38:af:c2:d5:5d:7a:6a:a4:79:92:1b:09:64:50:
44:7f:44:3b:7e:ea:e0:db:3c:8e:01:d2:f6:99:2e:b3:03:9c:
55:72:26:fb:6a:78:3c:d4:58:7d:65:d6:45:57:7d:27:e7:08:
c8:4f:d9:8b:7d:b2:d0:f2:4d:46:71:33:21:d3:2b:91:80:5c:
27:a9:97:99:44:a0:05:48:42:de:f7:2d:c0:96:16:cd:82:8a:
1e:4a:d6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:27 2025 by rpki-client