Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/2E2B725AEEF411EFBCFA6F43762E951A.roa
File: 2E2B725AEEF411EFBCFA6F43762E951A.roa (raw, json)
Hash identifier: pbm0HU0V1QcdM+FCx6QyJP3O4fULzd1SgmZHd7KGnyo=
Subject key identifier: 6D:70:5E:A9:3D:3B:D4:B2:1E:4B:8E:61:09:6C:DD:7D:72:6A:88:CE
Certificate issuer: /CN=F3690C51AF/serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
Certificate serial: 63
Authority key identifier: 33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/2E2B725AEEF411EFBCFA6F43762E951A.roa
Signing time: Wed 19 Feb 2025 19:03:19 +0000
ROA not before: Wed 19 Feb 2025 19:03:13 +0000
ROA not after: Tue 28 Feb 2045 19:03:13 +0000
asID: 328045
IP address blocks: 2c0f:f448::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3690C51AF
Validity
Not Before: Feb 19 19:03:13 2025 GMT
Not After : Feb 28 19:03:13 2045 GMT
Subject: CN=67b62af6-ad68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2e:3d:a6:e1:5c:39:69:b9:49:de:7b:48:fc:
9f:8c:27:d0:99:f8:ce:07:a1:e7:26:7b:75:71:9b:
f3:0b:28:a2:5a:28:c9:78:c2:38:df:60:be:06:97:
f3:71:49:aa:9f:13:fc:24:73:bd:ab:8e:a8:4d:10:
9d:9b:67:fe:f9:93:19:cd:64:14:9e:91:aa:70:b3:
a0:45:71:79:b7:54:2f:b5:83:99:2e:ff:9c:26:0e:
ee:27:8a:8c:a6:35:96:f9:0f:24:43:4d:e5:d0:09:
fe:6e:0c:02:24:ff:6f:50:7e:c2:18:4b:50:90:4b:
1c:f5:55:4d:b5:fa:b1:b0:ba:7c:46:02:70:28:3a:
d1:d7:96:1e:f0:b3:f7:d6:74:f6:c4:ae:ab:de:31:
13:5c:20:10:e2:79:ef:3d:e6:2e:be:90:63:b3:c0:
1a:35:cc:a8:14:f4:56:53:cf:6a:33:0b:5c:ed:6c:
27:47:db:03:d7:5c:0b:09:3a:62:46:64:0c:74:5b:
69:08:49:58:3a:da:b6:73:49:98:44:12:69:e8:9c:
21:a7:d2:44:a2:54:91:6a:73:88:57:e2:fb:54:4a:
26:63:3e:91:81:90:67:18:a3:c2:ab:2c:1b:9b:ce:
7e:08:af:50:da:fb:96:c6:ef:64:0e:da:6a:06:18:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:70:5E:A9:3D:3B:D4:B2:1E:4B:8E:61:09:6C:DD:7D:72:6A:88:CE
X509v3 Authority Key Identifier:
keyid:33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/2E2B725AEEF411EFBCFA6F43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f448::/32
Signature Algorithm: sha256WithRSAEncryption
7b:49:67:02:da:d2:4e:08:6e:1d:a5:7e:b9:b0:a0:d2:df:c1:
ec:5a:31:15:c9:c5:00:6f:f7:fc:80:99:d5:ca:84:d4:f5:e8:
68:f3:cb:e5:0b:7e:af:15:fb:0b:cf:8f:40:8f:b5:46:8d:10:
62:c1:97:5f:f4:03:30:03:33:44:b9:6e:9f:ab:25:4f:ae:f2:
7a:28:b8:98:15:0c:7d:f2:ae:d8:4f:cc:cc:8e:2e:29:76:df:
e9:97:e2:9c:b4:22:32:97:40:72:b3:80:99:13:88:cc:81:bd:
46:8e:86:73:a2:a1:a8:a6:ba:ac:b0:e9:53:9b:24:b2:bb:31:
84:ff:cc:91:73:de:4b:d1:00:f5:7d:e5:23:93:37:07:c4:ff:
b5:f9:23:d0:3f:4f:96:1f:9f:f9:1f:a7:5a:81:c8:89:37:31:
4c:4f:97:98:d8:77:06:8c:63:c4:3d:b6:31:ad:e8:e7:fe:56:
8e:c7:89:66:ef:92:12:9a:97:f5:3d:9b:bc:b4:0c:73:28:8e:
cd:8d:aa:77:ba:1b:48:39:fc:c9:91:ea:a8:e3:0e:b0:30:e1:
ab:9f:c2:4e:59:0a:30:7d:86:60:3d:58:37:a8:19:87:c8:0e:
8c:89:d8:72:de:51:bc:fa:15:28:95:db:7d:9d:fe:01:25:1d:
5f:2a:7f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:31 2025 by rpki-client