Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A53F0/951D16EC08B411EBB42C9282F8AEA228/8C2BFF80097C11EBB3DAFF51F8AEA228.roa
File: 8C2BFF80097C11EBB3DAFF51F8AEA228.roa (raw, json)
Hash identifier: Ws3yNWZtQGWIrNJ1j+mww2wXwRA0j8Dtn1h14LqyWhU=
Subject key identifier: 94:19:0A:EF:4D:EC:DB:7C:2C:DC:00:0A:F7:E7:13:89:95:9B:F5:4B
Certificate issuer: /CN=F36A53F0AF/serialNumber=D7A3199A8FDE045E9C5F1C63A4FCBEFE488D0A0C
Certificate serial: 06
Authority key identifier: D7:A3:19:9A:8F:DE:04:5E:9C:5F:1C:63:A4:FC:BE:FE:48:8D:0A:0C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/16MZmo_eBF6cXxxjpPy-_kiNCgw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A53F0/951D16EC08B411EBB42C9282F8AEA228/8C2BFF80097C11EBB3DAFF51F8AEA228.roa
Signing time: Thu 08 Oct 2020 15:40:10 +0000
ROA not before: Thu 08 Oct 2020 15:40:05 +0000
ROA not after: Wed 08 Oct 2025 15:40:05 +0000
asID: 36944
IP address blocks: 196.32.208.0/21 maxlen: 24
2001:43f8:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A53F0AF
Validity
Not Before: Oct 8 15:40:05 2020 GMT
Not After : Oct 8 15:40:05 2025 GMT
Subject: CN=5f7f32da-90ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:b5:ed:3e:c4:34:8e:87:1e:e0:ba:14:ec:
7e:6f:7d:cf:bd:e4:53:f9:51:ce:2d:fd:42:73:c4:
67:39:8b:a5:92:87:70:a9:19:92:f4:45:a5:e5:ee:
ee:8a:16:8b:bf:dd:3c:db:e0:77:6e:5f:88:5d:a4:
a0:cf:6b:b3:ac:c9:37:ff:f4:f5:b1:86:90:f2:4e:
d8:d9:02:d3:ef:13:58:36:c4:77:05:ed:a0:2e:5d:
d3:61:14:19:61:be:89:83:bc:c6:e0:8f:15:29:d0:
d5:63:31:b8:08:6c:de:5f:e8:73:e9:96:34:d6:2f:
75:8a:22:29:99:92:6f:f0:d1:0b:38:15:95:f0:06:
6c:35:f4:6d:7f:40:29:0f:47:71:c5:ea:dc:1a:76:
83:2b:13:54:a4:b1:bc:1c:92:2c:40:83:56:9d:7c:
28:23:45:ac:45:69:d8:5d:fb:db:0b:04:54:25:d3:
c7:de:f1:a0:37:f9:56:fc:17:16:d6:c3:33:df:0e:
6e:c8:1c:34:9e:d3:90:b8:97:69:45:13:0b:60:f3:
52:73:2c:e4:11:33:32:db:6f:65:97:24:42:f8:d5:
44:54:f9:4a:e3:10:03:3b:fc:34:f9:bc:7c:6c:fa:
5a:01:63:f2:49:60:55:42:f8:07:66:3f:53:1f:7a:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:19:0A:EF:4D:EC:DB:7C:2C:DC:00:0A:F7:E7:13:89:95:9B:F5:4B
X509v3 Authority Key Identifier:
keyid:D7:A3:19:9A:8F:DE:04:5E:9C:5F:1C:63:A4:FC:BE:FE:48:8D:0A:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A53F0/951D16EC08B411EBB42C9282F8AEA228/16MZmo_eBF6cXxxjpPy-_kiNCgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/16MZmo_eBF6cXxxjpPy-_kiNCgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A53F0/951D16EC08B411EBB42C9282F8AEA228/8C2BFF80097C11EBB3DAFF51F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.32.208.0/21
IPv6:
2001:43f8:20::/48
Signature Algorithm: sha256WithRSAEncryption
1c:dd:95:ba:67:fe:62:4a:d3:33:4e:82:1f:54:28:53:b3:51:
0f:cb:bf:1a:c3:26:54:e3:93:4c:55:d3:6a:04:97:41:cb:72:
25:c9:2e:a6:1a:9e:3d:56:51:f6:a3:54:99:be:40:9c:54:0f:
7f:c3:94:f1:1b:80:ce:5c:e0:df:ee:9c:5d:5d:18:eb:85:38:
1e:cd:f8:b7:b4:df:2c:a7:6a:3b:4e:ed:42:f3:80:4a:0a:7d:
e2:aa:fd:11:6d:ef:60:79:7c:9f:b2:ec:f1:fb:1a:bb:01:d0:
0f:44:82:bf:f3:41:a1:88:ba:a9:7e:08:84:48:b5:95:6f:8d:
7c:a6:e3:9f:9a:ee:4c:a4:54:3f:89:eb:ef:b7:aa:b6:87:cf:
af:6c:ae:20:b3:06:c0:5e:18:1d:f8:17:dd:61:b5:be:3f:eb:
8d:25:b5:c2:85:6d:dd:b9:d4:aa:61:06:ea:8e:e4:13:f8:54:
2e:a3:d0:07:3a:86:bf:6e:8e:f5:cc:b3:1e:b4:e9:da:ec:36:
4c:99:bc:ff:b8:43:24:c8:a1:e6:6f:1a:9a:15:c6:d5:cb:86:
1d:1a:f1:ef:17:98:7f:1b:ba:b1:8e:ae:7d:4f:f7:35:5e:41:
52:c9:07:19:85:e9:87:a5:5c:95:22:88:c9:de:b6:fd:31:07:
15:18:0c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:16 2025 by rpki-client