Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/711371DA1BE211EE89B864154AD9E6FC.roa
File: 711371DA1BE211EE89B864154AD9E6FC.roa (raw, json)
Hash identifier: xVQ4Gf/sZ/PIVR9KKFLctE0KF9o/4qnRp8g6jHLZ+CA=
Subject key identifier: 36:EA:F0:FA:73:D2:B6:A7:49:29:21:3B:C9:E3:BC:25:9D:4E:95:20
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 1E
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/711371DA1BE211EE89B864154AD9E6FC.roa
Signing time: Thu 06 Jul 2023 09:49:47 +0000
ROA not before: Thu 06 Jul 2023 09:49:43 +0000
ROA not after: Wed 06 Jul 2033 09:49:43 +0000
asID: 37105
IP address blocks: 197.184.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF
Validity
Not Before: Jul 6 09:49:43 2023 GMT
Not After : Jul 6 09:49:43 2033 GMT
Subject: CN=64a68e3b-1dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:14:42:83:03:e9:f4:bf:95:30:c7:16:55:
36:38:5f:08:7e:93:1b:c4:34:3c:fd:5d:a7:c8:08:
73:51:42:9c:95:eb:5c:c2:11:77:9a:d9:e5:4b:98:
ca:4c:09:c2:df:7b:e9:d9:aa:9e:5e:03:14:ba:f2:
2e:ae:da:69:08:db:d7:0b:6c:01:3d:70:d1:97:b5:
de:1c:1f:3c:e8:ed:c4:f2:ab:a2:d4:b3:e3:52:ee:
5b:f4:70:16:60:e1:03:70:e1:09:2d:6d:3b:89:b3:
74:d9:80:e4:67:58:f0:d2:49:a2:5e:b1:35:b7:95:
53:b4:65:09:dc:c5:25:c4:c0:45:2b:20:1a:31:6c:
dc:e2:60:7c:95:9a:35:88:b8:eb:55:e8:53:dd:0a:
1c:ca:46:0e:1b:ac:b1:d0:7f:6a:eb:cb:92:af:9a:
97:76:3b:d4:bf:77:d3:5f:51:a9:ab:d4:90:d2:77:
46:c2:15:01:d3:9b:c1:5c:6a:ed:b8:03:f0:c9:9b:
9e:38:56:6c:f8:49:93:ce:85:ea:af:e6:fb:2f:23:
ca:2a:27:16:f2:2b:04:98:09:75:56:4c:b9:10:ce:
7c:1c:20:6a:b0:f9:6e:e5:2c:70:66:4f:09:c7:b0:
8e:a6:12:72:13:41:0b:0e:72:32:50:6a:63:50:7a:
f8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EA:F0:FA:73:D2:B6:A7:49:29:21:3B:C9:E3:BC:25:9D:4E:95:20
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/711371DA1BE211EE89B864154AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.184.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0c:01:bd:82:bc:5b:03:7c:75:91:da:69:c4:a5:27:38:01:f1:
d6:8b:a7:c7:35:1a:ea:e1:75:0f:74:8c:e0:4d:12:6d:78:4e:
75:be:06:f9:a0:64:00:9b:02:db:7e:74:0c:2d:f0:59:d9:dc:
56:0a:38:be:ee:85:2b:75:67:c4:1d:9a:43:76:d9:36:dd:8c:
96:53:97:6a:0e:20:f5:6f:09:4d:51:8f:13:76:b3:a5:29:36:
46:3a:c0:95:4f:88:09:d9:a7:ac:1a:cf:d7:78:ee:55:1c:0a:
c0:ab:f1:29:1d:38:01:50:4f:30:a2:a2:be:be:ed:6e:6d:f3:
63:6b:da:64:ac:d2:72:ec:39:15:60:9b:ec:6c:61:3d:4d:0d:
b0:c9:c9:7a:06:ea:94:d4:81:8a:f5:a5:f9:b0:b2:16:36:2f:
53:01:a1:fb:5b:c9:d5:1a:73:28:7f:92:64:bb:67:63:51:fd:
55:c0:4d:ab:88:74:5b:f6:0e:17:c5:4f:ca:2b:fb:1d:9b:e0:
1d:4c:ff:71:ae:9d:db:09:30:73:3e:1f:09:b5:c2:20:0c:32:
ea:8d:a9:37:31:ef:fb:00:bc:ee:7c:f4:bf:f2:c5:51:a1:df:
59:72:d7:7c:bc:bb:55:16:b5:27:e5:b1:27:50:de:b8:76:a0:
9f:d0:77:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:41 2025 by rpki-client