Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/7310750E1BE311EEA14875184AD9E6FC.roa
File: 7310750E1BE311EEA14875184AD9E6FC.roa (raw, json)
Hash identifier: oJkMc8YzKxAeuUiq9eb317abiKE1KRSdxJ8LQNtrQeo=
Subject key identifier: DA:0C:3C:E4:77:62:CF:B0:1A:A5:DC:62:86:DA:B4:6B:D5:D7:6C:59
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 24
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/7310750E1BE311EEA14875184AD9E6FC.roa
Signing time: Thu 06 Jul 2023 09:57:00 +0000
ROA not before: Thu 06 Jul 2023 09:56:56 +0000
ROA not after: Wed 06 Jul 2033 09:56:56 +0000
asID: 37105
IP address blocks: 2c0f:ffd8::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF
Validity
Not Before: Jul 6 09:56:56 2023 GMT
Not After : Jul 6 09:56:56 2033 GMT
Subject: CN=64a68fec-0085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:be:95:b3:66:da:69:6f:74:d2:47:b2:9e:
cc:5d:80:5f:dd:a6:aa:7f:59:07:f1:df:00:1e:af:
e4:0a:9b:de:29:91:0b:40:11:85:38:18:7d:17:3f:
ba:12:fe:c6:64:fb:13:29:ff:7a:10:f4:f3:b9:7f:
d4:3c:9f:08:45:4c:28:85:83:2a:a3:f1:db:c5:c4:
85:4c:0c:97:9e:9e:31:1e:f6:5f:2d:03:ad:a1:ac:
de:54:29:0b:0d:7d:8f:78:08:b9:15:21:3c:de:6d:
9a:c7:98:93:4e:6c:7c:4d:01:75:0f:92:c2:15:c0:
62:d6:6b:ef:89:83:35:c6:1d:46:6a:60:cd:a0:55:
36:b4:b3:30:96:0d:7c:a2:4f:9a:75:10:b1:40:1c:
0e:80:7f:f1:6c:88:13:e9:f4:5f:02:ec:e8:8b:71:
e9:a8:e7:07:67:ac:ae:3b:43:cd:f1:4e:80:f1:ff:
03:6d:36:ad:58:6d:9b:4a:cb:2a:48:61:a1:70:9c:
e1:80:1c:e7:be:dd:8f:9f:2f:39:a1:19:22:a3:bf:
6d:26:83:66:ef:df:57:ce:6d:13:8d:8b:0a:5d:c8:
3c:8d:8d:c9:c0:88:aa:d5:88:b9:14:b3:62:d9:dc:
1e:9b:4d:76:cc:81:3a:26:c4:19:6e:7f:5d:e8:3c:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0C:3C:E4:77:62:CF:B0:1A:A5:DC:62:86:DA:B4:6B:D5:D7:6C:59
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/7310750E1BE311EEA14875184AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ffd8::/32
Signature Algorithm: sha256WithRSAEncryption
4d:cb:2a:da:27:3c:2c:c9:10:4a:30:f5:6c:c5:41:ff:b3:76:
06:34:2a:d7:6d:1c:60:8f:bb:22:be:61:0c:12:5c:19:06:f2:
a3:47:f3:39:1a:96:0c:d2:ff:63:7f:cd:26:1a:0c:4b:f7:57:
7b:bd:74:52:e0:e5:62:d8:57:c6:03:a7:82:07:c4:d4:fc:d1:
bd:51:29:5f:f5:eb:f7:51:88:6b:57:3f:f5:c4:09:93:26:c5:
0a:f2:fb:75:74:48:da:b1:ad:5f:a5:a2:9f:09:12:ff:2e:82:
2f:ff:73:45:10:1a:53:41:12:d4:bb:18:cd:0d:aa:9b:bc:ac:
58:36:e9:e6:d6:c6:34:95:d5:ef:b0:63:15:31:5b:c4:12:52:
84:46:50:70:4c:f4:94:49:c3:a6:7a:80:9e:b4:1b:77:9f:c1:
18:fa:6f:ff:2c:ee:c4:18:cf:ff:4c:7f:1b:d7:a9:c8:3c:a5:
90:6e:21:6e:1f:17:b3:f0:02:b7:f0:97:8f:be:2e:86:8d:c1:
4f:2d:e9:a6:da:fa:b2:de:21:f7:41:20:54:23:0a:a0:c6:f4:
93:66:01:8c:fb:57:a3:a7:f5:66:08:77:fe:8a:65:5d:2a:9f:
de:14:37:2a:50:7b:7f:5d:08:62:4c:30:e9:dd:72:59:8c:27:
5d:e5:cf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:47 2025 by rpki-client