Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/C777AB6A1BE011EE8B3D9A104AD9E6FC.roa
File: C777AB6A1BE011EE8B3D9A104AD9E6FC.roa (raw, json)
Hash identifier: M88X2jdyy4MWGJBi1OuaTPddU3HAV9pHHXGk0//MBTw=
Subject key identifier: C5:8E:59:FF:77:D2:2F:16:18:A1:D5:48:FC:BA:41:77:59:E9:8B:0C
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 1A
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/C777AB6A1BE011EE8B3D9A104AD9E6FC.roa
Signing time: Thu 06 Jul 2023 09:37:53 +0000
ROA not before: Thu 06 Jul 2023 09:37:49 +0000
ROA not after: Wed 06 Jul 2033 09:37:49 +0000
asID: 37105
IP address blocks: 196.46.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF
Validity
Not Before: Jul 6 09:37:49 2023 GMT
Not After : Jul 6 09:37:49 2033 GMT
Subject: CN=64a68b71-e708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:a8:36:ed:9c:25:0f:57:29:dc:0d:9a:1d:
3b:9f:40:7e:ed:ea:9e:69:cf:a3:af:66:dc:81:52:
18:67:00:b7:28:03:1a:65:dd:4d:e0:5a:02:3f:eb:
12:d7:86:09:b6:69:79:cd:de:dc:6c:97:08:e2:7f:
8d:91:09:08:2e:d3:46:9e:9d:b3:03:9a:16:d2:7f:
98:0e:72:01:92:5e:eb:ba:1e:3b:65:fa:57:fa:d2:
89:ef:46:53:b5:d4:60:8d:61:5b:f0:63:60:b0:ab:
a7:7b:47:a7:2e:87:b1:f2:78:ac:13:93:94:23:80:
e5:10:da:db:57:bc:70:fe:24:d1:c5:4f:c8:7d:14:
10:c3:91:5c:49:7f:9e:ba:38:d0:55:78:e1:82:0a:
13:b5:18:2e:66:4b:f2:41:56:fe:56:33:cf:52:15:
67:45:e2:32:76:8e:5f:ae:5f:f6:ae:66:0a:24:36:
30:1a:d2:ed:f5:af:d9:2b:a1:9c:75:cf:17:08:de:
78:c8:4e:bb:d9:11:5a:04:83:09:08:19:71:bd:df:
8c:a1:3c:72:f6:b1:ee:8d:94:48:0b:bd:0c:4f:a1:
83:f4:d3:a4:0b:de:99:d2:8c:7a:fe:60:e8:f4:4c:
dd:65:dd:40:ef:fd:0a:3f:c1:2f:53:76:8a:68:12:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8E:59:FF:77:D2:2F:16:18:A1:D5:48:FC:BA:41:77:59:E9:8B:0C
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/C777AB6A1BE011EE8B3D9A104AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.46.64.0/21
Signature Algorithm: sha256WithRSAEncryption
02:56:94:25:68:c2:78:b4:8f:75:ac:b5:17:d9:77:3b:b6:a8:
bf:f1:4d:38:2f:88:83:2d:4d:b3:2f:fe:a4:79:f6:9f:2e:fe:
df:78:43:71:dc:1c:2b:d1:68:23:71:5e:dd:45:fb:d6:e5:02:
3b:18:5b:18:a9:0d:ed:a5:52:43:71:0f:de:ec:e3:ff:cf:7e:
56:0a:24:5f:cd:6a:3a:e0:66:cf:d8:9c:55:d3:cd:8c:93:a1:
3a:b3:26:e4:0e:50:e6:9b:b5:a0:d6:fc:01:3d:06:b8:c8:7b:
c5:33:d3:96:e1:d7:ca:54:39:3b:eb:12:eb:d9:c1:c3:79:80:
01:90:28:17:d5:4a:dd:89:cf:b7:6a:9e:88:27:ee:b8:68:e5:
6a:2f:4b:8b:3e:61:e9:b3:6e:88:2e:6a:3c:37:d6:e6:7f:e6:
62:64:72:73:ce:1b:05:e2:52:e9:2c:0e:f4:03:c7:b0:d5:87:
f3:28:33:48:2f:9c:9c:0b:23:0e:43:9f:4c:c9:26:d9:27:e3:
38:de:9f:85:83:91:27:a0:35:31:32:06:7f:5a:5a:aa:28:8a:
58:00:4c:f4:73:7c:7a:f7:a8:8a:33:d8:4f:04:94:d9:ff:88:
c6:96:f6:aa:6e:21:8f:69:69:43:ae:1b:45:7c:f7:de:25:29:
89:93:10:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:59 2025 by rpki-client