Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/981DE518DD5F11EFA9C15D7F762E951A.roa
File: 981DE518DD5F11EFA9C15D7F762E951A.roa (raw, json)
Hash identifier: WU63DMCmbQDZq2LBTtRZnwwYc2gn9fKgVZ3QXsL3MLQ=
Subject key identifier: 2A:43:D4:E2:6E:2D:8C:87:9A:AA:1A:0C:DD:FD:49:AA:F2:25:B4:E1
Certificate issuer: /CN=F36C6E82AF/serialNumber=BE9E6AB26887E04D556E850C54A5E7F1324DBD9E
Certificate serial: 046A
Authority key identifier: BE:9E:6A:B2:68:87:E0:4D:55:6E:85:0C:54:A5:E7:F1:32:4D:BD:9E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vp5qsmiH4E1VboUMVKXn8TJNvZ4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/981DE518DD5F11EFA9C15D7F762E951A.roa
Signing time: Tue 28 Jan 2025 10:06:52 +0000
ROA not before: Wed 29 Jan 2025 10:06:48 +0000
ROA not after: Sat 30 Jan 2027 10:06:48 +0000
asID: 37580
IP address blocks: 197.215.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1130 (0x46a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6E82AF
Validity
Not Before: Jan 29 10:06:48 2025 GMT
Not After : Jan 30 10:06:48 2027 GMT
Subject: CN=6798ac3b-6080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a6:bf:1b:cb:f7:29:8b:93:25:10:a8:43:18:
ac:dc:93:52:0f:5d:c0:3f:5b:6c:84:c7:38:61:3b:
c6:f5:4f:1b:4e:c5:66:ca:73:36:21:57:62:69:28:
8d:d8:fc:3a:5c:d3:11:38:b6:f8:97:2c:6d:36:fe:
4b:8c:74:60:01:06:10:43:98:19:32:2f:ec:a1:2d:
80:a7:69:65:a8:06:0f:39:77:1d:8f:d8:0b:ce:45:
9e:d1:5d:0f:44:7a:df:68:89:4a:37:64:ab:af:d7:
f7:ab:62:0d:df:d8:4f:a6:d9:ad:94:f5:59:ae:de:
a4:6a:07:8e:22:ba:73:59:eb:6a:29:7e:81:20:5b:
fd:fb:44:ae:c0:f1:cf:a9:56:7e:ef:85:8a:ce:89:
55:01:7f:4a:e9:0a:96:1b:57:68:54:bd:cb:15:75:
5c:5b:f4:ef:12:fa:fd:cc:f5:77:06:e0:aa:f0:6c:
50:57:59:fd:78:bf:0f:7f:7b:72:2e:7b:ea:2a:86:
ef:51:df:11:dc:0e:65:51:46:7a:0d:ad:69:75:cc:
3a:62:38:dc:9d:32:84:12:c7:d2:32:fa:73:45:c6:
a0:5b:31:b7:d2:43:8d:c9:3b:76:20:61:e4:73:5e:
ad:75:00:c6:a4:6f:80:05:57:63:a5:af:7f:eb:cc:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:43:D4:E2:6E:2D:8C:87:9A:AA:1A:0C:DD:FD:49:AA:F2:25:B4:E1
X509v3 Authority Key Identifier:
keyid:BE:9E:6A:B2:68:87:E0:4D:55:6E:85:0C:54:A5:E7:F1:32:4D:BD:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vp5qsmiH4E1VboUMVKXn8TJNvZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/981DE518DD5F11EFA9C15D7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.215.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e8:43:08:f7:f6:c3:e2:94:d7:af:fa:cb:34:15:eb:4d:a5:
2d:0b:cf:0f:bf:96:13:1c:55:44:08:0f:eb:d4:67:47:b3:b3:
a2:1c:2f:0e:dc:64:c3:e5:3e:a4:67:c8:42:b6:4f:7f:03:28:
08:b1:bc:68:99:a2:38:68:41:fa:bb:84:30:05:40:f9:97:72:
2e:23:57:66:d9:cb:98:11:5c:44:05:60:f5:ad:c0:de:13:4c:
7b:53:f1:ca:e6:85:0f:6b:3d:58:86:d6:1c:e1:31:4a:b3:9b:
0f:ee:24:f3:5e:35:09:b2:16:ed:1b:99:5f:41:3c:0d:52:56:
f8:80:74:45:ee:21:51:35:91:cd:40:ee:92:26:c3:90:cc:ce:
d1:4e:33:36:74:c7:0b:04:d2:42:71:96:f1:af:84:8a:5b:ab:
07:d5:ca:ae:70:01:58:33:aa:41:29:63:22:3d:ba:e1:a9:d7:
2e:e9:1e:d5:3c:d2:7a:6f:75:b7:9a:76:40:11:26:ed:05:4d:
9a:6d:73:dc:b1:91:60:4f:9c:85:f9:43:80:4b:19:e1:ca:88:
81:0b:79:1b:02:4a:6e:23:ed:5a:5d:ec:7d:0b:be:99:4d:32:
bb:28:c6:99:da:2b:4f:de:fc:21:06:04:4f:cc:6d:4c:00:97:
32:a6:f7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:08 2025 by rpki-client