Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/3B55469ADD5111EF99B2679F762E951A.roa
File: 3B55469ADD5111EF99B2679F762E951A.roa (raw, json)
Hash identifier: 4buSDwLbI/rqa8c0nC/9yYisirrzvtwPW6bajd5/Dps=
Subject key identifier: A7:B3:1A:8E:C9:56:61:51:D3:28:55:F2:5A:72:F9:90:DB:2E:F0:DE
Certificate issuer: /CN=F36CEBD2AF/serialNumber=184413EAD0ECC5BE11C711B3E6DFE4B4DCC8D84F
Certificate serial: 01C6
Authority key identifier: 18:44:13:EA:D0:EC:C5:BE:11:C7:11:B3:E6:DF:E4:B4:DC:C8:D8:4F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/3B55469ADD5111EF99B2679F762E951A.roa
Signing time: Tue 28 Jan 2025 08:24:03 +0000
ROA not before: Tue 28 Jan 2025 08:23:59 +0000
ROA not after: Sun 28 Jan 2035 08:23:59 +0000
asID: 329263
IP address blocks: 2c0f:14c0:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CEBD2AF
Validity
Not Before: Jan 28 08:23:59 2025 GMT
Not After : Jan 28 08:23:59 2035 GMT
Subject: CN=67989423-42df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:03:d1:4a:02:e2:5e:00:ca:5a:a4:f9:90:
ac:7f:22:55:d2:d6:d8:2c:34:a2:ef:f0:ac:05:5f:
1c:1b:de:c2:e0:36:51:bd:44:3b:54:bd:56:e8:41:
6f:04:a2:b3:e7:e3:5f:50:9f:89:b4:1e:57:1d:2d:
58:d2:1b:7f:24:bd:f8:90:33:d5:ce:0d:bb:d1:2c:
99:be:19:70:99:4f:2a:c2:be:cd:4e:1d:0d:91:7c:
ad:f7:1f:02:ba:3c:c5:b9:c6:95:a9:70:fe:62:d5:
6b:f0:44:b7:4a:64:58:ef:17:ba:6e:be:f7:4b:be:
5a:33:39:d4:76:f0:d5:5d:d5:bc:24:03:7f:09:d6:
3c:ee:61:60:3c:0c:3a:fc:e5:29:8a:a7:5c:4c:fe:
57:fd:38:7f:59:47:5f:b1:c2:9e:7f:2a:43:17:c0:
bd:f1:96:49:0e:3d:3c:73:1d:a0:db:83:5c:70:d0:
8d:f9:a1:78:52:11:3c:84:32:b2:87:d6:9c:45:9d:
f6:5f:87:0e:3c:78:cd:f2:b8:2a:1a:c4:a9:a1:28:
65:d8:d3:af:b8:70:2e:58:04:6a:ae:b5:3b:61:90:
f9:4a:95:1f:41:c3:65:33:92:fc:e4:19:38:99:fc:
3a:22:6f:b5:31:14:50:0c:84:7d:ed:04:ac:21:77:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B3:1A:8E:C9:56:61:51:D3:28:55:F2:5A:72:F9:90:DB:2E:F0:DE
X509v3 Authority Key Identifier:
keyid:18:44:13:EA:D0:EC:C5:BE:11:C7:11:B3:E6:DF:E4:B4:DC:C8:D8:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/3B55469ADD5111EF99B2679F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:14c0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
01:4c:19:23:47:94:ab:30:75:41:aa:0b:80:4c:e2:66:73:a3:
75:b1:40:ec:30:51:28:e1:37:2b:db:26:54:6c:5e:5f:8b:00:
7d:cd:4d:bd:13:6d:94:f2:fe:00:ac:02:b7:19:cb:b9:c7:d5:
3e:8d:6f:01:c9:ea:f0:4c:73:e2:40:9d:cb:9b:46:d4:ba:a5:
e3:95:c5:97:4b:2f:41:d7:18:72:ca:eb:e4:cc:b8:d1:59:56:
47:a6:17:7c:59:39:02:81:ae:c6:fa:4c:f8:de:43:0b:5e:c0:
bc:cc:e6:9c:9a:38:b6:31:68:4c:4a:a9:a8:03:ae:ac:6c:d7:
33:6a:77:03:99:65:9c:ad:c5:bf:aa:1a:ff:76:28:4f:99:ea:
31:92:1b:cd:9a:b9:76:24:3f:4e:31:9d:b0:4f:86:1e:82:b7:
7c:e6:b9:c3:3c:5e:4f:30:52:aa:10:05:11:49:a0:2c:39:4d:
dd:6a:40:28:a9:53:cf:2e:97:69:68:b8:6d:e8:c1:cd:96:f3:
4c:65:ac:0b:31:e4:92:5d:e6:b1:46:26:1d:fa:e7:61:8e:e6:
1d:d6:22:98:60:92:54:b3:23:30:9f:b8:bf:bb:38:52:06:ac:
93:be:eb:32:47:5e:93:35:20:42:27:5b:76:b3:8c:66:a7:6b:
ac:c3:1a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:07 2025 by rpki-client