Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/072CB9F0DD5811EF9754F14D762E951A.roa
File: 072CB9F0DD5811EF9754F14D762E951A.roa (raw, json)
Hash identifier: GlS0yJBVj7YVWrm/XIbnxmcQKr1rBapu58l6dXmOlOc=
Subject key identifier: BE:F2:E5:29:94:FE:83:15:B0:BA:E3:F1:B6:C4:C9:8F:1D:BF:68:B5
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0796
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/072CB9F0DD5811EF9754F14D762E951A.roa
Signing time: Tue 28 Jan 2025 09:12:42 +0000
ROA not before: Tue 28 Jan 2025 09:12:38 +0000
ROA not after: Sat 30 Jul 2033 09:12:38 +0000
asID: 37119
IP address blocks: 2c0f:f888:b000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1942 (0x796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Jan 28 09:12:38 2025 GMT
Not After : Jul 30 09:12:38 2033 GMT
Subject: CN=67989f8a-a0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:11:7c:4f:d1:ef:83:06:1e:9d:9c:18:19:
1e:12:50:b2:c5:2b:83:22:46:49:0b:f7:ac:18:b6:
26:9c:42:13:3d:87:77:a4:cc:45:c0:17:52:9a:83:
d8:f5:48:c0:5f:78:c5:15:35:25:6c:d7:a1:2c:24:
da:da:8a:73:a4:e3:27:01:c7:c5:a2:ed:fc:9f:d1:
92:dd:03:f3:e3:a2:a9:9e:64:60:a7:0c:27:ae:35:
45:25:cd:aa:25:ba:35:fb:41:f9:71:65:c7:5c:ee:
e0:95:1e:32:ec:f3:02:10:a2:56:22:61:6b:ef:16:
c8:55:50:46:be:a2:6b:0b:90:d2:53:6e:b7:be:6f:
0e:b6:41:df:b1:d4:1f:72:95:e9:cc:53:fa:b8:7b:
10:08:c9:78:38:23:1f:69:33:2a:6d:5a:da:d6:43:
68:ea:6e:d0:36:90:c7:2b:48:3b:58:19:d5:b1:f6:
4a:6b:66:ad:9d:52:35:83:16:5f:ea:63:26:e4:da:
6f:b8:6a:55:21:15:b8:23:24:4b:87:a9:86:8b:15:
20:9f:a2:78:74:d0:06:4e:43:58:89:b0:86:f4:0a:
6d:d1:08:db:57:66:b4:2a:8c:90:66:b0:ac:d7:ea:
59:a4:b9:66:7a:ca:b9:7d:37:57:c4:6b:6d:99:20:
1e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F2:E5:29:94:FE:83:15:B0:BA:E3:F1:B6:C4:C9:8F:1D:BF:68:B5
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/072CB9F0DD5811EF9754F14D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:b000::/36
Signature Algorithm: sha256WithRSAEncryption
36:56:ca:a6:85:51:91:7e:6e:c4:a9:be:00:d9:13:b5:02:c3:
29:25:32:0b:c2:8c:6c:6a:b8:88:48:3c:d0:68:2e:cc:06:71:
71:5e:a9:3d:62:cb:f0:29:d1:ce:68:ab:43:ad:0b:e4:c9:78:
b1:22:5a:23:6f:50:06:0f:18:93:ca:30:18:38:13:23:98:a5:
91:0f:4e:ca:d7:83:53:b8:c5:34:14:af:a7:8e:c4:8e:f8:91:
0f:db:64:14:6e:35:c8:9d:c5:82:a1:aa:fe:b8:de:8d:f4:62:
1a:38:33:91:39:d2:87:30:97:51:5d:db:b5:25:39:41:f7:46:
c1:03:1b:dd:bb:38:4d:05:5d:20:4c:79:37:72:96:33:bd:f8:
f7:cd:2b:3c:d9:5b:83:7d:9b:73:83:a0:90:cb:04:6b:1e:bc:
f7:fa:9c:9d:4c:4b:f6:b4:84:21:b9:b5:71:a4:16:c3:16:ac:
0b:68:14:5f:5d:38:ae:51:57:6c:82:48:2c:9e:2e:83:47:c2:
5f:c6:33:bd:d2:14:e0:97:df:43:a6:96:2a:bd:22:44:3b:98:
e6:2f:8a:5b:ec:a8:35:61:66:14:db:bd:73:9f:b3:b1:bd:9c:
f0:97:26:ac:bd:e5:86:81:7b:87:18:dc:32:fe:73:50:e0:d2:
64:34:23:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:52:31 2025 by rpki-client