Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/1397FDAEB63811EF9737CE89762E951A.roa
File: 1397FDAEB63811EF9737CE89762E951A.roa (raw, json)
Hash identifier: SMb6P13IERyQub8EA3YPr30w4oQNRP8EA6Q2fK2oH4A=
Subject key identifier: FC:B9:E0:70:CA:08:5B:23:F1:83:C8:BF:0F:F1:51:D3:82:26:7E:5D
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 073F
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/1397FDAEB63811EF9737CE89762E951A.roa
Signing time: Mon 09 Dec 2024 14:15:44 +0000
ROA not before: Mon 09 Dec 2024 14:15:40 +0000
ROA not after: Sat 30 Jul 2033 14:15:40 +0000
asID: 37119
IP address blocks: 2c0f:f888:a820::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1855 (0x73f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 14:15:40 2024 GMT
Not After : Jul 30 14:15:40 2033 GMT
Subject: CN=6756fb8f-9d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:90:85:f5:9e:a2:46:2c:50:1e:35:d2:8f:
2f:39:93:d8:0d:b8:5b:77:c2:04:8a:f0:a8:af:94:
ed:97:0b:41:c3:3c:46:a7:35:86:7e:a4:a5:e9:39:
7b:f6:d0:6a:c6:37:3b:65:16:0a:52:ec:94:74:7c:
cd:cf:72:09:0f:c4:fe:34:86:47:1c:f7:7a:b3:50:
22:32:1a:bc:c8:78:11:99:5c:e9:49:a0:7e:c2:04:
65:ed:82:d2:6d:53:6d:5f:60:59:e9:58:d4:02:c3:
88:5a:f3:1c:92:c5:5c:7c:b3:86:67:3d:da:f0:0a:
a9:64:4b:ec:4d:27:fc:c5:65:4b:a3:a7:2e:cb:5c:
82:55:e3:c7:56:eb:3c:3c:e2:43:21:a9:78:cf:3d:
eb:f3:60:3e:17:6b:ab:37:4b:33:93:51:5c:58:21:
b0:b9:df:e4:80:97:fa:8a:2a:4f:e9:ce:49:7d:54:
41:cf:f2:37:80:6d:c5:0a:78:b8:b0:54:78:b4:af:
a2:48:9d:52:3e:48:7c:b0:59:4b:41:a3:6d:20:fd:
f2:e1:36:93:96:e2:1d:90:7c:09:c7:c0:6d:aa:22:
24:ee:af:b4:10:00:e5:e8:48:a3:ad:54:8b:9f:4a:
6d:66:20:ad:1b:77:82:e6:d6:91:d4:bf:69:4a:15:
f0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B9:E0:70:CA:08:5B:23:F1:83:C8:BF:0F:F1:51:D3:82:26:7E:5D
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/1397FDAEB63811EF9737CE89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a820::/44
Signature Algorithm: sha256WithRSAEncryption
b6:27:45:1b:31:ff:18:a4:12:f8:2f:7a:31:e0:52:f7:73:72:
f8:cf:a6:74:bd:1c:66:2b:bb:0c:9c:e1:df:9e:bd:b2:9e:6b:
4f:44:3c:9d:e1:dc:3a:1d:dd:75:03:8d:eb:5f:99:c3:49:d5:
4a:46:4b:04:a5:55:48:24:76:06:a7:36:f2:64:89:3e:81:c0:
6c:ad:4d:e5:c8:cf:b3:cf:da:48:4b:ee:cd:32:93:e6:60:34:
67:9a:cd:87:c5:0d:f0:42:f8:a3:46:96:ff:23:90:2e:43:ee:
eb:f8:2f:65:4e:b0:9f:52:d9:cb:94:6f:e2:02:0c:94:81:c3:
58:40:85:cf:61:3d:bf:86:3a:d5:08:37:57:8a:b2:36:e5:1c:
23:81:50:ea:1d:61:89:9a:40:0a:a9:dc:04:b7:b8:ab:09:e2:
a3:be:7a:5a:2d:75:0e:54:5e:a2:c9:eb:b5:33:40:5a:ab:3e:
80:c9:dd:02:87:72:9c:2c:46:2d:88:25:77:7e:eb:e6:57:1e:
4c:8f:af:5e:ad:50:80:5e:3c:14:6f:51:b6:46:3a:1f:b3:dd:
a2:a6:f6:e3:bc:3d:42:21:44:20:2e:16:67:ab:d5:d7:f9:fd:
a9:e3:1c:bf:40:32:c8:70:dc:08:5d:77:28:70:91:0e:d6:af:
5a:28:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:30:39 2025 by rpki-client