Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/324D9BACB61D11EF941FE863762E951A.roa
File: 324D9BACB61D11EF941FE863762E951A.roa (raw, json)
Hash identifier: ebhTyRu9FB0PMTboV9uwZyiyugLhwQb4xv+rDgNflsQ=
Subject key identifier: 6F:5D:75:B0:08:AA:11:11:CF:51:6D:55:D0:F1:42:D8:A7:73:62:E9
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0731
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/324D9BACB61D11EF941FE863762E951A.roa
Signing time: Mon 09 Dec 2024 11:03:19 +0000
ROA not before: Mon 09 Dec 2024 11:03:11 +0000
ROA not after: Sat 30 Jul 2033 11:03:11 +0000
asID: 37119
IP address blocks: 2c0f:f888:a130::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1841 (0x731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 11:03:11 2024 GMT
Not After : Jul 30 11:03:11 2033 GMT
Subject: CN=6756ce76-d1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:16:e6:67:37:16:66:73:63:d8:5d:23:3d:
4e:48:99:10:85:1d:85:59:30:b5:b9:70:13:63:92:
d4:a6:9f:4f:31:1a:d8:40:c6:eb:a9:3f:d3:05:7e:
4d:cb:5e:a4:70:1b:06:1a:6b:a4:e1:bb:76:a9:17:
3a:a5:99:5a:86:b4:d6:26:bf:d4:fd:e9:87:f3:7d:
db:ce:b3:28:2d:45:14:04:4d:78:b2:fb:52:35:17:
9c:71:98:a3:89:6d:79:98:c0:da:fd:68:a3:e2:37:
ee:53:82:c2:02:88:d5:20:93:04:d1:ed:51:3a:6b:
45:db:16:50:4f:8f:e6:1b:7d:8b:25:4d:ae:87:f9:
c8:69:9d:20:db:05:4b:c1:6b:69:af:fd:ea:f3:0d:
46:07:e6:d6:12:24:67:14:bc:57:59:dd:a2:3a:c8:
2a:f7:d2:41:bc:eb:ac:43:f5:31:89:42:18:97:4f:
bd:4e:d6:c1:a6:77:1e:04:52:d6:f1:9f:38:6a:a6:
43:be:f8:6b:0f:c1:6f:f0:35:21:0f:1c:c7:ce:37:
12:23:67:09:3c:82:a9:ce:fa:1e:3c:6b:f1:fc:b1:
b8:2d:60:ea:92:c6:1a:79:93:7b:91:80:b5:61:0b:
6b:14:f9:7c:70:09:07:92:42:b6:b8:52:6d:d4:91:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5D:75:B0:08:AA:11:11:CF:51:6D:55:D0:F1:42:D8:A7:73:62:E9
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/324D9BACB61D11EF941FE863762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a130::/44
Signature Algorithm: sha256WithRSAEncryption
18:d1:1f:50:6a:b3:86:07:2b:aa:1b:3b:1a:88:d9:8f:53:fe:
98:24:fe:bf:95:aa:e4:f3:f0:9f:a4:65:7e:0b:77:3a:c1:33:
61:09:91:e2:00:37:ac:bd:b4:1e:4f:d8:33:97:d5:ec:24:19:
f4:ab:0b:05:fc:9d:50:1c:04:8d:ec:ea:75:46:b7:4c:d8:3d:
aa:4d:7b:75:0e:40:53:90:60:6b:b2:61:b9:51:1b:29:72:19:
ba:cb:0b:54:31:bc:34:cc:1f:f4:b5:b5:18:8d:68:31:a1:af:
40:6c:e8:10:d4:78:71:90:a6:06:9a:b6:57:67:0b:c6:2a:53:
a7:b4:ef:30:ba:9b:a5:d8:ce:94:ac:99:d4:05:12:d5:e3:2d:
5a:8a:58:df:31:7e:ba:2f:c4:57:33:54:30:c2:8d:64:39:5c:
44:60:27:91:d5:da:2f:9f:bb:d1:70:79:86:59:cf:a7:89:e2:
76:5d:a2:52:e6:79:14:ed:c6:bf:e5:5c:67:b4:07:81:9d:c7:
79:c4:8c:e7:09:2b:e5:ef:d0:0f:b7:f5:b6:5c:1b:72:d6:9d:
29:1f:d4:a3:cf:5a:b6:d1:4f:a1:b1:a9:4e:2f:97:ef:1c:60:
bf:49:ef:2a:79:bf:7b:6b:18:9c:91:ad:e0:d4:1f:cd:79:5f:
e4:b0:7e:b7
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBzEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yNDEyMDkxMTAzMTFaFw0zMzA3MzAxMTAzMTFaMBgxFjAU
BgNVBAMTDTY3NTZjZTc2LWQxZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEwxbmZzcWZnNj2F0jPU5ImRCFHYVZMLW5cBNjktSmn08xGthAxuupP9MF
fk3LXqRwGwYaa6Thu3apFzqlmVqGtNYmv9T96YfzfdvOsygtRRQETXiy+1I1F5xx
mKOJbXmYwNr9aKPiN+5TgsICiNUgkwTR7VE6a0XbFlBPj+YbfYslTa6H+chpnSDb
BUvBa2mv/erzDUYH5tYSJGcUvFdZ3aI6yCr30kG866xD9TGJQhiXT71O1sGmdx4E
UtbxnzhqpkO++GsPwW/wNSEPHMfONxIjZwk8gqnO+h48a/H8sbgtYOqSxhp5k3uR
gLVhC2sU+XxwCQeSQra4Um3UkThDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb111
sAiqERHPUW1V0PFC2KdzYukwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4LzMyNEQ5QkFDQjYxRDExRUY5NDFGRTg2Mzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQsD/iIoTAwDQYJKoZIhvcN
AQELBQADggEBABjRH1Bqs4YHK6obOxqI2Y9T/pgk/r+VquTz8J+kZX4LdzrBM2EJ
keIAN6y9tB5P2DOX1ewkGfSrCwX8nVAcBI3s6nVGt0zYPapNe3UOQFOQYGuyYblR
GylyGbrLC1QxvDTMH/S1tRiNaDGhr0Bs6BDUeHGQpgaatldnC8YqU6e07zC6m6XY
zpSsmdQFEtXjLVqKWN8xfrovxFczVDDCjWQ5XERgJ5HV2i+fu9FweYZZz6eJ4nZd
olLmeRTtxr/lXGe0B4Gdx3nEjOcJK+Xv0A+39bZcG3LWnSkf1KPPWrbRT6GxqU4v
l+8cYL9J7yp5v3trGJyRreDUH815X+Swfrc=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:11 2025 by rpki-client