Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/32C9B38EB61F11EFBB42D36F762E951A.roa
File: 32C9B38EB61F11EFBB42D36F762E951A.roa (raw, json)
Hash identifier: sVrMjlCoPb21QhGCC7nsIfsquzGHgX/uOzdUbjrAL8Y=
Subject key identifier: BA:9B:08:96:12:89:93:FB:D5:24:9E:EE:F1:03:2C:3B:AB:5B:2C:B4
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0737
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/32C9B38EB61F11EFBB42D36F762E951A.roa
Signing time: Mon 09 Dec 2024 11:17:38 +0000
ROA not before: Mon 09 Dec 2024 11:17:34 +0000
ROA not after: Sat 30 Jul 2033 11:17:34 +0000
asID: 37119
IP address blocks: 2c0f:f888:a1a0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1847 (0x737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 11:17:34 2024 GMT
Not After : Jul 30 11:17:34 2033 GMT
Subject: CN=6756d1d2-7610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:b2:77:84:15:b7:d8:73:a1:e0:48:91:f2:
22:fe:d4:af:fe:f2:86:65:10:4f:7a:2b:f9:be:cb:
35:99:f5:d8:4d:dc:8c:4f:b1:18:c5:91:3d:de:e1:
09:c1:30:cd:2a:44:45:3d:0e:c4:06:06:e2:f5:7c:
43:3a:f8:31:82:9f:fc:53:3f:5a:a3:c9:f1:b2:35:
82:46:ff:75:7f:7e:b7:6c:85:ec:0f:39:7a:1a:fc:
28:44:c2:c1:1d:40:90:aa:51:27:83:01:58:75:ec:
0f:f7:c3:6e:fc:07:ab:9b:a5:8e:6e:c7:6d:e7:e2:
b4:e3:f2:9a:67:ca:b4:48:f0:ca:20:91:c5:1a:41:
26:f0:63:fa:a2:d0:4c:f8:e6:c3:2e:fb:45:06:08:
ce:04:b4:f1:cc:8a:4a:04:b8:7d:9c:cf:61:3e:6d:
e0:00:38:49:4c:3e:8a:8c:43:5d:58:2f:e6:bf:d5:
8c:c3:10:f0:0e:0d:4e:0b:60:c1:5a:9f:7b:cf:f7:
8f:0f:2a:1d:3b:fa:51:81:30:d5:32:46:65:fc:1a:
d3:64:af:ad:81:4c:f8:6a:9e:e7:b6:d1:75:be:94:
6d:27:a5:3d:bf:20:ea:38:f8:8b:3e:0a:a2:36:1e:
04:45:e3:a1:16:d7:44:61:dc:f9:20:47:bb:f7:0a:
2d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9B:08:96:12:89:93:FB:D5:24:9E:EE:F1:03:2C:3B:AB:5B:2C:B4
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/32C9B38EB61F11EFBB42D36F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a1a0::/44
Signature Algorithm: sha256WithRSAEncryption
41:bf:2a:3d:bb:09:30:59:ce:97:fe:f8:08:31:06:72:fe:d1:
03:58:5e:a0:bd:a9:05:e7:c6:1d:26:a3:71:d2:40:9b:04:61:
df:45:1e:4b:70:00:5e:71:1e:95:ca:b0:1f:78:e6:a5:ed:ea:
d2:41:b0:6c:98:b0:a0:ea:6e:95:35:d2:b2:38:08:74:e8:86:
ee:9d:c1:53:d7:98:93:a6:61:df:40:4c:b5:ed:6f:53:00:24:
78:00:51:7d:cb:cc:7b:67:b3:27:e9:92:29:04:08:21:8c:2e:
c8:da:b6:d5:21:33:e5:a7:36:b9:85:3f:54:43:f4:1e:ed:78:
f6:f3:3c:0e:47:e8:29:e7:bd:ef:1e:a8:de:ca:4f:bb:68:50:
16:1c:fb:4d:03:e9:ba:bb:54:7e:2a:6b:74:62:e1:9b:da:cb:
1a:05:8b:37:0d:c5:2b:e3:ac:9c:24:12:1a:29:fa:ab:f2:cf:
75:18:61:25:2a:f4:c0:5e:bb:e9:93:25:4f:8c:1c:cc:f6:1b:
df:e4:90:24:c5:0b:aa:17:76:6f:61:df:08:5b:31:d0:f4:49:
40:13:df:41:52:5a:9f:7b:bc:42:fb:03:db:92:eb:5c:3d:d7:
ef:f5:80:c1:0d:64:c6:08:6b:03:60:44:68:31:67:a5:32:c6:
50:37:89:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:16 2025 by rpki-client