Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/3378D662B63C11EFA9D6FBA2762E951A.roa
File: 3378D662B63C11EFA9D6FBA2762E951A.roa (raw, json)
Hash identifier: rOSdci/7RDjVZmRx+z0tMeWwOPovhF/5yQQKR5f8Rls=
Subject key identifier: 70:2C:DA:64:71:02:AD:4F:3F:41:06:C3:97:31:10:1D:A6:CC:0D:50
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0753
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/3378D662B63C11EFA9D6FBA2762E951A.roa
Signing time: Mon 09 Dec 2024 14:45:15 +0000
ROA not before: Mon 09 Dec 2024 14:45:11 +0000
ROA not after: Sat 30 Jul 2033 14:45:11 +0000
asID: 37119
IP address blocks: 2c0f:f888:a980::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1875 (0x753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 14:45:11 2024 GMT
Not After : Jul 30 14:45:11 2033 GMT
Subject: CN=6757027b-ddf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:37:39:fe:14:c8:e0:2f:1d:4d:ef:11:25:a8:
51:11:68:9d:d3:5a:d4:5c:8f:b5:40:9a:ee:22:b4:
34:7a:21:1b:49:d3:bc:99:3e:b6:f1:b6:ac:7e:0a:
76:01:4c:ac:78:ae:cf:77:6a:88:52:0f:4c:ba:a4:
70:74:6b:57:0b:c0:2c:5f:e0:eb:7c:7b:29:e2:75:
ce:7c:55:0e:c5:74:74:55:36:aa:47:89:6d:76:b0:
e3:fe:3c:d2:21:e6:20:54:ea:02:71:0f:0f:93:83:
a7:5e:70:21:4d:d9:d6:2b:8d:79:7e:64:f4:bf:6b:
e0:5f:44:94:7d:e2:ac:42:8c:05:70:bd:ae:b0:41:
76:ca:2d:65:3e:11:4a:a5:c7:68:75:28:a3:1b:30:
df:5b:5b:c4:ef:dc:4a:17:57:08:b4:19:c5:2e:1d:
f3:cf:ee:24:53:5b:e8:1f:f1:35:77:14:bf:79:29:
83:0b:c5:f7:d0:29:34:c6:a9:4c:5e:bb:66:d9:6a:
5b:99:f4:f2:89:0b:72:68:3f:78:9c:d1:60:27:9a:
25:4f:08:ba:48:d1:63:43:7d:bf:a1:81:de:b5:ae:
99:f6:cd:47:c5:4f:cd:1a:37:0d:30:00:05:44:80:
96:aa:b8:1c:8a:65:a7:63:c7:b7:f6:16:cb:2b:7d:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2C:DA:64:71:02:AD:4F:3F:41:06:C3:97:31:10:1D:A6:CC:0D:50
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/3378D662B63C11EFA9D6FBA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a980::/44
Signature Algorithm: sha256WithRSAEncryption
62:11:94:b6:48:eb:ba:88:76:a2:71:64:a3:8b:a7:36:d4:0e:
a8:41:9b:f2:ef:1f:5d:8a:a5:2e:09:5b:46:a3:fc:ac:39:1b:
3e:dc:0a:6b:bb:7a:70:da:94:28:f4:e6:b3:3c:a7:04:30:2c:
76:f0:6d:66:1e:e6:97:68:4f:67:f2:65:66:c7:cd:b5:e8:ff:
3c:8e:eb:ad:4e:38:69:4f:c8:09:d9:8c:b9:c3:56:a6:1e:94:
44:04:15:70:e6:8b:06:0e:65:76:3e:9e:9f:7b:12:0e:19:34:
86:76:2c:5e:df:44:f3:0f:8b:66:25:79:4f:aa:17:82:38:5e:
4f:db:42:c1:42:58:fd:2b:29:2b:9d:65:e1:fb:be:e1:75:76:
25:ad:76:38:40:cd:53:34:95:7d:ad:7c:42:79:1e:28:aa:8c:
a5:cb:76:79:d1:99:3e:f6:0a:3f:8d:8a:1b:cc:dd:ba:ff:cd:
e1:5d:71:85:8f:e1:00:c9:50:ae:50:5f:d5:45:9d:20:61:22:
b8:0f:57:ea:a4:43:9a:c9:1b:c0:c9:6d:59:61:70:bd:2f:3f:
80:f9:85:c5:78:4f:87:cc:bf:73:45:6a:e0:ee:da:c2:41:28:
54:5e:0c:66:4b:a6:d8:79:65:7d:59:bf:3a:ab:e3:11:0b:c3:
06:c0:31:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:59 2025 by rpki-client