Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/95A4AB80DD5711EFA6D0E349762E951A.roa
File: 95A4AB80DD5711EFA6D0E349762E951A.roa (raw, json)
Hash identifier: EAgqyCVOSQvw46nk2EtB0CvgS5SwM2ThgCOvvO80TYI=
Subject key identifier: 7C:97:CB:F4:CE:4C:2E:6D:E4:93:FD:34:5F:C1:90:46:48:34:3F:62
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0794
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/95A4AB80DD5711EFA6D0E349762E951A.roa
Signing time: Tue 28 Jan 2025 09:09:31 +0000
ROA not before: Tue 28 Jan 2025 09:09:27 +0000
ROA not after: Sat 30 Jul 2033 09:09:27 +0000
asID: 37119
IP address blocks: 2c0f:f888:a000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1940 (0x794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Jan 28 09:09:27 2025 GMT
Not After : Jul 30 09:09:27 2033 GMT
Subject: CN=67989ecb-c84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:4e:91:73:ec:ee:17:91:06:41:29:61:80:
ea:5e:97:54:4b:ed:2f:01:71:12:35:56:1e:f2:20:
a2:63:ea:b0:46:b4:e0:32:8e:27:29:3e:4c:40:73:
cd:36:fe:77:79:37:d2:c8:61:02:39:49:47:8b:15:
9a:22:24:5c:b9:bd:f5:e2:5a:6a:9b:94:32:9f:af:
1e:cf:b1:48:bb:0f:2e:fc:2a:54:a6:28:50:37:9f:
a0:d6:10:31:2c:df:ea:13:2e:9a:fb:34:55:2a:ce:
5e:e1:80:b4:32:81:95:85:47:25:79:fb:8e:47:c2:
41:c8:42:53:a3:d5:65:f0:5c:9e:1b:a3:8d:36:d4:
27:af:93:ce:86:89:77:22:7a:c8:99:31:11:1a:12:
31:ec:12:8b:22:4e:81:27:22:ee:d0:ca:c3:9d:88:
62:c2:ec:59:4a:4d:e2:06:8d:1c:d3:43:30:3d:ba:
7e:4c:61:02:73:e2:28:9a:c6:e5:00:59:27:26:01:
35:13:b0:72:71:a6:c2:c9:f5:dd:10:e5:29:84:16:
b9:6e:1e:0e:32:ad:5b:50:27:8f:3a:42:92:59:ea:
06:b6:16:36:0f:50:fc:df:6a:bc:d7:37:c8:57:0e:
53:dd:ef:86:a9:0d:f9:e7:65:73:38:c9:c7:2e:41:
c6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:97:CB:F4:CE:4C:2E:6D:E4:93:FD:34:5F:C1:90:46:48:34:3F:62
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/95A4AB80DD5711EFA6D0E349762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a000::/36
Signature Algorithm: sha256WithRSAEncryption
80:1f:eb:a3:25:37:39:f3:60:7a:fc:19:15:e4:65:9b:d6:ad:
f6:73:d1:a3:3b:98:86:d2:57:31:29:ba:83:09:68:e4:1a:ed:
66:71:8c:a7:65:7c:61:d2:d4:a0:a8:db:d1:00:bc:87:80:b2:
b2:3d:d7:52:05:4d:e5:d2:59:d9:f3:66:88:f6:60:e9:16:95:
78:ff:5e:a1:de:b1:e5:d2:f8:4d:f0:98:cc:69:7f:02:33:17:
c1:d4:6a:b1:d9:7b:44:b2:80:bb:f0:59:49:54:97:df:3a:d1:
75:87:35:6a:7f:42:31:e0:0d:28:0b:0e:b1:a1:8d:fc:e4:a8:
31:2f:30:20:fa:e0:cb:88:ad:f7:0d:d2:6e:6a:75:29:08:d7:
ea:c5:fb:26:b0:66:57:20:53:94:6d:9d:d3:2c:d0:6e:b4:a8:
d5:c6:84:99:82:4e:c6:3e:9d:12:b5:d5:67:4e:10:3a:21:e7:
c4:c9:84:02:32:18:fb:0d:16:ef:48:75:a5:06:fd:ce:61:6e:
86:21:f8:83:92:30:82:01:f9:d1:0d:fb:bb:e9:1b:61:d6:c1:
63:b4:28:e2:ce:d5:55:e8:88:76:9c:8a:9c:cd:09:5b:7d:f3:
c1:12:8f:4e:10:b1:bc:16:47:c6:19:a7:76:2e:a6:2a:44:e2:
b0:2e:51:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:45:09 2025 by rpki-client