Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A2BA0834B63711EFAEC5BF85762E951A.roa
File: A2BA0834B63711EFAEC5BF85762E951A.roa (raw, json)
Hash identifier: QQlGWz/6Dxj4z2YLIkjOMsUAykpsiHlf6iLdhkPsNDo=
Subject key identifier: 89:2B:37:49:16:83:05:D7:98:00:2F:9C:7E:1F:86:D7:F5:3F:9B:E7
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 073B
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A2BA0834B63711EFAEC5BF85762E951A.roa
Signing time: Mon 09 Dec 2024 14:12:34 +0000
ROA not before: Mon 09 Dec 2024 14:12:30 +0000
ROA not after: Sat 30 Jul 2033 14:12:30 +0000
asID: 37119
IP address blocks: 2c0f:f888:a800::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1851 (0x73b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 14:12:30 2024 GMT
Not After : Jul 30 14:12:30 2033 GMT
Subject: CN=6756fad2-d8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:8b:3c:70:db:c4:ce:4d:67:67:80:28:23:
4c:d8:6e:db:f2:68:50:9f:ca:5a:34:9d:af:36:42:
09:f6:f1:1a:26:d5:c4:29:11:9e:4d:f2:ce:97:fa:
c6:ba:db:1b:dc:e4:c3:2b:d3:be:c0:1a:7f:af:8f:
7f:db:ee:12:cf:50:19:4d:37:fe:8d:3b:b2:63:53:
1a:a0:2b:cb:22:e6:7c:c9:23:44:38:c7:3d:27:23:
58:4e:b2:e7:b3:73:21:73:c0:65:d7:4c:28:83:c7:
35:3c:18:1e:c7:95:1a:d0:08:74:e6:f0:15:08:d7:
38:31:cc:bd:19:ce:50:a5:66:63:54:1e:f9:41:54:
6c:1f:49:b2:22:bd:ac:ee:81:05:21:4a:15:19:1e:
c1:28:e0:3d:12:d1:44:4e:7a:01:d5:4c:95:cd:a4:
e4:0f:52:49:c4:02:67:dc:ed:57:49:4c:55:44:2b:
0a:d5:67:a9:cc:09:90:f9:29:82:55:6d:63:aa:86:
c2:22:f2:e6:1d:41:ee:18:43:2b:58:cf:85:54:4e:
a3:5d:c3:63:11:31:f5:1c:15:38:89:cf:56:7a:05:
14:c3:11:20:b1:32:b0:c0:b8:c6:c1:13:77:35:55:
27:79:e4:0b:d6:bd:e9:3e:80:8c:d3:a6:00:f4:af:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2B:37:49:16:83:05:D7:98:00:2F:9C:7E:1F:86:D7:F5:3F:9B:E7
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A2BA0834B63711EFAEC5BF85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a800::/44
Signature Algorithm: sha256WithRSAEncryption
b9:d9:bf:48:bb:ff:fa:50:b2:40:90:95:36:b7:7c:38:e6:da:
09:8d:da:2f:21:4c:7b:18:1e:57:d6:1d:90:07:87:49:5b:c5:
ac:94:7d:27:d6:65:ab:74:cb:4a:0a:97:7e:f4:a8:9f:bc:c0:
e8:5b:a2:6e:e9:7b:dd:da:07:f6:9e:70:e3:c0:f6:69:98:89:
aa:62:bc:a1:97:71:59:d3:6d:91:e1:f0:85:21:45:43:40:84:
fe:3d:22:03:3c:2d:94:ab:5b:47:12:6b:16:e8:fe:4e:48:72:
67:dc:de:00:08:2e:8d:31:d6:ed:cb:5d:d4:5d:96:9a:0e:f3:
22:4d:f6:52:b3:b6:d3:0e:15:d1:9b:69:98:66:68:87:2e:25:
55:b3:52:a0:e9:c5:b0:c1:3e:96:ae:19:48:aa:55:9b:fc:34:
0c:20:b6:26:a3:b9:6a:c6:2a:bf:bc:21:cd:d6:98:e5:8e:03:
dc:18:70:fe:33:64:b3:0b:82:9a:7d:db:5a:52:ee:42:f9:60:
bc:ca:29:e9:3e:1d:ba:c7:23:58:ad:62:c6:6e:42:33:9a:6c:
68:ad:b1:f2:f2:ba:52:0d:d3:f4:b5:f6:25:e1:06:39:00:ee:
d3:f0:57:b1:8a:6c:cd:0a:48:b9:61:8f:7f:65:e1:29:3d:56:
36:6b:f1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:34:27 2025 by rpki-client