Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/C80CF7BAB63A11EF9E6CAF98762E951A.roa
File: C80CF7BAB63A11EF9E6CAF98762E951A.roa (raw, json)
Hash identifier: 1SBomQpXlxrIF8HTT7O3qapQGHImbqCd5S0Gu8GqIQM=
Subject key identifier: CE:04:33:26:F2:1F:C8:01:CB:0B:0F:87:69:64:7A:E3:A0:13:B4:93
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0747
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/C80CF7BAB63A11EF9E6CAF98762E951A.roa
Signing time: Mon 09 Dec 2024 14:35:05 +0000
ROA not before: Mon 09 Dec 2024 14:35:01 +0000
ROA not after: Sat 30 Jul 2033 14:35:01 +0000
asID: 37119
IP address blocks: 2c0f:f888:a860::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1863 (0x747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 14:35:01 2024 GMT
Not After : Jul 30 14:35:01 2033 GMT
Subject: CN=67570019-3074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:49:70:50:8c:f8:34:22:1c:1a:56:05:4d:
67:5a:49:1c:48:d2:50:be:25:d8:a3:84:ad:91:79:
49:d9:dc:e3:0e:a4:57:3d:cd:b8:32:79:b3:7e:cb:
80:42:97:ee:78:55:53:f0:b3:cd:b0:6e:03:e0:5a:
ca:48:a3:9e:c0:cc:a5:fb:92:78:22:88:29:15:13:
ed:79:5a:ff:8c:6b:e1:01:6b:c6:f8:b5:2a:5a:11:
f4:d0:c2:54:f4:43:f7:02:7f:44:36:12:f3:be:81:
af:6b:b7:4f:de:b3:ee:03:9d:fb:11:35:75:ec:f3:
a5:91:32:6c:53:be:4a:e6:83:a0:2e:7e:d4:81:98:
e2:8c:14:e8:97:c4:6e:8b:ea:00:55:5f:42:77:5a:
e9:5f:ce:b7:e3:2d:3e:23:53:88:e7:b0:59:2a:fa:
4c:25:c1:a2:69:dd:6e:14:5e:e6:a8:23:49:e8:8a:
31:40:0c:f3:fd:6e:0e:e4:24:49:b5:de:e0:ab:71:
15:dd:ae:db:d9:a6:ca:d9:d2:8b:ab:d9:9e:79:20:
cd:6a:00:63:40:bd:5c:3f:69:a6:dc:45:8d:55:2f:
13:8e:6e:31:da:7e:58:2b:08:ad:e8:3d:33:67:f5:
c7:ca:21:18:07:4b:28:1f:3b:6e:52:6c:3a:64:0e:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:04:33:26:F2:1F:C8:01:CB:0B:0F:87:69:64:7A:E3:A0:13:B4:93
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/C80CF7BAB63A11EF9E6CAF98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a860::/44
Signature Algorithm: sha256WithRSAEncryption
5f:04:a5:1c:01:0c:19:35:9a:21:49:64:dd:15:00:b2:90:77:
8d:e8:f9:79:47:ca:1a:02:3f:fb:41:f1:f8:51:20:4c:33:2c:
e7:af:db:6a:5e:3a:09:ee:b4:86:1d:36:ae:93:b9:5f:59:b8:
05:c9:db:71:53:4a:e8:08:57:88:cd:ee:a8:d2:59:48:68:66:
b9:53:06:81:8f:af:f0:cc:6d:c6:20:ff:2f:66:1f:f8:82:30:
5c:af:9e:27:9f:49:a2:5d:e6:79:86:35:17:e8:2c:a8:a6:6a:
e0:3c:d9:3c:15:22:d2:5f:2c:94:9b:eb:d5:79:c6:84:fc:1c:
85:8e:20:26:9b:52:5d:ec:70:f0:c8:62:a0:a5:54:5e:4e:30:
fa:d8:ae:6a:46:df:31:94:2a:23:09:5e:b8:94:15:94:90:f1:
a8:64:d0:5a:d6:95:99:8c:60:1f:be:2e:03:7c:ae:b6:75:d6:
80:ea:b5:80:18:2f:a1:e4:cb:1c:c2:65:6b:8e:7a:d6:c7:42:
31:3b:48:b9:fe:07:e9:be:f9:8b:f7:52:d5:b3:6b:38:5a:ae:
36:c8:d9:20:6a:ff:02:d6:52:b0:ac:e8:f6:90:84:88:2f:7d:
08:55:93:c5:1f:47:92:38:54:98:43:4c:40:ae:f3:fb:0a:92:
d9:d3:f0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:55:02 2025 by rpki-client