Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CCF64C5CB63C11EFAC143AA5762E951A.roa
File: CCF64C5CB63C11EFAC143AA5762E951A.roa (raw, json)
Hash identifier: 49/jdJod24vUzn9P/wXudUTMDtHrRTLaXt2RMSUL2Oo=
Subject key identifier: AE:B1:9F:53:EC:99:B9:5E:44:0F:FD:33:8E:10:E8:13:2B:83:07:85
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0759
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CCF64C5CB63C11EFAC143AA5762E951A.roa
Signing time: Mon 09 Dec 2024 14:49:33 +0000
ROA not before: Mon 09 Dec 2024 14:49:29 +0000
ROA not after: Sat 30 Jul 2033 14:49:29 +0000
asID: 37119
IP address blocks: 2c0f:f888:a9b0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 14:49:29 2024 GMT
Not After : Jul 30 14:49:29 2033 GMT
Subject: CN=6757037c-3408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:ab:ff:2c:77:0b:98:9c:6d:e8:bf:44:d9:
5d:d7:3a:98:4b:2e:87:01:cb:d4:eb:4b:96:78:e8:
d4:46:12:1a:6d:f1:6e:04:de:2b:2c:e3:a1:d6:a8:
c6:79:c4:fb:63:fe:7f:cb:9e:6d:bf:0e:f7:03:64:
cf:5e:55:a5:6a:ef:4a:c6:79:ee:f8:6e:ed:42:3a:
c4:4f:ba:85:bb:8f:b4:2c:9e:3f:b0:02:36:8b:eb:
f7:5e:a6:d9:31:f4:bf:46:46:3a:d5:d6:39:a3:f6:
7a:c0:66:90:dc:05:90:c7:2f:49:62:26:4e:68:d9:
dd:28:09:94:3d:ca:9b:c4:30:99:6f:8c:33:66:3e:
30:31:19:b6:2a:4f:7a:34:52:e4:96:23:17:5e:62:
01:be:0f:9d:f7:4b:0a:01:74:29:f5:32:2e:a8:82:
cc:81:e9:21:b2:a6:50:95:55:cf:87:a2:75:74:51:
b1:8f:58:2c:7c:d0:44:b9:02:ea:d4:2d:35:4a:fe:
e2:82:0f:8c:5c:d3:8a:92:03:1d:b0:8d:31:62:ef:
38:5e:e0:0d:b7:42:6f:3b:0c:44:cc:94:f7:4b:83:
84:b1:89:c8:16:36:9a:35:8d:87:7a:46:af:72:32:
48:72:bf:17:40:16:c5:b6:13:8d:f9:d9:6d:9a:11:
23:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B1:9F:53:EC:99:B9:5E:44:0F:FD:33:8E:10:E8:13:2B:83:07:85
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CCF64C5CB63C11EFAC143AA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a9b0::/44
Signature Algorithm: sha256WithRSAEncryption
0b:32:72:05:40:0d:48:19:ff:4d:da:9a:8c:50:ce:9e:c4:0c:
21:7d:fc:c1:28:be:22:89:0f:2e:7e:fc:60:b9:7c:7a:6d:74:
bd:f1:75:de:47:97:74:05:d1:0e:b2:13:e8:91:79:c7:f0:47:
10:b8:6c:25:d8:13:6d:36:9a:a5:0a:6a:3f:aa:85:07:6b:dc:
03:44:68:5c:22:06:c4:ec:f9:79:83:64:20:e8:6e:57:67:84:
d7:55:b5:f6:54:77:72:6f:cf:6c:a9:3b:f8:80:41:0f:9c:43:
ba:6e:b8:48:08:9e:a7:64:ca:86:0c:2a:3d:90:24:4b:19:71:
fd:97:de:27:98:92:00:05:fc:fa:dc:51:c1:af:0c:f2:f9:82:
9d:2d:55:46:95:a3:d8:6d:00:22:6c:5b:b3:fe:50:ea:6e:eb:
fe:cf:09:c0:d9:71:b3:ad:e0:6d:70:c9:86:d8:a1:9c:29:1f:
8d:3c:8b:23:88:48:7e:63:71:00:1c:24:fb:c1:68:9a:50:e0:
09:e9:9a:c3:f4:5a:0c:bd:74:5b:b7:ef:3a:5e:1d:a4:c5:62:
6b:ee:16:ee:48:e4:d1:08:bc:be:7b:a3:eb:ea:1e:8b:47:88:
8a:73:f3:4a:d2:7f:92:8b:8c:1e:b2:b5:98:7a:c9:99:f0:43:
1b:66:c0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:57:55 2025 by rpki-client