Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E49F0D08B63711EF8FADA387762E951A.roa
File: E49F0D08B63711EF8FADA387762E951A.roa (raw, json)
Hash identifier: BY9VfSi/rqTyLehLL8AC3v0+RpVqRL0cjkGL2yi8+hs=
Subject key identifier: D6:1F:74:E1:50:0B:FA:CB:45:D1:33:9D:51:03:47:80:C7:90:34:91
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 073D
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E49F0D08B63711EF8FADA387762E951A.roa
Signing time: Mon 09 Dec 2024 14:14:25 +0000
ROA not before: Mon 09 Dec 2024 14:14:21 +0000
ROA not after: Sat 30 Jul 2033 14:14:21 +0000
asID: 37119
IP address blocks: 2c0f:f888:a810::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1853 (0x73d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 14:14:21 2024 GMT
Not After : Jul 30 14:14:21 2033 GMT
Subject: CN=6756fb41-1bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:41:9b:cf:c2:a3:2f:96:2a:ee:c0:e3:fa:
6c:30:b6:ae:1c:47:3e:1d:b3:0e:c4:4a:ce:1c:bc:
c0:91:16:66:34:4a:e6:d2:23:94:6d:86:d1:c9:fa:
49:7d:53:ed:03:60:78:c4:4b:c6:40:78:a4:90:78:
09:8c:6f:87:52:59:7f:f0:35:c0:6e:2f:94:ae:ee:
03:a9:07:c5:50:c7:18:6e:26:a5:ae:a0:11:33:21:
cc:cb:23:01:00:16:52:4f:59:7c:af:e7:2e:4c:c5:
0c:82:a1:9c:98:ba:f0:69:5e:f7:c7:b2:47:90:b6:
ff:5e:b8:96:4a:07:32:d9:1c:51:49:08:68:e2:91:
3d:6d:f9:53:4b:c7:d2:7c:26:46:bc:c0:6c:65:e5:
af:8f:55:28:2b:57:3b:f9:ea:18:4f:94:67:87:87:
79:13:e5:fb:ca:35:9e:8f:e9:bd:db:a5:f2:f3:6a:
e7:8a:b7:99:30:5e:1b:29:e2:a8:85:42:72:2a:20:
21:1b:fa:49:3b:58:ff:1c:55:53:1d:85:4f:7d:d4:
d4:66:14:de:22:d0:f0:89:1f:6d:79:d2:63:a7:94:
80:17:c8:88:4a:93:47:ec:53:8d:02:bf:8b:70:56:
77:e5:46:86:64:3c:ab:ac:a7:63:93:9e:b4:d1:49:
58:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1F:74:E1:50:0B:FA:CB:45:D1:33:9D:51:03:47:80:C7:90:34:91
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E49F0D08B63711EF8FADA387762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a810::/44
Signature Algorithm: sha256WithRSAEncryption
03:d8:5d:d4:b3:e7:e4:b4:fc:00:e8:9c:00:69:99:99:bc:a4:
63:f0:1b:27:6c:fd:39:11:6b:d9:c5:4a:cf:56:ee:ad:59:f8:
0c:52:21:3d:c5:6d:e4:a3:45:e1:21:56:d8:bb:3a:a6:c0:5e:
f6:cb:da:5f:07:fb:66:18:60:0a:9b:4b:73:71:0f:e9:a6:5e:
2f:32:c1:93:0e:49:73:1c:b9:94:a8:b2:54:8e:fd:9f:b6:ad:
e3:3e:ff:83:11:09:8e:a4:20:fa:37:a7:cc:8e:65:14:be:f3:
3c:70:d6:e9:49:aa:4b:3e:43:7a:43:f1:ba:c9:67:34:2d:b8:
d2:50:09:c6:0c:f4:bf:fd:01:be:8e:cc:87:af:88:f8:e6:2f:
f2:1d:69:79:e4:89:62:a4:73:20:32:21:bb:a3:94:1b:80:96:
c8:dd:39:19:2f:0d:e2:04:a0:9a:25:f9:c5:ce:02:cc:10:cd:
bf:61:71:f2:d4:40:aa:07:b2:a4:b9:2e:9b:79:96:4e:83:7e:
72:9e:ae:c4:08:b6:41:a4:68:18:36:80:df:86:e5:7d:69:e4:
50:c9:42:63:47:b3:43:74:54:5b:2d:59:55:3a:2b:e5:17:1c:
74:ed:7c:9a:d0:03:f4:4f:49:d6:75:a9:65:c2:a1:7a:ab:47:
f7:af:c4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:17:25 2025 by rpki-client