Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F652BA92B61C11EF8B300962762E951A.roa
File: F652BA92B61C11EF8B300962762E951A.roa (raw, json)
Hash identifier: w5Gt0XvIGDyd54JwAoPQP6qtxgbG6/QzbFqpuCJ+ZdE=
Subject key identifier: 0B:E7:17:0F:C2:33:91:A9:1F:95:C3:B0:46:DD:97:E3:85:B6:08:15
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 072F
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F652BA92B61C11EF8B300962762E951A.roa
Signing time: Mon 09 Dec 2024 11:01:38 +0000
ROA not before: Mon 09 Dec 2024 11:01:34 +0000
ROA not after: Sat 30 Jul 2033 11:01:34 +0000
asID: 37119
IP address blocks: 2c0f:f888:a120::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1839 (0x72f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 11:01:34 2024 GMT
Not After : Jul 30 11:01:34 2033 GMT
Subject: CN=6756ce12-ddda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:37:e6:6d:ba:7a:e2:67:ef:80:bd:b2:b2:
36:55:80:b4:e6:3f:b0:8d:3d:53:60:c0:8f:df:80:
22:77:2c:50:3f:1d:d5:8f:b8:91:75:bf:ad:4f:21:
46:ae:37:7b:5f:cb:46:4b:f0:5a:2a:13:8a:36:58:
23:a2:9d:0c:7f:64:a4:55:81:b9:db:dc:d8:8a:17:
31:22:c6:95:c4:14:86:cc:5c:20:78:4c:67:20:5c:
1c:db:3b:ef:fd:b7:9e:b8:00:0c:a0:c4:03:83:ce:
9b:65:c3:d0:02:ea:d8:a4:2e:a0:dc:3d:3f:76:80:
af:85:f6:ae:10:ab:a7:be:53:1d:70:b4:26:50:e2:
70:ba:c6:40:75:ed:c3:41:eb:2e:54:d1:28:38:81:
7c:e9:32:43:0a:eb:f7:f6:36:ad:5e:4f:1f:38:0d:
d5:d1:10:2f:08:d3:12:76:12:2c:92:29:da:d1:5a:
33:8f:fb:3b:4b:89:65:9a:68:33:37:e6:a4:f5:f9:
1d:6e:4c:2c:b4:63:59:77:75:c2:cd:cf:a6:47:4a:
fd:68:8e:d0:b1:b1:7c:15:34:84:89:83:dc:16:6b:
be:1d:0c:b3:c0:56:04:37:6f:8d:f5:16:b0:13:bf:
ed:90:06:30:27:d6:a0:dc:06:d2:5f:15:a3:d5:57:
77:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E7:17:0F:C2:33:91:A9:1F:95:C3:B0:46:DD:97:E3:85:B6:08:15
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F652BA92B61C11EF8B300962762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a120::/44
Signature Algorithm: sha256WithRSAEncryption
c0:1a:79:8b:0e:61:1d:7f:a7:11:eb:1e:09:c9:c8:70:d3:f9:
a9:ab:bf:da:47:a0:8e:9e:6a:cd:65:27:7d:a7:f0:cd:02:ff:
79:15:e4:85:f7:9b:8f:f2:c3:4c:36:95:b4:fa:4a:d1:36:66:
56:4b:ea:e7:e6:26:51:98:25:8c:4d:7d:13:c8:02:dd:ef:5c:
70:09:4a:1c:2a:47:8d:90:a6:05:5c:ec:c9:a1:26:9a:6b:c8:
7d:44:93:3b:1e:cc:f2:75:43:73:83:a0:b9:3a:ac:13:18:2d:
6a:84:6a:53:b2:4e:56:bd:0d:28:96:c8:cb:f7:2b:7c:e1:c1:
23:58:9e:95:ed:ee:97:fe:9c:33:d6:1c:cb:95:84:83:54:a0:
50:8b:47:db:e8:07:a5:c6:14:95:ea:72:a6:1b:be:be:52:d1:
37:cb:f0:89:84:12:89:7f:00:36:fc:27:98:45:c8:0b:e7:07:
35:1a:8e:92:3e:fe:43:b0:86:6d:98:91:61:b6:dc:18:7f:a0:
61:8f:09:13:45:04:f4:fb:7c:e9:59:35:fb:9d:35:1a:1f:c9:
73:b0:05:a6:78:e8:94:27:8e:82:0c:ef:6b:2c:3a:42:a5:67:
80:eb:4e:7d:bb:47:52:3f:31:f4:6b:7b:f8:cb:7e:fe:54:aa:
3d:73:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:50 2025 by rpki-client