Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/51D56DFEFE6311EF8981AA93762E951A.roa
File: 51D56DFEFE6311EF8981AA93762E951A.roa (raw, json)
Hash identifier: v1iecGoXLrBsavXRX1kf0YmMMDAB2gV9RZnpPeiZxzU=
Subject key identifier: D6:0D:D1:3C:D0:32:9A:75:DA:7C:54:DD:CA:85:F8:45:50:FF:53:10
Certificate issuer: /CN=F36DA6FBAF/serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
Certificate serial: 04
Authority key identifier: 4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/51D56DFEFE6311EF8981AA93762E951A.roa
Signing time: Tue 11 Mar 2025 10:26:40 +0000
ROA not before: Tue 11 Mar 2025 10:26:36 +0000
ROA not after: Wed 11 Mar 2026 10:26:36 +0000
asID: 329393
IP address blocks: 2c0f:17c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA6FBAF
Validity
Not Before: Mar 11 10:26:36 2025 GMT
Not After : Mar 11 10:26:36 2026 GMT
Subject: CN=67d00fe0-f65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2a:d8:aa:0a:36:42:e7:d7:ff:20:5e:19:7a:
1a:0d:79:01:d9:33:5d:1f:a8:ea:fa:10:ab:28:83:
61:1a:9b:b2:00:52:07:f1:c3:98:6a:1d:7f:f9:5d:
1a:54:79:b5:e4:61:09:67:c9:09:aa:b0:10:bc:7c:
51:4d:80:f1:11:cc:5c:64:09:ba:cb:e7:ac:14:3e:
e7:11:09:11:76:c4:b9:8d:50:72:c1:76:03:24:be:
3b:5c:c8:10:64:50:04:1d:1b:83:7e:21:44:63:27:
5d:8d:ca:47:97:1f:c7:60:bb:dd:72:b9:c7:bc:d5:
30:f7:3a:2e:ee:df:13:a8:d4:21:3f:3e:dc:a3:d7:
0e:6b:2a:e1:47:df:49:5a:2f:a4:4b:1b:ca:49:a1:
20:8c:a0:86:7f:72:56:36:2e:52:db:2f:89:7b:8b:
4f:f7:e6:ce:83:f0:ae:4a:7c:a5:6b:87:7e:78:7e:
8e:6a:30:b5:61:06:bc:65:d5:2e:27:a2:fc:40:3d:
34:a5:65:6a:7a:4e:89:8f:57:cf:81:d7:64:70:12:
a3:6a:b3:7b:ac:70:97:68:20:47:bd:07:32:4f:ed:
15:f0:74:3f:2a:1b:00:2e:26:c2:8a:54:0c:56:08:
6d:0e:ab:97:68:ab:a0:77:04:27:da:0f:ac:ef:dd:
9f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0D:D1:3C:D0:32:9A:75:DA:7C:54:DD:CA:85:F8:45:50:FF:53:10
X509v3 Authority Key Identifier:
keyid:4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/51D56DFEFE6311EF8981AA93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:17c0::/32
Signature Algorithm: sha256WithRSAEncryption
30:0c:2e:f7:3b:ae:99:09:40:c4:34:25:fa:c4:a8:19:35:fc:
3d:c3:93:9d:06:77:11:bd:fb:10:70:dc:7a:80:f7:fa:3a:0c:
5a:18:2b:7c:0b:2a:1a:ba:30:31:45:fb:30:43:fc:42:0b:ae:
20:89:cd:24:2c:0f:50:e0:2a:8c:78:2d:fa:63:69:a0:8d:3d:
1d:16:8e:15:13:02:08:37:e1:60:81:8a:83:dd:3d:86:93:22:
8b:8e:5e:49:3d:08:ae:89:39:1c:86:e9:dc:29:d3:a4:ac:3d:
51:ff:44:56:49:e7:6f:d5:db:a0:4b:0b:72:a7:c3:b9:f4:14:
5d:d6:09:b9:b7:9a:c6:59:e9:7c:05:f0:32:92:a9:d8:eb:1f:
db:f9:84:85:41:f8:04:21:25:fc:c5:da:10:39:e3:bb:cd:41:
df:cb:ac:8c:7d:9b:9f:5e:12:ba:16:c5:85:d2:d6:ed:c7:33:
61:12:f4:c7:66:e9:62:6b:52:7b:f1:04:da:50:ee:b0:fa:f7:
a4:bd:46:c4:1d:63:03:bd:8b:33:e2:5c:17:eb:70:e1:a8:dc:
f4:79:69:c2:d9:bf:e2:a7:fc:6d:68:65:82:14:bb:4a:46:3e:
e8:e5:6d:48:ee:26:77:37:3b:ef:e4:5f:84:43:09:0c:c8:06:
27:66:fc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:06:15 2025 by rpki-client