Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ACBC7B985EE711EFA0CEB651762E951A.roa
File: ACBC7B985EE711EFA0CEB651762E951A.roa (raw, json)
Hash identifier: Lm7KJ7SFgJLbSpFAPyUvvIcKQ0yWjLdyzLN+7Alu3nM=
Subject key identifier: 36:98:E7:E0:80:5F:06:33:AF:DC:7F:57:73:63:61:79:DF:73:0B:30
Certificate issuer: /CN=F36DE5F0AF/serialNumber=BA2F5924438729C5C7BA808073761CEC347E3CBA
Certificate serial: 011D
Authority key identifier: BA:2F:59:24:43:87:29:C5:C7:BA:80:80:73:76:1C:EC:34:7E:3C:BA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ACBC7B985EE711EFA0CEB651762E951A.roa
Signing time: Tue 20 Aug 2024 11:31:00 +0000
ROA not before: Tue 20 Aug 2024 11:30:49 +0000
ROA not after: Sun 31 Dec 2034 11:30:49 +0000
asID: 329325
IP address blocks: 2c0f:6c0::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE5F0AF
Validity
Not Before: Aug 20 11:30:49 2024 GMT
Not After : Dec 31 11:30:49 2034 GMT
Subject: CN=66c47e74-2cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:b6:1e:f2:32:cf:38:ca:b4:33:8e:79:90:
c7:20:76:2f:c1:f1:f1:ef:36:7c:92:78:44:63:6d:
17:27:ba:b0:95:4e:4f:ee:0b:9e:dc:ea:25:cd:2a:
9e:2b:69:0b:4b:b3:98:e8:1c:ca:15:c0:c9:f3:fb:
92:f9:e6:28:10:c7:55:32:57:ed:f3:f8:35:65:d4:
d0:53:32:84:2f:5f:0e:ac:76:ab:a3:5e:1b:47:74:
bb:0c:eb:6c:51:a6:33:b0:5c:fb:4e:79:fb:0a:79:
d3:f6:03:2b:b9:26:13:f3:01:3e:be:cf:08:b7:b5:
a5:12:b7:f7:5b:6f:ff:ac:f1:93:0e:c9:f9:8f:86:
98:2f:e2:dd:5f:b7:38:f4:b0:6f:69:a1:0f:f0:b0:
76:de:45:99:62:90:bb:d0:f3:af:32:46:63:52:80:
7d:65:f6:e5:4c:2a:f3:30:9b:82:97:62:13:a0:50:
63:a7:8d:a2:63:8d:2d:8c:9f:a8:18:45:74:e0:05:
1a:dc:79:dd:ac:bb:25:19:ec:6d:ca:06:39:50:ab:
99:42:f9:c6:8c:fa:7f:1a:13:e2:e1:3f:f7:27:31:
df:7f:38:b4:83:26:34:b1:cc:e5:29:0e:ce:8d:a4:
d0:ec:bf:35:3d:05:b2:96:b1:9f:38:2b:33:ef:1c:
c6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:98:E7:E0:80:5F:06:33:AF:DC:7F:57:73:63:61:79:DF:73:0B:30
X509v3 Authority Key Identifier:
keyid:BA:2F:59:24:43:87:29:C5:C7:BA:80:80:73:76:1C:EC:34:7E:3C:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ACBC7B985EE711EFA0CEB651762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:6c0::/28
Signature Algorithm: sha256WithRSAEncryption
44:78:b9:b7:69:58:a6:e2:67:d6:09:ce:b7:05:99:33:40:8a:
8a:33:13:d7:3d:1b:c9:c3:8f:50:7c:7f:02:ba:b8:9f:37:1c:
71:c1:59:00:ca:cc:4c:2d:df:0c:c0:f9:ff:49:68:c1:13:2f:
aa:64:d5:44:fc:3a:7d:2f:71:ea:3c:26:a8:7d:e3:d4:52:11:
74:48:89:75:33:80:9e:69:d8:4d:ad:2e:4a:0c:43:30:32:29:
62:77:20:67:c3:cc:d8:7e:1b:54:a2:66:6f:f2:6f:32:e6:07:
0f:37:21:c1:ee:16:b4:42:91:b4:a8:fa:ca:0b:4b:5d:24:05:
ce:bf:33:ba:79:1b:06:40:6f:49:31:bc:19:ac:0c:c3:c4:e4:
71:74:a0:00:af:3f:af:c5:f3:5e:6c:03:85:8f:b6:50:b7:3d:
e5:a4:68:c7:ac:9a:1a:cc:3f:cb:8b:bf:82:49:07:ac:6b:85:
e6:f6:b0:22:a0:9d:4e:e6:15:95:5a:08:fe:0a:6f:4b:20:1c:
e2:9d:92:bc:60:85:f5:17:bd:e1:08:ef:51:60:f5:ab:5d:58:
9d:01:a8:01:b7:9b:32:de:a2:d4:d2:4d:ce:85:44:b0:3b:d2:
9e:bb:f7:c4:50:e4:2e:ea:8d:c0:46:a6:2a:3c:56:e3:fd:a5:
8f:d6:e6:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REU1RjBBRjExMC8GA1UEBRMoQkEyRjU5MjQ0Mzg3MjlDNUM3QkE4MDgwNzM3NjFD
RUMzNDdFM0NCQTAeFw0yNDA4MjAxMTMwNDlaFw0zNDEyMzExMTMwNDlaMBgxFjAU
BgNVBAMTDTY2YzQ3ZTc0LTJjYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFerYe8jLPOMq0M455kMcgdi/B8fHvNnySeERjbRcnurCVTk/uC57c6iXN
Kp4raQtLs5joHMoVwMnz+5L55igQx1UyV+3z+DVl1NBTMoQvXw6sdqujXhtHdLsM
62xRpjOwXPtOefsKedP2Ayu5JhPzAT6+zwi3taUSt/dbb/+s8ZMOyfmPhpgv4t1f
tzj0sG9poQ/wsHbeRZlikLvQ868yRmNSgH1l9uVMKvMwm4KXYhOgUGOnjaJjjS2M
n6gYRXTgBRrced2suyUZ7G3KBjlQq5lC+caM+n8aE+LhP/cnMd9/OLSDJjSxzOUp
Ds6NpNDsvzU9BbKWsZ84KzPvHMbDAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUNpjn
4IBfBjOv3H9Xc2Nhed9zCzAwHwYDVR0jBBgwFoAUui9ZJEOHKcXHuoCAc3Yc7DR+
PLowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRFNUYwLzA1QTdDQkNDODkyRDExRUU5MzhBMEExNTRBRDlFNkZDL3VpOVpK
RU9IS2NYSHVvQ0FjM1ljN0RSLVBMby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3VpOVpKRU9IS2NYSHVvQ0FjM1ljN0RSLVBMby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkRFNUYwLzA1QTdDQkNDODkyRDExRUU5MzhBMEExNTRB
RDlFNkZDL0FDQkM3Qjk4NUVFNzExRUZBMENFQjY1MTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQQsDwbAMA0GCSqGSIb3DQEB
CwUAA4IBAQBEeLm3aVim4mfWCc63BZkzQIqKMxPXPRvJw49QfH8CurifNxxxwVkA
ysxMLd8MwPn/SWjBEy+qZNVE/Dp9L3HqPCaofePUUhF0SIl1M4CeadhNrS5KDEMw
MilidyBnw8zYfhtUomZv8m8y5gcPNyHB7ha0QpG0qPrKC0tdJAXOvzO6eRsGQG9J
MbwZrAzDxORxdKAArz+vxfNebAOFj7ZQtz3lpGjHrJoazD/Li7+CSQesa4Xm9rAi
oJ1O5hWVWgj+Cm9LIBzinZK8YIX1F73hCO9RYPWrXVidAagBt5sy3qLU0k3OhUSw
O9Keu/fEUOQu6o3ARqYqPFbj/aWP1ubR
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:44 2025 by rpki-client