Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/83F3DB32D1B211EF9334217C762E951A.roa
File: 83F3DB32D1B211EF9334217C762E951A.roa (raw, json)
Hash identifier: ISG8ILe2W2IxpAsqb/seypxE6lrcAl4MLmyqyncIBh8=
Subject key identifier: 72:C3:99:4A:CD:D4:B9:65:CC:64:F9:E6:F4:B4:8F:58:81:D5:98:47
Certificate issuer: /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial: 0297
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/83F3DB32D1B211EF9334217C762E951A.roa
Signing time: Mon 13 Jan 2025 13:30:12 +0000
ROA not before: Mon 13 Jan 2025 13:30:08 +0000
ROA not after: Tue 01 Jan 2030 13:30:08 +0000
asID: 37684
IP address blocks: 2c0f:f408::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663 (0x297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CAF
Validity
Not Before: Jan 13 13:30:08 2025 GMT
Not After : Jan 1 13:30:08 2030 GMT
Subject: CN=67851564-0d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:35:3a:45:07:5b:85:d7:9d:cf:33:b2:17:
f1:5d:a1:af:f2:bb:e6:42:29:fa:15:99:d0:0d:4b:
d3:b7:4e:85:1d:0a:8f:e4:85:82:7f:84:75:61:b0:
5b:b9:3c:6e:80:b3:f5:26:ae:06:f7:c6:a2:bf:00:
6e:a0:ec:05:6e:a4:9c:7a:03:9f:4f:27:dd:a0:33:
b9:ad:c7:07:0e:e2:26:28:b1:16:ca:ea:f9:8c:a5:
8f:c7:2e:00:3d:09:ee:d3:c2:d2:61:b5:b4:c2:7a:
83:5d:77:9e:33:a4:08:b8:13:23:aa:d2:bc:10:58:
c7:aa:42:45:a2:27:84:37:b9:e0:d6:32:de:3e:2f:
47:63:ea:a7:d1:7e:74:2d:0b:bf:12:59:23:40:58:
7f:40:c6:66:1f:f5:68:6f:50:fa:91:a6:6c:0e:2d:
be:dc:23:1a:9e:4f:0c:f2:7d:1c:18:50:e1:c4:d3:
bb:4f:10:32:2e:38:a7:db:c9:ff:f7:ea:cf:ba:bd:
5f:e8:ba:1d:9c:55:38:fe:9e:de:2d:8a:ff:ad:3c:
71:2a:b6:3a:3a:51:7e:fa:d9:f2:3c:44:9b:e7:f8:
80:d9:e9:0f:3a:a6:6e:d9:96:d6:2a:f9:fc:48:f8:
f6:a2:6e:21:67:fe:11:42:78:0d:28:cd:23:44:38:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C3:99:4A:CD:D4:B9:65:CC:64:F9:E6:F4:B4:8F:58:81:D5:98:47
X509v3 Authority Key Identifier:
keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/83F3DB32D1B211EF9334217C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f408::/40
Signature Algorithm: sha256WithRSAEncryption
9b:77:52:af:8f:2a:16:67:f3:c4:79:e4:d1:a3:e2:03:7b:ca:
a0:9c:57:b2:52:07:59:db:8c:ac:92:48:c3:fb:82:9e:e9:92:
f6:9c:75:9c:d6:e1:66:d8:74:53:1f:83:27:66:9d:42:37:bd:
af:2b:e2:6c:93:7a:8a:2c:11:d5:30:58:12:ad:d0:52:86:d8:
f3:f4:c6:99:f7:a9:58:c6:55:a8:cf:6b:df:b6:be:54:f7:d6:
1a:a1:fe:b5:9f:5f:9a:39:f9:08:c5:e2:a8:41:f8:43:88:bd:
4a:6f:af:e3:59:9f:5c:f7:15:40:9c:d9:6d:77:b1:19:ce:fa:
eb:99:08:7f:1a:26:42:5a:c8:7e:47:5d:05:dd:c4:7d:9c:1b:
47:b9:6f:e1:66:86:27:76:0d:b9:61:21:15:c0:37:61:f4:20:
94:18:39:dd:c1:44:c1:64:eb:9a:f8:45:30:ff:02:b9:fd:a8:
5b:c1:3a:b8:5f:2c:b5:3a:a9:03:b5:5a:ce:34:80:05:bd:45:
6f:dc:59:e6:66:ab:cc:9e:22:c0:31:fa:62:59:e4:0a:68:5d:
01:97:6f:7b:02:b3:a9:7f:b0:51:29:07:13:50:43:aa:22:aa:
37:2d:a9:3e:35:fe:f4:33:02:5f:6c:8d:ed:1a:99:0f:a7:b3:
7d:71:d5:5f
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICApcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTJCOENBRjExMC8GA1UEBRMoODcyMTMwRTY5QjNGQjgwMzVCMUIyNUQzRjZGQjk3
NEEyQTA3OEVDQzAeFw0yNTAxMTMxMzMwMDhaFw0zMDAxMDExMzMwMDhaMBgxFjAU
BgNVBAMTDTY3ODUxNTY0LTBkMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC40zU6RQdbhdedzzOyF/Fdoa/yu+ZCKfoVmdANS9O3ToUdCo/khYJ/hHVh
sFu5PG6As/Umrgb3xqK/AG6g7AVupJx6A59PJ92gM7mtxwcO4iYosRbK6vmMpY/H
LgA9Ce7TwtJhtbTCeoNdd54zpAi4EyOq0rwQWMeqQkWiJ4Q3ueDWMt4+L0dj6qfR
fnQtC78SWSNAWH9AxmYf9WhvUPqRpmwOLb7cIxqeTwzyfRwYUOHE07tPEDIuOKfb
yf/36s+6vV/ouh2cVTj+nt4tiv+tPHEqtjo6UX762fI8RJvn+IDZ6Q86pm7ZltYq
+fxI+PaibiFn/hFCeA0ozSNEOP0BAgMBAAGjggKnMIICozAdBgNVHQ4EFgQUcsOZ
Ss3UuWXMZPnm9LSPWIHVmEcwHwYDVR0jBBgwFoAUhyEw5ps/uANbGyXT9vuXSioH
jswwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUyQjhDL0M4RjlERjFFMEI2MjExRUU4NjJEODY4QTRBRDlFNkZDL2h5RXc1
cHNfdUFOYkd5WFQ5dnVYU2lvSGpzdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2h5RXc1cHNfdUFOYkd5WFQ5dnVYU2lvSGpzdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkUyQjhDL0M4RjlERjFFMEI2MjExRUU4NjJEODY4QTRB
RDlFNkZDLzgzRjNEQjMyRDFCMjExRUY5MzM0MjE3Qzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAsD/QIADANBgkqhkiG9w0B
AQsFAAOCAQEAm3dSr48qFmfzxHnk0aPiA3vKoJxXslIHWduMrJJIw/uCnumS9px1
nNbhZth0Ux+DJ2adQje9ryvibJN6iiwR1TBYEq3QUobY8/TGmfepWMZVqM9r37a+
VPfWGqH+tZ9fmjn5CMXiqEH4Q4i9Sm+v41mfXPcVQJzZbXexGc7665kIfxomQlrI
fkddBd3EfZwbR7lv4WaGJ3YNuWEhFcA3YfQglBg53cFEwWTrmvhFMP8Cuf2oW8E6
uF8stTqpA7VazjSABb1Fb9xZ5marzJ4iwDH6YlnkCmhdAZdvewKzqX+wUSkHE1BD
qiKqNy2pPjX+9DMCX2yN7RqZD6ezfXHVXw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:01 2025 by rpki-client