Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/8B9981B4D1B411EF8E1B9C88762E951A.roa
File: 8B9981B4D1B411EF8E1B9C88762E951A.roa (raw, json)
Hash identifier: tm49JQ/az2bLBxn4bJbR8uYdImEtSTPE410n/e1S+rA=
Subject key identifier: FF:7A:78:33:0F:DC:1E:56:01:01:A2:84:4B:74:34:07:0F:63:20:6F
Certificate issuer: /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial: 0299
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/8B9981B4D1B411EF8E1B9C88762E951A.roa
Signing time: Mon 13 Jan 2025 13:44:44 +0000
ROA not before: Mon 13 Jan 2025 13:44:40 +0000
ROA not after: Tue 01 Jan 2030 13:44:40 +0000
asID: 37684
IP address blocks: 2c0f:f408:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CAF
Validity
Not Before: Jan 13 13:44:40 2025 GMT
Not After : Jan 1 13:44:40 2030 GMT
Subject: CN=678518cc-9f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:2e:ee:57:72:01:6c:c1:67:c7:12:44:f5:
42:0c:2b:f6:56:30:f0:8b:ad:9a:fc:8d:82:04:08:
34:9b:82:73:90:bc:eb:87:bb:37:27:a6:e7:9a:a1:
46:c9:af:06:4b:e6:11:70:91:92:b4:9f:f9:48:40:
48:c6:76:74:c5:9e:8e:80:49:49:5a:d3:ca:87:fb:
15:26:ae:c6:e9:fa:81:b4:39:00:0c:2b:fa:42:c3:
f6:ea:76:95:e5:7b:a4:27:a8:7a:90:68:52:dd:d0:
e6:8a:2f:01:31:9c:05:cb:1d:25:7e:b4:49:e4:bf:
da:8c:d6:db:6e:46:d4:bd:4a:05:06:30:ab:64:93:
9f:85:16:82:de:29:f6:02:4d:2d:c8:27:f9:dc:60:
86:c7:22:36:f6:a1:eb:03:b2:08:8d:5f:86:74:c4:
5a:42:9b:15:aa:ee:63:2c:bd:d9:d9:1d:99:55:0c:
98:99:d2:b3:96:31:4a:14:b0:38:d8:f7:d1:c6:68:
54:19:d1:5a:d3:8c:e0:9a:9d:68:13:13:8e:7c:68:
31:8c:a8:8f:cb:5b:b9:de:0f:de:91:f7:9a:2e:60:
48:2c:30:47:d9:de:ee:7c:1a:08:92:22:1c:b0:f7:
10:08:39:3e:d5:e8:f4:26:3f:40:06:f2:84:ad:78:
84:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7A:78:33:0F:DC:1E:56:01:01:A2:84:4B:74:34:07:0F:63:20:6F
X509v3 Authority Key Identifier:
keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/8B9981B4D1B411EF8E1B9C88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f408:2000::/40
Signature Algorithm: sha256WithRSAEncryption
60:88:78:70:63:07:59:73:95:11:04:92:af:49:2d:bd:f4:50:
23:ab:5d:fe:a1:75:3c:87:9a:7e:f0:14:cc:f1:ef:2f:a1:43:
4d:3a:27:68:5a:d9:f6:3d:d6:ff:9c:26:95:79:9d:dc:40:ca:
7d:2d:7d:9f:64:cd:ae:82:66:68:db:bd:ef:d1:c2:7e:a7:a8:
6f:e0:17:0b:56:f3:89:22:a2:07:a2:57:39:1e:e2:0c:c8:da:
72:fc:7d:75:a1:b5:87:07:e4:de:52:d3:97:10:2f:98:75:d4:
eb:7f:9f:6e:6a:a4:8f:df:a9:43:9d:73:5f:3d:46:86:99:e2:
52:8d:69:42:70:4d:e6:8c:d6:1a:57:25:a8:81:1d:bc:64:68:
f8:6b:67:c1:b9:20:95:0d:04:fa:77:72:61:19:7a:2b:00:d4:
1e:b2:be:05:d1:cd:b1:ba:ff:4c:2c:7b:1b:22:5c:a8:cb:c8:
85:b2:b7:23:2a:4f:99:72:a2:12:27:10:ad:53:d3:11:36:66:
a5:60:02:d7:c4:75:5d:a6:37:88:fb:d1:2c:44:4e:7b:94:58:
bb:c0:d6:ad:9c:32:56:26:cf:1c:eb:bb:7e:6d:05:55:93:21:
fc:85:44:f0:a1:ec:d4:91:e6:f3:20:98:a3:45:3a:de:34:2d:
56:11:c3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:04 2025 by rpki-client