Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/3B9C0E80353211EF900BF8A1762E951A.roa
File: 3B9C0E80353211EF900BF8A1762E951A.roa (raw, json)
Hash identifier: MElZ7ONbYF4j1b7yLCYGG8hDaXP7MrOVtbEMu319Jmg=
Subject key identifier: 13:09:40:8E:E9:68:56:BB:31:1C:25:A4:96:4A:32:5C:27:D6:28:3C
Certificate issuer: /CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Certificate serial: 019D
Authority key identifier: C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/3B9C0E80353211EF900BF8A1762E951A.roa
Signing time: Fri 28 Jun 2024 09:38:54 +0000
ROA not before: Fri 28 Jun 2024 09:38:50 +0000
ROA not after: Fri 30 Jun 2034 09:38:50 +0000
asID: 37496
IP address blocks: 2001:43f8:680::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8BF7AF
Validity
Not Before: Jun 28 09:38:50 2024 GMT
Not After : Jun 30 09:38:50 2034 GMT
Subject: CN=667e84ae-0ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:be:5b:08:5d:d2:c5:6f:35:1b:6d:a1:da:
eb:a3:bf:62:44:a1:ac:91:37:da:5f:d7:07:54:22:
fb:61:48:4a:cb:0a:6f:6d:be:b6:63:56:ac:ef:8a:
18:d4:ab:a9:5b:6a:df:99:50:ff:45:99:51:ac:45:
d5:30:13:4a:67:7c:95:49:e3:db:98:56:47:9d:95:
c1:5e:64:d4:48:86:f0:2d:33:9b:54:8e:52:15:ed:
ea:7a:b4:e6:cf:02:fc:5b:c1:58:2c:2d:6c:cf:bb:
3d:a4:98:56:60:6b:c4:1c:a0:aa:86:1e:20:e2:14:
39:4c:ab:ad:05:95:da:f3:b5:8b:3b:93:90:b3:85:
3e:d2:07:b2:f4:b2:26:da:d9:4d:1f:1a:20:37:a1:
0d:a0:ad:f6:be:9f:5d:f9:17:5b:07:43:3a:22:f6:
2d:6d:f7:56:30:e5:d1:49:92:60:68:e9:71:8a:d7:
2b:93:0a:b4:ce:2f:fc:25:9d:c7:05:70:ca:20:7f:
37:eb:44:5a:da:48:f4:5f:cc:19:fc:dd:3a:b9:54:
06:a7:e4:d9:02:79:59:e9:93:08:9d:5c:c3:6b:8c:
c4:ce:43:22:65:6f:0d:31:2d:39:0d:fe:e6:ed:31:
85:97:2c:55:f0:0e:6d:5d:8a:12:98:f4:80:88:eb:
a0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:09:40:8E:E9:68:56:BB:31:1C:25:A4:96:4A:32:5C:27:D6:28:3C
X509v3 Authority Key Identifier:
keyid:C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/3B9C0E80353211EF900BF8A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:680::/48
Signature Algorithm: sha256WithRSAEncryption
b4:f2:1f:d6:e4:26:62:bb:89:46:cd:3e:44:15:7c:e6:a9:47:
b3:24:de:3d:53:8e:a3:e9:f9:06:bf:0e:89:b9:5c:da:c8:b1:
9b:5c:a2:af:d7:8e:c7:3e:50:86:0a:0f:ac:df:47:86:a0:db:
63:ed:a2:04:8d:7a:6b:c1:bc:d0:c2:98:0f:a8:69:8d:cb:5e:
cc:ed:56:9e:43:58:c4:ff:09:4a:de:e4:81:1d:d3:d6:67:76:
9e:b9:9c:bb:30:5d:b0:dd:78:26:ad:54:6f:11:5e:f3:ba:ce:
ec:5c:d0:d7:ed:89:dd:84:46:32:53:59:90:6b:9f:f5:6e:69:
03:40:f1:95:9d:c3:1d:fa:e0:96:2d:1b:97:04:a4:47:25:41:
c9:07:71:33:49:de:40:fa:d8:c4:13:7a:e8:2e:45:2a:c5:07:
18:27:5e:06:21:36:a0:98:e8:55:25:5f:6b:ce:29:27:37:39:
a4:cc:42:88:cc:b8:95:fc:a6:db:0e:ac:08:70:9a:6c:f7:7a:
b5:42:cf:c0:89:6f:d9:10:fe:a3:66:98:8d:3c:6c:c6:08:0e:
d5:db:82:eb:ed:87:62:60:15:aa:e8:cd:ef:14:d7:29:dd:4a:
18:a8:54:16:1a:32:4c:73:b2:0e:ba:3c:e4:6c:13:39:ed:bf:
86:34:53:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:53 2025 by rpki-client