Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/3F9659F6FA5711EFA9433954762E951A.roa
File: 3F9659F6FA5711EFA9433954762E951A.roa (raw, json)
Hash identifier: qKiDyS4k3Pb0vrru4mPYqluJ2Rx/UxF8Iobn+ms5BiI=
Subject key identifier: CB:DB:08:49:25:E6:AF:83:7E:06:32:D3:C4:C8:CE:7E:00:1D:00:18
Certificate issuer: /CN=F36EE687AF/serialNumber=789ADAD338C20D7244DC7BE6D0F44A9253FC8F13
Certificate serial: 02
Authority key identifier: 78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/3F9659F6FA5711EFA9433954762E951A.roa
Signing time: Thu 06 Mar 2025 06:50:11 +0000
ROA not before: Thu 06 Mar 2025 06:50:06 +0000
ROA not after: Fri 06 Mar 2026 06:50:06 +0000
asID: 328980
IP address blocks: 2001:43ff:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EE687AF
Validity
Not Before: Mar 6 06:50:06 2025 GMT
Not After : Mar 6 06:50:06 2026 GMT
Subject: CN=67c945a3-2290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:b8:b7:11:47:de:c8:03:20:06:82:d0:b4:
85:a1:4f:6c:a8:b6:25:5e:54:04:03:1a:29:c6:b0:
f6:3a:e8:70:a9:b8:ba:da:bd:45:af:62:05:7f:9b:
94:53:b3:29:60:59:e7:a3:f5:a1:a9:c7:23:e9:2f:
c9:1c:fd:42:0a:ff:6f:c5:30:d4:9d:fc:ef:0c:bc:
73:ec:e9:c7:fc:c6:bd:8f:9a:bb:cf:d4:12:1a:16:
71:8e:9f:84:bd:85:20:bb:71:89:ad:29:30:40:b2:
3c:4e:5a:41:d4:20:1f:9f:a6:cd:0b:65:51:36:53:
28:57:70:6a:94:ab:62:f5:68:44:79:9f:af:cd:f1:
7b:17:f1:e9:56:2e:f7:19:24:70:ce:0e:41:32:28:
f1:8d:d3:61:91:37:ee:9e:9e:76:67:a3:f3:41:9b:
69:7d:52:6a:52:a9:f8:4b:4a:6a:4e:a7:1a:ab:8e:
fe:91:3a:6a:e7:4f:36:ed:9d:f5:c6:8f:b6:39:b0:
64:28:e0:74:ba:58:7d:3b:f2:c0:5f:29:2f:ca:c1:
69:5f:4b:e1:c6:6e:5f:0d:20:dc:2e:ef:8a:6e:71:
ba:f5:e9:55:91:41:3f:b7:de:8f:3a:00:bd:da:b8:
42:d4:de:ed:1e:44:83:7d:68:cc:ea:03:3f:c1:76:
7a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DB:08:49:25:E6:AF:83:7E:06:32:D3:C4:C8:CE:7E:00:1D:00:18
X509v3 Authority Key Identifier:
keyid:78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/3F9659F6FA5711EFA9433954762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43ff:2000::/48
Signature Algorithm: sha256WithRSAEncryption
c2:95:e9:62:22:ef:ff:3b:6a:29:67:04:d4:ff:7a:9f:95:d2:
a2:1a:7d:12:40:0d:c8:fc:1e:f0:0e:22:2b:8d:5b:d2:b4:02:
75:d6:4f:94:67:c8:03:34:30:27:da:c8:ea:82:a7:f3:0f:20:
4c:f1:5a:6f:9d:c0:b7:bc:a6:85:12:2a:e1:bb:9c:cc:bd:c3:
52:1d:dc:de:06:4a:1e:b0:4e:f1:85:62:8d:18:8a:38:e7:f6:
85:3f:06:a0:bd:ae:27:85:84:9e:8f:f7:4a:b7:60:70:49:93:
4f:fb:b7:50:a8:3b:c5:19:8f:8e:49:90:33:22:95:aa:b1:f7:
0d:3b:b3:9e:66:91:a8:71:26:00:4f:b9:6e:9e:a2:68:fa:5c:
a1:3e:81:e9:22:f2:5f:ef:75:24:95:0d:55:40:72:9b:96:d2:
4b:bf:a0:17:88:d5:47:ac:b0:60:f0:2b:40:14:3c:81:2c:54:
60:95:90:97:08:4f:d2:d6:4d:e7:c8:2a:28:e7:a6:54:a0:08:
93:48:ba:dc:5d:da:0c:f5:61:d9:7d:41:f8:d2:31:1d:ba:a3:
b5:d3:59:61:2a:c0:c4:d4:45:66:1c:aa:9f:2f:2f:f0:fd:f8:
4b:2d:f4:1e:c3:a3:57:02:21:1f:be:97:a6:5a:8b:9f:d5:5c:
0a:28:93:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:41 2025 by rpki-client