Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/70FA4310DCE111EF90F8E0A3762E951A.roa
File: 70FA4310DCE111EF90F8E0A3762E951A.roa (raw, json)
Hash identifier: qc0AnixuJmucaaftQ/LyI87IbNHlxudRS98tlTGyyas=
Subject key identifier: 02:C8:CD:B5:A6:7F:A0:8C:2A:3E:65:63:5D:22:25:CA:55:B6:33:99
Certificate issuer: /CN=F36EEB6BAF/serialNumber=E16533BAF90FDFE61F88207EDAE004FDCB52FA30
Certificate serial: 02
Authority key identifier: E1:65:33:BA:F9:0F:DF:E6:1F:88:20:7E:DA:E0:04:FD:CB:52:FA:30
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4WUzuvkP3-YfiCB-2uAE_ctS-jA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/70FA4310DCE111EF90F8E0A3762E951A.roa
Signing time: Mon 27 Jan 2025 19:03:49 +0000
ROA not before: Mon 27 Jan 2025 19:03:39 +0000
ROA not after: Wed 31 Jan 2035 19:03:39 +0000
asID: 328330
IP address blocks: 2001:43f8:1190::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EEB6BAF
Validity
Not Before: Jan 27 19:03:39 2025 GMT
Not After : Jan 31 19:03:39 2035 GMT
Subject: CN=6797d895-473d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:9d:45:34:ee:ef:b1:5d:45:28:3b:1c:cb:
64:21:43:13:67:cf:2d:91:c4:3d:39:17:07:4b:c5:
bc:33:cf:a9:93:89:cb:86:12:13:cf:76:19:b5:d7:
82:7b:0f:15:ad:45:75:3c:af:4b:39:12:a1:f1:85:
8d:bb:f1:aa:3e:54:ed:98:83:cc:ea:f4:7d:27:b2:
89:53:83:22:87:26:e6:6d:07:8f:bb:a1:90:21:9d:
fa:6f:58:1f:2f:58:ac:2e:d0:0c:c0:85:64:fa:9e:
cf:55:cb:34:f7:70:3d:dd:3e:bf:19:1b:de:27:30:
d0:80:d2:d6:76:dc:cb:3c:24:83:b8:45:b3:e8:08:
d2:f3:4d:b6:e3:cd:18:3e:aa:8b:cb:c3:d2:c4:a6:
02:51:6d:a6:ae:44:01:35:57:2b:df:d9:45:b0:dc:
9a:45:48:6a:7e:ab:a6:f1:0f:6f:c5:c1:15:ed:eb:
8b:07:4d:f2:8e:18:d0:f5:4e:65:7d:8c:06:be:a4:
e8:2c:19:f9:3b:de:7b:6a:ec:4c:a0:eb:12:57:24:
38:df:f9:74:00:96:e5:9f:0b:4f:5b:52:4a:91:72:
90:31:54:4f:62:91:38:e1:fc:a3:a2:2c:9b:68:d7:
a4:56:12:01:7c:14:18:34:1d:0b:c7:5b:6e:e3:31:
2b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C8:CD:B5:A6:7F:A0:8C:2A:3E:65:63:5D:22:25:CA:55:B6:33:99
X509v3 Authority Key Identifier:
keyid:E1:65:33:BA:F9:0F:DF:E6:1F:88:20:7E:DA:E0:04:FD:CB:52:FA:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4WUzuvkP3-YfiCB-2uAE_ctS-jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/70FA4310DCE111EF90F8E0A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:1190::/48
Signature Algorithm: sha256WithRSAEncryption
33:08:19:ce:26:af:2e:cf:2c:94:86:c0:4f:07:66:75:99:82:
45:3b:f2:9c:2a:1b:00:f8:c7:e5:77:ac:06:13:96:b2:c6:bf:
d4:cf:e8:25:1b:29:75:bd:0a:ba:93:2e:a5:a5:1a:08:8b:2c:
9d:46:b2:85:2a:71:db:7f:19:04:77:99:94:73:6d:f2:6e:4a:
ca:ef:ca:1f:c8:5e:de:fb:e0:da:c3:58:71:38:18:80:ff:4f:
8d:3a:b1:96:65:97:cd:da:8c:0b:b0:a7:64:68:e3:09:b4:1b:
9a:4c:1b:7a:79:8a:3c:a3:cf:3d:38:b9:2a:65:30:e1:f5:aa:
59:2e:63:52:7e:de:30:8d:bc:cb:a0:7c:7a:33:42:79:c4:74:
e9:91:db:2a:89:8d:f4:c3:32:33:ac:ee:bb:a4:ad:d8:0b:25:
65:1c:91:46:e1:a8:25:0e:60:54:ab:56:4a:09:f2:25:e6:20:
ed:58:b3:60:50:4d:7f:1e:d3:98:e3:8f:ea:1d:4e:72:20:82:
db:72:41:be:e3:3e:fe:79:df:a6:f9:4a:9d:d0:41:54:06:e2:
9b:9c:bd:0d:d6:70:8b:0c:31:a6:0a:eb:a4:f9:28:91:cf:cf:
ba:75:55:44:9f:6f:c0:ba:32:67:51:21:14:d3:a3:13:b4:1c:
35:d6:19:18
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
RUI2QkFGMTEwLwYDVQQFEyhFMTY1MzNCQUY5MEZERkU2MUY4ODIwN0VEQUUwMDRG
RENCNTJGQTMwMB4XDTI1MDEyNzE5MDMzOVoXDTM1MDEzMTE5MDMzOVowGDEWMBQG
A1UEAxMNNjc5N2Q4OTUtNDczZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMp7nUU07u+xXUUoOxzLZCFDE2fPLZHEPTkXB0vFvDPPqZOJy4YSE892GbXX
gnsPFa1FdTyvSzkSofGFjbvxqj5U7ZiDzOr0fSeyiVODIocm5m0Hj7uhkCGd+m9Y
Hy9YrC7QDMCFZPqez1XLNPdwPd0+vxkb3icw0IDS1nbcyzwkg7hFs+gI0vNNtuPN
GD6qi8vD0sSmAlFtpq5EATVXK9/ZRbDcmkVIan6rpvEPb8XBFe3riwdN8o4Y0PVO
ZX2MBr6k6CwZ+Tvee2rsTKDrElckON/5dACW5Z8LT1tSSpFykDFUT2KROOH8o6Is
m2jXpFYSAXwUGDQdC8dbbuMxK6ECAwEAAaOCAqgwggKkMB0GA1UdDgQWBBQCyM21
pn+gjCo+ZWNdIiXKVbYzmTAfBgNVHSMEGDAWgBThZTO6+Q/f5h+IIH7a4AT9y1L6
MDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RUVCNkIvMkFEMDhGMUNEQ0RCMTFFRkI0NkI0MTdBNzYyRTk1MUEvNFdVenV2
a1AzLVlmaUNCLTJ1QUVfY3RTLWpBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNFdVenV2a1AzLVlmaUNCLTJ1QUVfY3RTLWpBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUVCNkIvMkFEMDhGMUNEQ0RCMTFFRkI0NkI0MTdBNzYy
RTk1MUEvNzBGQTQzMTBEQ0UxMTFFRjkwRjhFMEEzNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABQ/gRkDANBgkqhkiG9w0B
AQsFAAOCAQEAMwgZziavLs8slIbATwdmdZmCRTvynCobAPjH5XesBhOWssa/1M/o
JRspdb0KupMupaUaCIssnUayhSpx238ZBHeZlHNt8m5Kyu/KH8he3vvg2sNYcTgY
gP9PjTqxlmWXzdqMC7CnZGjjCbQbmkwbenmKPKPPPTi5KmUw4fWqWS5jUn7eMI28
y6B8ejNCecR06ZHbKomN9MMyM6zuu6St2AslZRyRRuGoJQ5gVKtWSgnyJeYg7Viz
YFBNfx7TmOOP6h1OciCC23JBvuM+/nnfpvlKndBBVAbim5y9DdZwiwwxpgrrpPko
kc/PunVVRJ9vwLoyZ1EhFNOjE7QcNdYZGA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:03 2025 by rpki-client