Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/42BB6C92B57511EF951BBFBD762E951A.roa
File: 42BB6C92B57511EF951BBFBD762E951A.roa (raw, json)
Hash identifier: 1bWInketCzu/Dqakbj5R6DwsUfKJazNvf+AWykl+zAc=
Subject key identifier: 4D:79:6B:77:A6:D4:92:B4:7B:E9:6B:23:48:F0:2A:D1:38:9E:1E:1A
Certificate issuer: /CN=F36F62C3AF/serialNumber=D7D72A6487BD776A8BBFAD4F38613C3B15350983
Certificate serial: 0D81
Authority key identifier: D7:D7:2A:64:87:BD:77:6A:8B:BF:AD:4F:38:61:3C:3B:15:35:09:83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/42BB6C92B57511EF951BBFBD762E951A.roa
Signing time: Sun 08 Dec 2024 15:01:11 +0000
ROA not before: Sun 08 Dec 2024 15:01:00 +0000
ROA not after: Tue 01 Dec 2026 15:01:00 +0000
asID: 6083
IP address blocks: 2001:42a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3457 (0xd81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F62C3AF
Validity
Not Before: Dec 8 15:01:00 2024 GMT
Not After : Dec 1 15:01:00 2026 GMT
Subject: CN=6755b4b7-6cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d7:ee:9b:1c:dd:91:68:fa:b1:3f:77:3d:54:
d3:96:a9:4a:23:45:e1:92:af:29:b0:79:c0:5e:7b:
54:2e:d7:6e:97:23:fe:04:76:29:15:69:cc:30:55:
e2:12:6c:57:7b:33:1b:3a:ab:d6:f1:d0:c6:a4:25:
98:a8:9e:b8:fd:75:a2:2b:bf:87:84:e6:ee:01:fd:
7a:3f:8b:79:18:31:6b:aa:dc:1d:46:f7:26:73:aa:
b5:1f:98:61:2b:b2:83:b0:9a:55:1e:7f:14:ef:55:
96:89:14:6f:1b:89:a2:8c:b4:68:72:b8:cb:ce:4d:
88:37:ff:03:6b:21:de:40:d6:fb:2b:cd:4c:c3:1f:
df:e3:33:6a:e1:72:ce:9c:fd:e1:50:f9:e8:3d:08:
64:fe:ec:e5:e1:55:7d:ae:b9:56:eb:8b:6f:6a:62:
f2:89:61:0e:a2:a4:71:f9:c7:e6:9b:b0:51:6f:24:
36:e5:e3:73:2a:4d:02:91:32:83:b0:eb:b0:8d:72:
2c:cf:f8:d0:5e:87:22:6a:b0:42:8c:8c:6b:a6:19:
d2:79:f9:d3:9f:d0:91:40:38:4f:27:18:d4:c6:79:
b0:56:cb:14:c0:b8:99:ef:4b:f7:6f:d4:fa:88:d7:
ca:34:04:79:da:10:b3:db:59:4e:8b:05:dd:a4:e9:
ef:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:79:6B:77:A6:D4:92:B4:7B:E9:6B:23:48:F0:2A:D1:38:9E:1E:1A
X509v3 Authority Key Identifier:
keyid:D7:D7:2A:64:87:BD:77:6A:8B:BF:AD:4F:38:61:3C:3B:15:35:09:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/42BB6C92B57511EF951BBFBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:42a0::/32
Signature Algorithm: sha256WithRSAEncryption
a7:f3:6b:e8:be:27:bc:02:81:f4:c7:68:ee:6f:3e:e3:60:11:
23:70:4a:ba:73:ac:cf:9d:ab:72:f6:ce:4e:97:9f:9f:9d:93:
96:f9:4b:b3:6d:fa:c6:64:30:f1:a2:31:49:a3:94:86:02:32:
9d:4a:5d:de:8a:ec:04:c3:9c:82:1e:01:2e:60:4e:11:73:47:
a9:b7:e7:3c:f0:78:b6:6f:9a:a2:11:bc:6d:d1:3a:fd:17:a8:
9d:ca:8e:fe:4d:c1:38:64:7f:c2:3c:6a:1e:17:66:ca:c5:4c:
b2:0f:bd:4d:50:15:ec:52:b2:dc:aa:e3:34:f3:d2:89:76:53:
c8:ba:ec:ab:9c:b0:7b:59:90:ef:f7:00:e4:1a:cd:fb:69:2c:
2d:f1:cf:28:28:57:96:f6:c1:e5:ac:fe:32:f3:6c:1c:00:bb:
34:3c:26:59:72:0c:99:ed:0b:69:85:78:52:f8:59:e2:a8:38:
3c:91:04:42:2a:ad:c8:a4:9a:db:cd:9d:62:2d:cd:ea:b5:1a:
d0:a1:45:1f:fc:8c:38:d4:7d:9a:ea:f3:e6:cb:de:c1:fb:f3:
b2:96:26:46:e8:62:71:70:ed:fe:20:65:03:0d:7a:b4:c5:af:
c1:0a:b4:50:fc:24:0e:a4:62:dd:63:9d:f3:4d:57:01:2e:ec:
e8:dc:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:35:11 2025 by rpki-client