Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/F3B29612C8E711EFAC3B3EA9762E951A.roa
File: F3B29612C8E711EFAC3B3EA9762E951A.roa (raw, json)
Hash identifier: OETANewi1spwDI+wuFRp4Ft8bl6bEviyIyR18XaKaRE=
Subject key identifier: 8A:7D:D0:E0:FA:9D:4B:0C:D0:45:EA:BA:91:FF:2B:B8:B4:EC:CE:06
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 04F5
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/F3B29612C8E711EFAC3B3EA9762E951A.roa
Signing time: Thu 02 Jan 2025 09:00:02 +0000
ROA not before: Thu 02 Jan 2025 08:59:59 +0000
ROA not after: Sat 02 Jan 2027 08:59:59 +0000
asID: 21003
IP address blocks: 2c0f:fb10::/32 maxlen: 32
2c0f:fb10:1::/48 maxlen: 48
2c0f:fb10:2::/48 maxlen: 48
2c0f:fb10:3::/48 maxlen: 48
2c0f:fb10:4::/48 maxlen: 48
2c0f:fb10:5::/48 maxlen: 48
2c0f:fb10:6::/48 maxlen: 48
2c0f:fb10:7::/48 maxlen: 48
2c0f:fb10:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1269 (0x4f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF
Validity
Not Before: Jan 2 08:59:59 2025 GMT
Not After : Jan 2 08:59:59 2027 GMT
Subject: CN=67765592-1b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7b:0d:ef:82:f3:d1:e5:26:2f:de:6d:21:92:
a7:23:29:7a:dc:fb:fb:6d:7a:39:46:9f:5a:ee:23:
17:f8:b0:bb:18:aa:fe:49:f2:99:e6:6d:b1:b6:07:
fe:18:dc:8c:f9:ed:52:5a:0a:12:c0:a7:2c:c6:c4:
c8:16:d9:4c:3c:e1:50:62:5c:56:b5:db:0b:2d:75:
41:62:24:b9:43:eb:45:dc:94:f6:de:c4:50:3e:6c:
19:a2:55:bd:72:42:9b:4a:4b:00:e5:fd:d6:35:9f:
f5:d3:49:3f:f9:ce:93:6a:70:c2:53:8d:0c:45:6b:
9b:45:90:f0:4d:85:cc:c8:26:ef:12:01:bc:98:65:
c4:fb:a3:09:27:81:8c:46:9d:f7:5d:c2:61:2e:65:
50:2c:04:44:9c:80:df:1d:f4:6c:d4:60:4d:7a:27:
df:59:de:e6:55:99:08:f4:69:e5:3e:6e:4c:18:38:
20:18:6f:53:02:a4:e8:d9:7a:21:b9:fe:59:36:6f:
4e:a8:9e:c4:9b:6b:de:7a:13:37:51:0d:31:d0:0b:
3e:2e:86:4b:fc:c4:eb:21:9d:38:ac:1d:af:46:72:
eb:fd:ae:fd:89:f7:54:ed:2a:24:d7:f7:fb:34:c2:
b5:21:4f:63:6f:34:f7:ce:a0:b1:97:51:da:27:2a:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7D:D0:E0:FA:9D:4B:0C:D0:45:EA:BA:91:FF:2B:B8:B4:EC:CE:06
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/F3B29612C8E711EFAC3B3EA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fb10::/32
Signature Algorithm: sha256WithRSAEncryption
55:ac:c2:2f:eb:9c:ef:08:05:6c:27:bc:ff:2e:44:46:af:ec:
7c:18:45:82:47:6d:84:64:5c:20:39:f4:97:ed:ea:89:5f:a0:
d4:58:93:6c:35:be:f9:62:5a:b8:8d:40:2e:00:61:c3:71:d2:
8c:ff:cc:53:32:67:db:d7:10:eb:d8:30:0d:a8:b3:32:19:c9:
d6:c4:66:35:dc:71:04:4d:c7:e6:f6:16:29:19:00:29:ac:db:
13:e9:55:d6:49:bd:70:c1:79:37:1f:eb:71:de:a4:cd:e5:4a:
43:db:8b:43:0f:17:e7:63:92:88:8e:4a:37:21:05:85:76:68:
9d:02:c9:f9:1a:81:c0:c3:03:7b:5b:1d:b1:d9:35:e5:4c:b8:
0b:d3:67:d5:f8:b0:81:0c:1e:24:13:39:a1:0a:13:96:6c:45:
a7:08:43:93:c0:38:bf:66:11:11:fb:9c:27:41:e7:5e:01:e6:
16:f9:84:10:da:cd:f7:e9:80:b3:f9:1f:30:ef:e1:db:bf:b9:
5e:a7:87:3e:44:66:78:36:42:44:2f:67:f6:f8:e3:55:c5:dd:
d1:28:77:bf:e9:6e:7e:34:9b:82:d2:11:26:07:d9:25:42:08:
79:66:87:32:79:4d:b1:45:2b:e4:36:14:70:6a:b7:80:5a:e7:
ae:49:22:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBPUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjhGNEZBRjExMC8GA1UEBRMoREMxN0EwRUM1ODY1MkQzMTg5NjEyM0E2NTYxMEMz
QTMyMDQ2NTU2QjAeFw0yNTAxMDIwODU5NTlaFw0yNzAxMDIwODU5NTlaMBgxFjAU
BgNVBAMTDTY3NzY1NTkyLTFiMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTew3vgvPR5SYv3m0hkqcjKXrc+/ttejlGn1ruIxf4sLsYqv5J8pnmbbG2
B/4Y3Iz57VJaChLApyzGxMgW2Uw84VBiXFa12wstdUFiJLlD60XclPbexFA+bBmi
Vb1yQptKSwDl/dY1n/XTST/5zpNqcMJTjQxFa5tFkPBNhczIJu8SAbyYZcT7owkn
gYxGnfddwmEuZVAsBEScgN8d9GzUYE16J99Z3uZVmQj0aeU+bkwYOCAYb1MCpOjZ
eiG5/lk2b06onsSba956EzdRDTHQCz4uhkv8xOshnTisHa9Gcuv9rv2J91TtKiTX
9/s0wrUhT2NvNPfOoLGXUdonKueTAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUin3Q
4PqdSwzQReq6kf8ruLTszgYwHwYDVR0jBBgwFoAU3Beg7FhlLTGJYSOmVhDDoyBG
VWswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY4RjRGLzhBMzc3QkJDMkE3NTExRUM5MDgxNzU1OUQ4QTAxNENFLzNCZWc3
RmhsTFRHSllTT21WaEREb3lCR1ZXcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzNCZWc3RmhsTFRHSllTT21WaEREb3lCR1ZXcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkY4RjRGLzhBMzc3QkJDMkE3NTExRUM5MDgxNzU1OUQ4
QTAxNENFL0YzQjI5NjEyQzhFNzExRUZBQzNCM0VBOTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD/sQMA0GCSqGSIb3DQEB
CwUAA4IBAQBVrMIv65zvCAVsJ7z/LkRGr+x8GEWCR22EZFwgOfSX7eqJX6DUWJNs
Nb75Ylq4jUAuAGHDcdKM/8xTMmfb1xDr2DANqLMyGcnWxGY13HEETcfm9hYpGQAp
rNsT6VXWSb1wwXk3H+tx3qTN5UpD24tDDxfnY5KIjko3IQWFdmidAsn5GoHAwwN7
Wx2x2TXlTLgL02fV+LCBDB4kEzmhChOWbEWnCEOTwDi/ZhER+5wnQedeAeYW+YQQ
2s336YCz+R8w7+Hbv7lep4c+RGZ4NkJEL2f2+ONVxd3RKHe/6W5+NJuC0hEmB9kl
Qgh5ZocyeU2xRSvkNhRwareAWueuSSIC
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:34 2025 by rpki-client