Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/AA7611C490C111EC9F3FEF7D5A40D577.roa
File: AA7611C490C111EC9F3FEF7D5A40D577.roa (raw, json)
Hash identifier: 8scRHyH7ElaD3HkzZ+OvNTZShmKP87MHtuNtRxUFBpo=
Subject key identifier: 8F:B6:67:7D:7A:19:85:04:CB:6A:AD:EE:2F:50:72:F5:4E:5F:B2:06
Certificate issuer: /CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
Certificate serial: 34
Authority key identifier: EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/AA7611C490C111EC9F3FEF7D5A40D577.roa
Signing time: Fri 18 Feb 2022 13:50:00 +0000
ROA not before: Fri 18 Feb 2022 13:49:57 +0000
ROA not after: Mon 02 Mar 2026 13:49:57 +0000
asID: 33763
IP address blocks: 196.216.54.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
Validity
Not Before: Feb 18 13:49:57 2022 GMT
Not After : Mar 2 13:49:57 2026 GMT
Subject: CN=620fa408-5731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:66:65:e9:97:37:74:93:9d:5a:db:be:ac:
b1:cf:27:8c:6b:f3:91:fa:c9:e0:19:b5:e5:13:01:
f9:9a:ca:82:36:c6:92:b4:d4:b2:5f:8f:f7:0b:36:
e7:32:85:a6:3e:4d:f9:d9:dc:0e:b9:d1:87:6c:03:
3e:73:9c:2b:e3:fd:b1:9c:f3:e1:54:97:89:b6:7d:
61:12:98:d5:6b:e7:3a:60:5c:61:08:9d:ff:e8:2c:
0c:a9:dd:b4:b6:b5:32:99:91:0d:a9:bf:b2:a2:c6:
56:52:e3:99:3d:3a:c3:cd:cb:51:9d:0e:44:f3:79:
c9:58:29:fa:ff:e7:a9:52:d4:cf:33:b1:10:71:0c:
94:ba:01:04:8c:c2:3d:31:8e:14:ce:60:fe:d7:34:
be:48:55:49:bd:8d:df:67:bb:e7:38:30:8f:d9:3e:
95:d8:d2:93:9f:e6:6e:c5:c5:32:75:91:b2:c3:74:
e6:e4:51:71:cf:42:67:27:77:8f:72:15:c0:c7:d9:
34:75:38:8f:3e:3b:73:fe:0f:07:54:b0:ab:51:c6:
7c:aa:59:00:4b:a5:ab:56:7d:a7:ac:cb:b9:0d:84:
cc:7d:87:9f:a4:f4:a9:3f:3d:23:ce:21:5c:d3:0b:
36:c1:9f:58:c2:fb:4c:c9:0f:0a:7e:78:4b:8c:8e:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B6:67:7D:7A:19:85:04:CB:6A:AD:EE:2F:50:72:F5:4E:5F:B2:06
X509v3 Authority Key Identifier:
keyid:EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/66ypK4WkK40LicnKqSpfzFyWrBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/AA7611C490C111EC9F3FEF7D5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.216.54.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:21:fa:30:97:db:2b:3d:da:7d:b4:68:a8:62:31:d4:64:da:
33:8d:c5:81:a0:3f:45:69:01:62:86:66:ba:1d:e5:70:d1:d8:
71:b2:d9:31:61:d4:8d:84:7d:79:f4:dc:0f:a5:dd:9a:63:6b:
79:6f:a4:0b:06:bf:2c:36:1a:76:93:25:71:48:6c:73:17:0c:
a9:6b:c0:0b:51:2f:58:c0:a1:c2:43:af:8b:d8:5f:43:5e:d6:
6b:f3:1a:26:aa:f7:e5:28:8e:29:97:5c:6d:22:30:94:1b:8e:
12:9c:cf:40:a3:db:01:cd:17:3b:31:e1:0a:27:40:dc:2c:f5:
e6:e4:7d:6e:1b:83:98:6b:cb:5b:c8:f2:48:5b:74:3c:3d:74:
1b:6d:27:b1:43:e0:27:d8:7e:70:7d:ec:b6:dd:12:59:01:f9:
a3:c8:4f:14:da:bc:26:e4:e1:20:80:d2:03:bd:c4:81:99:d0:
9b:09:71:0e:ee:3c:9b:a4:06:7b:d6:6c:b2:81:70:eb:f5:cb:
8c:22:27:13:d0:49:6c:43:05:ce:07:94:1f:9c:46:4c:e8:f4:
6a:2e:b7:87:21:fb:ea:12:08:2f:1f:1e:af:cb:48:4f:37:5d:
6f:79:8a:a9:b1:12:b1:02:ee:17:9a:b4:94:fd:2d:1f:96:22:
12:d4:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org