Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/D8A3C442753211EC8F6DB5A65A40D577.roa
File: D8A3C442753211EC8F6DB5A65A40D577.roa (raw, json)
Hash identifier: pVW88v7SaQihmZUXop3uybnS80bJNPmFirIYBWhncHU=
Subject key identifier: AB:41:64:0F:08:BF:D9:58:11:E0:5E:DB:07:26:B6:85:CC:01:8C:E2
Certificate issuer: /CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
Certificate serial: 03
Authority key identifier: EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/D8A3C442753211EC8F6DB5A65A40D577.roa
Signing time: Fri 14 Jan 2022 12:09:39 +0000
ROA not before: Fri 14 Jan 2022 12:09:34 +0000
ROA not after: Wed 14 Jan 2026 12:09:34 +0000
asID: 33763
IP address blocks: 197.234.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
Validity
Not Before: Jan 14 12:09:34 2022 GMT
Not After : Jan 14 12:09:34 2026 GMT
Subject: CN=61e16802-a138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:d5:b4:03:e6:6a:aa:8c:54:c8:28:ea:77:
5b:0e:d2:1e:47:2b:ec:5d:47:33:19:d4:24:30:33:
23:b9:d0:49:44:be:d1:9f:87:46:03:4a:af:b9:de:
72:bd:a5:18:ba:f8:ae:61:71:f7:b9:82:24:69:d6:
b3:ff:33:4e:c2:d8:44:48:4c:fb:b9:06:9e:b8:4f:
09:a9:2b:d4:c5:24:8a:5f:52:57:7b:39:09:01:43:
45:60:d4:60:27:b0:c4:f7:3f:05:fc:80:c7:76:9b:
28:37:c2:c9:4d:6b:ca:f0:7a:84:9a:c5:42:7b:3c:
57:60:44:ea:07:12:63:f7:4b:77:50:49:42:cf:53:
af:11:5e:df:df:6f:5a:0c:8e:21:08:1a:8a:66:6c:
3b:04:5b:fd:c5:8b:12:03:c7:b2:a4:ef:ce:db:9b:
75:97:9d:51:c5:43:30:fd:6c:e3:98:91:3b:a8:22:
6a:0c:d3:65:ca:74:61:3d:71:ae:32:ad:5f:73:79:
19:97:d1:88:b0:6b:e2:ae:d6:dc:95:f2:aa:68:7b:
a0:f5:08:d2:46:48:04:e9:89:7d:af:1b:fb:80:a2:
1d:68:82:f4:92:4e:3a:53:a6:69:35:77:40:98:b2:
1c:1d:e5:51:1c:ef:49:37:2f:1d:94:e2:cc:41:99:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:41:64:0F:08:BF:D9:58:11:E0:5E:DB:07:26:B6:85:CC:01:8C:E2
X509v3 Authority Key Identifier:
keyid:EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/66ypK4WkK40LicnKqSpfzFyWrBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/D8A3C442753211EC8F6DB5A65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.234.112.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:cb:9c:86:a4:d1:94:fd:fa:8b:f3:e5:58:c0:c8:db:32:9d:
b2:3c:da:19:7f:9e:88:2a:6b:9d:89:bd:9e:30:c9:fe:2a:8c:
17:0d:ab:d8:32:13:66:43:bf:40:28:d9:f8:c3:3f:51:d9:73:
65:4f:d5:f5:6b:ca:75:ed:10:ff:5c:30:95:1c:50:e3:d2:1b:
54:63:dd:2f:df:16:30:c8:18:04:c9:4a:f7:61:2a:9c:43:cd:
87:01:ad:7f:f8:e9:13:1c:f3:b6:59:da:36:8e:76:ed:62:d7:
0d:34:7e:75:0f:37:28:ea:d5:07:31:ae:87:9a:a7:21:4c:13:
a4:47:e4:af:19:fc:54:62:16:30:25:3e:08:da:be:c9:8f:9f:
fa:37:59:3c:3d:4b:69:f6:09:d2:3f:0a:08:81:ca:3c:b3:d5:
99:39:56:96:e2:dc:11:3b:b6:31:dc:82:69:f9:1b:b6:b5:41:
9b:fa:e5:84:27:8d:86:f1:bc:4f:45:92:a4:a8:68:57:5c:89:
bb:89:98:fe:9e:f0:4f:7e:c7:93:49:89:50:dc:5f:01:33:db:
15:54:ff:cb:81:cc:05:a3:a0:01:b7:f9:ce:b8:21:8d:0b:2c:
fd:3b:86:81:89:0c:54:0a:34:4e:b4:27:f5:f7:4b:8f:a6:3c:
65:df:50:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org