Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/D9DBE00E90A011ECA2FA8E9D5A40D577.roa
File: D9DBE00E90A011ECA2FA8E9D5A40D577.roa (raw, json)
Hash identifier: zcc3taLjneTB3txACymQks580BigCvT/qIxo28I1tTQ=
Subject key identifier: 9F:19:D0:06:BE:E9:BD:6A:98:11:57:CE:C2:81:A6:09:86:83:7F:9E
Certificate issuer: /CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
Certificate serial: 28
Authority key identifier: EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/D9DBE00E90A011ECA2FA8E9D5A40D577.roa
Signing time: Fri 18 Feb 2022 09:55:07 +0000
ROA not before: Fri 18 Feb 2022 09:55:03 +0000
ROA not after: Mon 02 Mar 2026 09:55:03 +0000
asID: 33763
IP address blocks: 196.216.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
Validity
Not Before: Feb 18 09:55:03 2022 GMT
Not After : Mar 2 09:55:03 2026 GMT
Subject: CN=620f6cfb-d6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:1e:b9:0d:12:7c:53:0c:7c:a2:1e:7d:5a:
01:30:41:d3:fe:42:17:28:6d:b5:b0:42:7a:58:18:
eb:88:ed:73:25:86:70:98:0c:fe:27:47:bc:36:25:
d2:4c:eb:ea:1c:43:3b:36:68:ee:c2:d3:5b:e1:9e:
1d:89:08:d4:15:be:28:b9:20:3e:b4:7d:67:c8:12:
4a:f8:0f:08:14:5e:08:20:1d:b4:e8:a8:8c:93:87:
c5:90:2d:b5:06:2e:ab:ba:59:74:54:32:b1:b7:cf:
09:8f:0c:40:dc:8d:02:a5:0e:57:76:0a:c2:b8:9a:
54:a6:06:e4:b1:04:67:a8:28:6d:7c:03:6c:41:bf:
60:f3:a0:f2:15:c0:df:8f:cf:71:57:98:78:31:2d:
7c:1c:79:fc:8d:b5:31:b1:e3:0b:70:a8:3d:b1:15:
82:ea:3b:bd:3c:5c:22:ce:e7:83:b9:d8:c3:e7:b8:
5c:af:a7:4c:da:31:e6:e2:30:e6:95:56:aa:ea:fb:
1a:ee:f0:b9:0b:a9:87:7b:0e:00:92:e0:e1:5d:1f:
19:9e:21:a8:2c:74:ee:57:2e:33:a0:3f:56:13:ef:
36:66:c2:75:b0:25:3e:dc:67:2f:77:26:3d:e6:38:
d9:18:92:19:f9:5c:04:b7:a0:10:72:9a:6f:52:15:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:19:D0:06:BE:E9:BD:6A:98:11:57:CE:C2:81:A6:09:86:83:7F:9E
X509v3 Authority Key Identifier:
keyid:EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/66ypK4WkK40LicnKqSpfzFyWrBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/D9DBE00E90A011ECA2FA8E9D5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.216.56.0/22
Signature Algorithm: sha256WithRSAEncryption
45:b8:74:5b:9e:82:12:a3:24:be:34:77:62:01:f6:4b:82:bf:
c9:36:c8:a7:f1:fb:57:79:76:d8:02:ef:6f:fa:85:d7:2b:72:
15:b9:f5:11:cf:40:63:84:5b:e5:67:57:f9:a9:e4:fa:8d:e9:
0c:51:9b:da:15:7a:a7:78:1b:34:71:5c:fe:ad:3a:bd:26:38:
7b:e1:61:82:dd:4e:74:fa:8f:d5:35:0d:55:54:8b:d6:2d:eb:
4b:20:4f:4e:a9:0d:bd:84:a0:f8:14:34:36:4d:23:fb:34:e7:
84:cd:2e:92:82:2c:b9:1e:7c:b1:a5:96:e1:ca:30:96:e3:89:
5c:29:fe:ae:11:74:57:db:9a:6c:39:39:91:40:3b:e1:df:6b:
f2:e6:7e:00:a3:93:73:94:03:1b:42:b0:da:96:7a:d8:69:98:
96:e9:49:8e:bf:94:3f:db:ac:32:5b:83:d8:f5:eb:f6:e1:e0:
3c:f9:17:c1:50:e2:26:4c:4d:74:9a:b9:d2:92:8a:cb:96:65:
5b:ee:91:70:4f:c6:db:81:16:56:ce:d1:94:40:df:16:04:0a:
4b:ec:11:32:b8:85:df:f1:e7:c7:7d:a0:3f:b5:fc:00:ac:67:
26:61:96:fb:ba:59:56:28:1a:f5:2b:d2:3d:9d:9d:ab:10:8d:
8f:bf:29:35
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBKDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYx
NDc0QUFGMTEwLwYDVQQFEyhFQkFDQTkyQjg1QTQyQjhEMEI4OUM5Q0FBOTJBNUZD
QzVDOTZBQzE2MB4XDTIyMDIxODA5NTUwM1oXDTI2MDMwMjA5NTUwM1owGDEWMBQG
A1UEAwwNNjIwZjZjZmItZDZhOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKynHrkNEnxTDHyiHn1aATBB0/5CFyhttbBCelgY64jtcyWGcJgM/idHvDYl
0kzr6hxDOzZo7sLTW+GeHYkI1BW+KLkgPrR9Z8gSSvgPCBReCCAdtOiojJOHxZAt
tQYuq7pZdFQysbfPCY8MQNyNAqUOV3YKwriaVKYG5LEEZ6gobXwDbEG/YPOg8hXA
34/PcVeYeDEtfBx5/I21MbHjC3CoPbEVguo7vTxcIs7ng7nYw+e4XK+nTNox5uIw
5pVWqur7Gu7wuQuph3sOAJLg4V0fGZ4hqCx07lcuM6A/VhPvNmbCdbAlPtxnL3cm
PeY42RiSGflcBLegEHKab1IVleUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSfGdAG
vum9apgRV87CgaYJhoN/njAfBgNVHSMEGDAWgBTrrKkrhaQrjQuJycqpKl/MXJas
FjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTQ3NEEvNkVDQTZDOTY3NDdGMTFFQ0FDMUJGRTk2NUE0MEQ1NzcvNjZ5cEs0
V2tLNDBMaWNuS3FTcGZ6RnlXckJZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNjZ5cEs0V2tLNDBMaWNuS3FTcGZ6RnlXckJZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTQ3NEEvNkVDQTZDOTY3NDdGMTFFQ0FDMUJGRTk2NUE0
MEQ1NzcvRDlEQkUwMEU5MEEwMTFFQ0EyRkE4RTlENUE0MEQ1Nzcucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsTYODANBgkqhkiG9w0BAQsF
AAOCAQEARbh0W56CEqMkvjR3YgH2S4K/yTbIp/H7V3l22ALvb/qF1ytyFbn1Ec9A
Y4Rb5WdX+ank+o3pDFGb2hV6p3gbNHFc/q06vSY4e+Fhgt1OdPqP1TUNVVSL1i3r
SyBPTqkNvYSg+BQ0Nk0j+zTnhM0ukoIsuR58saWW4cowluOJXCn+rhF0V9uabDk5
kUA74d9r8uZ+AKOTc5QDG0Kw2pZ62GmYlulJjr+UP9usMluD2PXr9uHgPPkXwVDi
JkxNdJq50pKKy5ZlW+6RcE/G24EWVs7RlEDfFgQKS+wRMriF3/Hnx32gP7X8AKxn
JmGW+7pZViga9SvSPZ2dqxCNj78pNQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org