Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/847A21CC7A9111ECB46982D75A40D577.roa
File: 847A21CC7A9111ECB46982D75A40D577.roa (raw, json)
Hash identifier: NBZUR9A8gMV0JQWYXgTGAURhFAWR4cXdH6kGeBwke08=
Subject key identifier: 36:2B:14:39:55:F7:2F:F2:71:8F:C0:E6:9D:04:59:5C:25:E5:7F:B7
Certificate issuer: /CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Certificate serial: 0D
Authority key identifier: A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
Authority info access: rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/847A21CC7A9111ECB46982D75A40D577.roa
Signing time: Fri 21 Jan 2022 08:09:55 +0000
ROA not before: Fri 21 Jan 2022 08:09:51 +0000
ROA not after: Wed 31 Jan 2024 08:09:51 +0000
asID: 29286
IP address blocks: 160.242.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Validity
Not Before: Jan 21 08:09:51 2022 GMT
Not After : Jan 31 08:09:51 2024 GMT
Subject: CN=61ea6a53-97ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:35:13:36:fe:63:17:af:f3:51:0b:d6:0b:
55:6b:3f:de:17:4a:b0:fa:d9:53:94:a2:d3:25:b2:
62:5c:99:ac:70:ca:ff:10:0a:9b:7b:38:d1:92:99:
0f:b3:27:32:b7:82:fd:41:2c:2a:c9:89:b5:ac:af:
de:bf:72:00:57:70:d3:3e:a3:ba:26:a4:0d:7d:d7:
75:87:d7:0e:6f:8b:a2:8e:0a:6b:88:c2:c6:82:88:
b3:da:85:0e:53:3b:39:f1:2d:25:25:5b:b9:2d:f6:
48:a4:f7:92:d2:7c:02:c0:d7:32:32:86:0b:e1:fc:
72:36:48:51:fb:41:94:a3:27:f4:d8:22:c5:c0:8a:
26:e8:15:92:a9:2a:54:9d:fa:bf:52:a5:c2:dd:6b:
c3:5d:4d:55:3a:b2:00:67:ca:de:0c:92:b3:da:ec:
f5:64:35:7b:e4:0f:3c:4d:12:3e:2a:4f:66:f3:d4:
b8:6a:c2:cd:1c:c3:5b:46:d6:5e:5a:c3:b8:d7:11:
2b:86:30:95:f8:cb:8c:1a:6e:dd:ae:4b:fa:7d:a1:
32:84:47:f0:f0:dd:2c:71:72:94:99:19:78:d1:42:
60:51:b1:c0:f4:15:20:e3:96:f3:ed:85:fe:8c:00:
30:58:6e:d4:cf:34:70:b6:ee:08:7b:4e:02:25:c7:
ca:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2B:14:39:55:F7:2F:F2:71:8F:C0:E6:9D:04:59:5C:25:E5:7F:B7
X509v3 Authority Key Identifier:
keyid:A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/pYtjJ6XUx8zCXX70gqgT0A2e7OM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/847A21CC7A9111ECB46982D75A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.111.0/24
Signature Algorithm: sha256WithRSAEncryption
60:af:23:98:b4:64:76:b7:4e:f2:7c:78:10:23:d8:fa:5b:7f:
62:6d:80:82:5a:68:55:ce:b3:10:a7:1e:b3:9e:b1:23:3a:60:
0a:30:06:77:f5:d1:ec:3f:2a:4e:42:83:8b:f0:cc:1a:69:84:
d6:28:5a:32:54:0e:7b:22:69:01:06:66:c1:bb:d1:97:e6:89:
7e:db:40:39:86:56:4f:66:ea:5a:35:c4:8d:5f:da:51:a9:04:
d5:2a:ca:66:a5:8a:3b:e6:bb:63:d0:37:cc:14:49:90:88:52:
05:d7:45:52:48:9f:f2:15:0e:c0:bf:1c:32:3d:cb:52:ce:65:
52:4f:da:f4:7a:b7:9d:eb:8c:11:83:13:d1:58:df:a6:3e:43:
e6:24:9e:fb:0e:c6:ee:1e:b3:7d:5a:fe:9b:86:e6:0c:72:ec:
2c:b4:94:59:ff:1f:5c:17:ed:1d:74:3c:57:04:42:ee:d2:31:
e2:53:20:02:1c:18:47:fe:46:54:c9:3b:06:41:5e:17:a6:40:
31:14:a4:dc:5e:95:d8:e5:34:89:8d:41:69:a3:92:2f:13:47:
7d:68:55:f7:49:9c:96:c0:c8:97:aa:c3:b2:8f:00:26:30:1e:
bd:91:74:cb:dc:e2:a5:f6:f5:f3:0d:5c:50:8e:bd:b2:0b:b9:
77:e7:26:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:55 2023 by rpki-client on console-ams.rpki-client.org