Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/9CCF27F290A011ECB9D4CB9C5A40D577.roa
File: 9CCF27F290A011ECB9D4CB9C5A40D577.roa (raw, json)
Hash identifier: l3Jl+rJsluz79X1LXAPBvyb9MThq8X2GGglxbF+OdOo=
Subject key identifier: 6D:75:46:9F:3C:83:B6:99:D5:03:86:D2:BF:D4:8B:FF:74:4A:5B:CE
Certificate issuer: /CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Certificate serial: 2D
Authority key identifier: A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
Authority info access: rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/9CCF27F290A011ECB9D4CB9C5A40D577.roa
Signing time: Fri 18 Feb 2022 09:53:24 +0000
ROA not before: Fri 18 Feb 2022 09:53:21 +0000
ROA not after: Mon 02 Mar 2026 09:53:21 +0000
asID: 33763
IP address blocks: 160.242.18.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Validity
Not Before: Feb 18 09:53:21 2022 GMT
Not After : Mar 2 09:53:21 2026 GMT
Subject: CN=620f6c94-e521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:da:03:09:b1:0c:91:95:c1:96:47:a7:4a:
81:7a:33:27:63:64:1c:92:a8:f7:64:48:29:59:42:
80:bb:ba:c9:b2:78:80:c8:03:2c:3f:60:0b:69:3f:
be:43:07:a7:43:52:34:9b:8b:9f:31:3c:4a:15:c2:
75:19:a7:04:1a:ff:3e:c4:4b:4f:85:f9:16:29:58:
99:02:57:af:1e:ed:ff:e7:5b:ec:9d:a7:0d:12:8b:
5e:ec:f6:44:21:08:af:b8:1b:88:52:3f:da:0b:a4:
86:2b:25:40:51:bb:d2:78:57:74:ac:cc:9b:b4:ad:
a8:8b:d4:3d:68:34:ea:7d:c1:10:ba:69:ca:37:ee:
83:f9:75:df:ee:6d:29:63:4e:32:35:12:58:d2:7e:
ce:87:5d:6c:24:24:30:77:51:bc:12:76:81:29:12:
44:b0:83:dc:b9:6f:7d:c1:3c:29:f7:20:7f:9c:d9:
37:5d:94:87:f3:97:60:0f:a8:70:a3:3a:b3:6b:ea:
55:1f:03:94:dd:a9:a7:f1:82:01:c5:35:18:62:c7:
43:48:ed:a4:06:0d:d5:d6:55:64:d4:fd:f4:11:d4:
de:02:d2:cd:c7:15:49:a8:77:f9:56:c0:3b:1c:6f:
00:00:34:c1:e9:eb:6a:46:d5:8d:78:ff:fb:77:8d:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:75:46:9F:3C:83:B6:99:D5:03:86:D2:BF:D4:8B:FF:74:4A:5B:CE
X509v3 Authority Key Identifier:
keyid:A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/pYtjJ6XUx8zCXX70gqgT0A2e7OM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/9CCF27F290A011ECB9D4CB9C5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.18.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:92:9c:0a:06:ed:d4:1f:c7:b1:ca:df:f1:34:5a:6d:0f:ae:
ad:f0:f9:9a:11:e8:1a:5b:d1:ae:ee:78:31:20:2b:ef:be:fd:
31:c3:1f:47:65:8d:38:a4:20:2b:9f:99:7e:b0:c2:f3:f9:d1:
13:94:fe:58:e1:83:fd:1f:22:2e:58:80:79:1e:e2:93:52:03:
c3:dc:72:e9:53:52:9a:b6:ce:f7:91:54:62:83:c5:cc:eb:11:
c5:b4:df:fb:47:78:85:07:61:e7:12:01:bc:40:cc:e9:d4:f8:
65:da:eb:ea:0d:b7:fe:52:af:62:6e:0c:5f:88:71:d2:a3:a3:
8f:4c:7a:14:41:eb:cb:e6:90:80:3a:b9:22:2a:c8:db:c3:c6:
6d:8e:4b:f6:0a:3b:26:48:37:0a:5e:af:eb:3d:75:95:b6:59:
17:19:fa:8b:26:5a:b9:60:1e:37:b2:63:75:b4:94:a3:09:29:
50:fa:ed:6f:ca:83:7e:be:7e:78:cb:cf:b8:28:41:6a:a2:34:
77:9d:19:2e:67:48:fa:da:5e:a7:48:b9:41:73:c6:76:5e:85:
9d:53:9a:90:e1:23:91:42:84:61:f3:c9:d9:e2:0b:5e:93:18:
76:01:56:ef:62:37:39:35:89:ec:16:05:20:5b:c1:4e:38:c5:
56:1c:39:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-fra.rpki-client.org