Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/E2CA3D2E909F11EC87ABC79A5A40D577.roa
File: E2CA3D2E909F11EC87ABC79A5A40D577.roa (raw, json)
Hash identifier: /B15vNMk6wqwVDfYHbvB46KuHR6LCrxYy4wmF6GXRN0=
Subject key identifier: DF:5D:EF:FE:02:67:90:A4:ED:16:0E:E1:19:8E:4E:A3:7B:B2:FE:BC
Certificate issuer: /CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Certificate serial: 2B
Authority key identifier: A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
Authority info access: rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/E2CA3D2E909F11EC87ABC79A5A40D577.roa
Signing time: Fri 18 Feb 2022 09:48:12 +0000
ROA not before: Fri 18 Feb 2022 09:48:08 +0000
ROA not after: Mon 02 Mar 2026 09:48:08 +0000
asID: 33763
IP address blocks: 160.242.20.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Validity
Not Before: Feb 18 09:48:08 2022 GMT
Not After : Mar 2 09:48:08 2026 GMT
Subject: CN=620f6b5c-4f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c7:ee:ac:aa:3a:be:48:14:a7:f8:a3:e9:e3:
44:07:69:8c:b6:df:bb:f4:30:05:06:a9:a4:1f:0b:
96:72:0d:31:9e:96:96:c2:8f:34:88:24:07:ce:ec:
c6:b2:8f:4d:eb:35:92:9e:1e:4a:96:f8:03:9a:6e:
5e:ef:78:2a:cc:0e:d9:11:cc:b0:8e:b3:5b:4f:f8:
e6:43:d6:db:e8:40:d0:87:16:cd:35:ee:63:6d:c6:
3c:53:3d:db:5a:d2:62:f8:aa:7a:f9:4f:32:93:f9:
0f:27:5e:49:12:e6:5b:3b:f9:bd:e1:e1:39:d2:01:
69:21:6a:cd:b3:20:f4:3d:a2:cf:e4:6b:dc:ff:96:
e0:86:ee:10:a7:64:ce:82:a0:72:15:51:c0:55:47:
69:54:19:76:59:be:3a:f9:a6:1b:22:b8:68:ef:6e:
a8:1d:71:08:9b:2e:be:61:5c:b5:c4:5e:45:a0:51:
3b:54:cb:7a:70:59:a3:86:de:93:a6:54:94:c7:44:
4a:d4:2b:15:60:30:c1:49:4a:80:60:24:28:b3:97:
e6:72:26:c0:fc:85:68:8f:cd:f5:43:5f:6b:f7:79:
0b:70:81:1d:e1:3a:76:6e:40:87:1a:38:d5:41:22:
6c:ca:0b:0d:09:1f:0b:70:d5:7a:42:e6:b6:4a:e4:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5D:EF:FE:02:67:90:A4:ED:16:0E:E1:19:8E:4E:A3:7B:B2:FE:BC
X509v3 Authority Key Identifier:
keyid:A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/pYtjJ6XUx8zCXX70gqgT0A2e7OM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/E2CA3D2E909F11EC87ABC79A5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.20.0/23
Signature Algorithm: sha256WithRSAEncryption
80:55:f5:28:d2:69:e1:dc:cf:77:89:bb:ec:1c:5e:2a:65:ae:
45:1e:af:f7:50:55:ad:37:8f:ff:18:5e:29:b6:e3:03:a4:08:
f2:14:5a:88:8e:5d:f1:58:30:de:70:cd:f7:17:0b:2e:ea:e3:
b9:b7:1a:e2:75:7a:e7:4d:f0:b5:c0:98:d4:18:67:fc:22:2f:
75:d7:04:2d:d4:cc:d0:29:4b:d9:42:d7:39:45:a9:fc:63:8e:
38:29:d0:6c:89:d6:89:a5:ce:62:b8:b7:56:a9:fe:97:df:5d:
0a:1b:b9:1d:d5:f8:f4:9b:d6:e4:9d:37:72:21:ea:4b:14:7b:
69:0b:be:28:57:d6:8f:43:34:df:c0:c5:c0:49:5e:59:65:c0:
6c:e7:d1:7f:dc:e0:87:66:43:9d:f0:e2:1d:0c:3c:e6:e0:52:
5d:82:be:7d:43:1b:54:33:76:89:4f:98:6b:4c:54:39:08:e0:
0d:59:fe:4a:10:1e:be:73:5e:d0:b3:84:30:58:37:fb:e5:47:
f1:27:b8:47:02:a2:7e:4d:c6:94:88:c9:3c:28:9b:36:19:db:
fb:42:19:53:8b:ef:35:57:6b:60:80:73:49:7e:5d:0e:09:8b:
5e:91:8d:80:b0:6e:ee:70:c6:7a:d3:f3:60:c7:ef:a7:1f:4b:
2e:13:e0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org