Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/E30B56D6DB4C11ECA55E72CAF1222468.roa
File: E30B56D6DB4C11ECA55E72CAF1222468.roa (raw, json)
Hash identifier: EDIVr3nHUMjl7lY9PF6wNTfAXBqHTxTsUaVBhPsl7Sk=
Subject key identifier: 7D:E9:E2:BD:9A:A0:1D:4D:AB:47:4A:D4:29:40:08:AF:82:56:E9:C8
Certificate issuer: /CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Certificate serial: 9E
Authority key identifier: A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
Authority info access: rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/E30B56D6DB4C11ECA55E72CAF1222468.roa
Signing time: Tue 24 May 2022 10:33:02 +0000
ROA not before: Tue 24 May 2022 10:32:58 +0000
ROA not after: Mon 02 Jun 2025 10:32:58 +0000
asID: 33763
IP address blocks: 160.242.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Validity
Not Before: May 24 10:32:58 2022 GMT
Not After : Jun 2 10:32:58 2025 GMT
Subject: CN=628cb45d-dea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:9d:15:12:08:e8:c7:de:0c:5a:2c:1a:76:
7c:b6:81:86:c3:3a:12:fd:c3:d3:f2:af:e8:87:4a:
9f:db:3d:24:fc:90:a0:54:e0:7d:08:e6:41:65:26:
76:7f:34:5f:be:ba:7c:93:b9:06:3d:e2:70:46:38:
4f:ff:33:16:82:26:80:1e:e4:4f:b4:65:41:f6:c5:
d3:d0:e1:34:9d:2c:d8:b7:4a:09:f7:4b:d5:a9:40:
f4:64:a3:3a:32:cb:06:1d:94:30:c4:63:21:63:91:
b4:5a:45:5a:6f:ff:d0:2e:4c:65:04:c3:56:26:bc:
04:c9:a9:4e:c7:88:95:db:4f:ef:eb:05:57:68:29:
65:33:0b:05:cd:88:49:08:26:ff:d0:a6:6b:02:85:
10:4b:31:ee:99:44:66:33:91:d9:43:b9:51:c7:08:
a1:16:9d:0b:8d:4d:6b:81:64:6d:f4:7b:f9:be:bf:
92:24:47:dc:6c:68:91:a6:39:9e:6f:d7:ec:63:f4:
47:4c:2f:32:12:fb:45:da:a6:bc:d3:36:34:49:06:
fa:7d:b6:10:92:d8:53:d0:6c:e1:0f:81:95:83:1d:
4d:38:d8:52:ac:52:d2:5c:97:38:40:85:df:8a:b2:
cf:51:dc:26:89:fd:71:c7:67:07:06:1f:0c:75:23:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E9:E2:BD:9A:A0:1D:4D:AB:47:4A:D4:29:40:08:AF:82:56:E9:C8
X509v3 Authority Key Identifier:
keyid:A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/pYtjJ6XUx8zCXX70gqgT0A2e7OM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/E30B56D6DB4C11ECA55E72CAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.32.0/21
Signature Algorithm: sha256WithRSAEncryption
77:eb:5f:37:2e:70:5a:6c:35:dd:2b:73:48:52:4b:85:40:e0:
b0:36:61:65:a6:35:8f:5b:12:2e:83:ba:4e:40:68:f0:fb:a0:
d6:1c:9f:c1:ce:9b:6f:37:50:f5:87:45:44:d9:a2:d1:20:00:
43:34:1a:4e:6d:5e:50:0c:07:d8:03:ff:20:f6:4d:ed:0c:7a:
ce:01:02:3b:30:db:13:9d:11:96:82:98:d4:97:c3:8f:14:e2:
c3:9f:01:69:ab:c5:90:de:95:20:73:ac:96:51:5e:59:0e:74:
8f:5c:77:06:ce:f8:44:42:fe:7c:f8:80:ad:98:95:69:0b:10:
57:00:4d:20:f9:dd:8f:2b:ed:f3:e1:e9:de:df:91:bf:06:a8:
9b:b5:e5:5c:81:14:9b:41:53:be:a3:dc:76:bb:96:14:31:dc:
15:5e:ea:e0:ce:92:fd:8a:e7:88:17:f9:5d:9a:2c:40:0b:18:
78:10:b4:9f:20:72:cd:38:26:d6:3e:7c:52:ef:d8:a8:c7:de:
a0:4d:5d:91:3e:8a:85:72:55:c3:df:d2:d9:0e:f4:4b:db:c6:
6d:70:d6:26:03:17:8a:c8:15:a5:92:76:54:9f:ff:c7:8f:32:
18:b7:cb:08:b1:9b:33:71:ba:be:a1:ec:dd:22:04:06:e2:41:
46:9e:4e:5e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MTQ3NEFBUjExMC8GA1UEBRMoQTU4QjYzMjdBNUQ0QzdDQ0MyNUQ3RUY0ODJBODEz
RDAwRDlFRUNFMzAeFw0yMjA1MjQxMDMyNThaFw0yNTA2MDIxMDMyNThaMBgxFjAU
BgNVBAMMDTYyOGNiNDVkLWRlYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7JZ0VEgjox94MWiwadny2gYbDOhL9w9Pyr+iHSp/bPST8kKBU4H0I5kFl
JnZ/NF++unyTuQY94nBGOE//MxaCJoAe5E+0ZUH2xdPQ4TSdLNi3Sgn3S9WpQPRk
ozoyywYdlDDEYyFjkbRaRVpv/9AuTGUEw1YmvATJqU7HiJXbT+/rBVdoKWUzCwXN
iEkIJv/QpmsChRBLMe6ZRGYzkdlDuVHHCKEWnQuNTWuBZG30e/m+v5IkR9xsaJGm
OZ5v1+xj9EdMLzIS+0XaprzTNjRJBvp9thCS2FPQbOEPgZWDHU042FKsUtJclzhA
hd+Kss9R3CaJ/XHHZwcGHwx1I0TFAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUfeni
vZqgHU2rR0rUKUAIr4JW6cgwHwYDVR0jBBgwFoAUpYtjJ6XUx8zCXX70gqgT0A2e
7OMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NzRBLzgyQ0E5OTVBNzQ3RjExRUM5Q0IyM0E5NzVBNDBENTc3L3BZdGpK
NlhVeDh6Q1hYNzBncWdUMEEyZTdPTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3BZdGpKNlhVeDh6Q1hYNzBncWdUMEEyZTdPTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjE0NzRBLzgyQ0E5OTVBNzQ3RjExRUM5Q0IyM0E5NzVBNDBE
NTc3L0UzMEI1NkQ2REI0QzExRUNBNTVFNzJDQUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOg8iAwDQYJKoZIhvcNAQELBQAD
ggEBAHfrXzcucFpsNd0rc0hSS4VA4LA2YWWmNY9bEi6Duk5AaPD7oNYcn8HOm283
UPWHRUTZotEgAEM0Gk5tXlAMB9gD/yD2Te0Mes4BAjsw2xOdEZaCmNSXw48U4sOf
AWmrxZDelSBzrJZRXlkOdI9cdwbO+ERC/nz4gK2YlWkLEFcATSD53Y8r7fPh6d7f
kb8GqJu15VyBFJtBU76j3Ha7lhQx3BVe6uDOkv2K54gX+V2aLEALGHgQtJ8gcs04
JtY+fFLv2KjH3qBNXZE+ioVyVcPf0tkO9Evbxm1w1iYDF4rIFaWSdlSf/8ePMhi3
ywixmzNxur6h7N0iBAbiQUaeTl4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-fra.rpki-client.org