Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/5E6CE28EEC0F11E9A2BF4823F8AEA228.roa
File: 5E6CE28EEC0F11E9A2BF4823F8AEA228.roa (raw, json)
Hash identifier: rZWqJTfhbcJ2LF+zcawOAB4IZ8kb8IOoqwLvQP4oqkI=
Subject key identifier: 8F:CB:15:7B:8A:73:51:AA:E5:3E:B4:9C:B2:0C:20:DC:10:71:24:4B
Certificate issuer: /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial: 05ED
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/5E6CE28EEC0F11E9A2BF4823F8AEA228.roa
Signing time: Fri 11 Oct 2019 10:10:37 +0000
ROA not before: Fri 11 Oct 2019 10:10:31 +0000
ROA not after: Thu 11 Oct 2029 10:10:31 +0000
asID: 37199
IP address blocks: 41.76.128.0/21 maxlen: 23
197.155.0.0/19 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1517 (0x5ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361D299AF
Validity
Not Before: Oct 11 10:10:31 2019 GMT
Not After : Oct 11 10:10:31 2029 GMT
Subject: CN=5da0551c-c728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:5c:b1:5d:c5:fd:d3:af:84:a1:bd:13:22:
bc:30:b9:92:68:37:00:85:38:9d:83:fd:88:b5:cc:
4e:3e:93:f0:5c:c2:7a:3f:4a:a4:10:3c:73:b5:30:
02:9a:a9:7e:d6:98:3a:8a:e2:cd:92:84:f1:e6:b8:
0c:9c:76:d8:52:41:89:77:82:1c:7d:1e:8b:dc:29:
de:b3:5e:6a:9c:e5:f0:eb:e6:64:d3:95:64:9b:bd:
95:89:7f:e9:92:d7:ff:41:2f:9d:de:ad:53:a6:bd:
2a:0a:7d:83:b3:a9:ba:8e:5d:87:47:56:e2:5c:28:
09:2a:2b:e2:df:3e:c0:6e:31:bd:1a:ce:51:b5:81:
c2:74:af:18:50:5f:53:70:08:74:49:c2:f2:1c:75:
d5:f0:8b:ac:21:0e:c4:85:2a:99:d3:0e:33:c2:8f:
f7:9c:2f:8b:34:18:49:1d:aa:92:33:05:87:41:5b:
2d:2b:76:d7:e1:de:b0:54:59:2f:dd:56:3e:49:7e:
70:6c:6e:40:60:26:31:b8:63:91:3a:6e:6d:1e:e2:
62:ce:3c:1e:59:75:0d:0f:ae:79:99:48:1d:17:a6:
2a:42:3b:a2:0b:c2:d9:1a:c8:06:75:fe:f1:21:2a:
34:49:8c:5a:8c:4a:b4:0d:45:0b:44:82:5e:b8:d4:
b5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CB:15:7B:8A:73:51:AA:E5:3E:B4:9C:B2:0C:20:DC:10:71:24:4B
X509v3 Authority Key Identifier:
keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/5E6CE28EEC0F11E9A2BF4823F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.76.128.0/21
197.155.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7a:b8:e7:90:00:6c:c2:7b:f7:21:f2:74:5f:80:ff:a1:7f:da:
d9:89:a6:88:04:fd:10:9c:f7:85:2c:58:12:bc:a6:11:ad:9e:
83:54:ff:72:36:e6:62:5f:8d:e9:f4:cd:25:36:94:7d:35:79:
d1:a3:fa:bf:45:ce:09:2d:17:7a:92:71:5d:4f:85:ed:52:c7:
f3:ec:5c:b5:f7:f7:a9:25:31:7c:d9:46:98:d8:68:1a:e1:d2:
86:67:36:38:a0:5b:eb:0b:0b:30:19:01:00:76:e4:04:69:7e:
59:6d:da:ef:de:ec:25:3e:a4:c3:22:33:e7:58:46:80:88:29:
e6:15:fb:30:bf:c5:3f:70:fd:07:a4:ee:af:92:3a:1a:c3:85:
1b:b2:0e:99:ff:00:cc:c5:16:21:0b:c2:07:25:93:b2:bb:83:
6e:b9:e0:cf:6c:d8:a1:b0:5f:b5:61:2a:55:f9:a1:38:29:6e:
c7:58:03:7d:7f:92:81:24:4f:6c:52:e4:00:8a:63:94:b1:71:
72:95:2d:d9:27:11:0b:84:79:0c:40:e3:00:70:dd:54:a4:af:
84:7b:ba:a7:c9:44:c0:36:9c:d2:51:59:68:29:f3:d1:2e:c1:
65:1a:23:29:9d:2c:a4:4c:d2:09:aa:74:6a:fe:6d:5f:7a:08:
7b:1a:a2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:00:55 2025 by rpki-client