Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/615A0766915411EABF93FA46F8AEA228.roa
File: 615A0766915411EABF93FA46F8AEA228.roa (raw, json)
Hash identifier: vpOV4UVOOt7o24J1dAjkogLBCjrr4dxIlniXAbr/mR0=
Subject key identifier: F9:74:66:86:90:6C:0A:E6:3C:F7:83:34:76:BD:53:DE:B3:DD:15:40
Certificate issuer: /CN=F3645501AF/serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
Certificate serial: 02
Authority key identifier: 0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/615A0766915411EABF93FA46F8AEA228.roa
Signing time: Fri 08 May 2020 17:50:19 +0000
ROA not before: Fri 08 May 2020 17:50:14 +0000
ROA not after: Mon 09 May 2022 17:50:14 +0000
asID: 327705
IP address blocks: 196.220.128.0/19 maxlen: 19
196.220.128.0/20 maxlen: 20
196.220.144.0/20 maxlen: 20
2001:43f8:9f0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645501AF
Validity
Not Before: May 8 17:50:14 2020 GMT
Not After : May 9 17:50:14 2022 GMT
Subject: CN=5eb59bdb-5277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:44:0a:97:fd:98:42:72:da:da:2d:55:28:41:
80:be:a4:5e:10:9e:90:5a:8b:90:d0:4c:ab:54:16:
e6:8f:65:c8:77:5f:b4:cd:59:a0:ad:5c:6c:78:7e:
59:04:da:82:1f:5d:a1:17:f2:f7:f4:5c:dc:b7:e5:
12:f2:a7:e1:99:26:ce:4e:48:9b:6a:bb:3c:55:df:
3e:26:f6:1f:45:0b:e7:7c:5e:7c:16:47:02:c3:49:
b2:8c:12:9f:a9:bf:2e:ff:56:b1:36:76:d5:44:75:
6b:f2:d9:43:5f:bd:2c:2a:f9:88:31:1f:2d:f9:93:
9c:05:3a:b8:76:42:78:74:6d:e4:a3:15:ae:b8:2a:
e3:bf:92:b8:4a:b1:27:94:bf:81:46:44:40:4c:d5:
36:f8:ac:ae:c3:24:50:0e:cd:27:8e:10:ca:2b:8a:
ff:7b:a8:0c:5f:fc:1b:7f:72:02:41:55:19:90:6f:
b7:68:4e:98:de:19:62:0d:3a:76:3a:e6:0a:50:8b:
ac:49:9c:48:a4:03:81:64:3b:26:e0:fb:5c:b9:29:
0e:88:14:36:d1:da:97:85:6a:50:3b:e9:3e:68:4d:
a0:ce:1a:c8:46:c9:05:1f:33:79:c1:9f:6c:44:db:
32:07:6e:73:7a:01:85:6f:ad:7b:3d:92:58:97:e9:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:74:66:86:90:6C:0A:E6:3C:F7:83:34:76:BD:53:DE:B3:DD:15:40
X509v3 Authority Key Identifier:
keyid:0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/615A0766915411EABF93FA46F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.220.128.0/19
IPv6:
2001:43f8:9f0::/48
Signature Algorithm: sha256WithRSAEncryption
65:7a:e8:54:c7:d4:c3:ea:78:0b:cc:1b:1e:e2:5b:5c:e3:98:
dc:02:d4:eb:d3:06:fa:e8:90:11:58:c6:91:e7:8d:89:d9:c0:
e6:a4:95:e4:92:4f:e2:6b:ba:8a:6a:b6:4c:9c:10:6e:69:77:
d6:a5:99:cc:0b:eb:92:79:c9:d2:8d:d9:70:b8:1b:e7:78:a3:
b9:7e:0a:25:43:be:dc:9d:b0:ed:78:75:ac:5c:91:26:83:ff:
1b:9a:bb:6c:27:5b:72:83:5e:ae:e4:6b:ff:48:62:dd:9f:b7:
4f:92:c6:6d:80:74:4a:b7:ed:75:8d:3a:54:c2:f5:45:d6:59:
49:71:7f:62:06:b6:ef:db:a0:a9:38:de:f9:6f:ea:df:fa:f2:
4a:a7:9d:fa:14:5d:43:9a:79:86:66:22:4b:c7:34:f1:31:32:
4c:67:17:45:28:b2:0d:97:53:d2:d0:f5:ac:a0:c3:c8:b8:22:
6f:2a:51:97:7d:0c:b3:52:28:18:f0:02:8e:55:ec:c5:f3:6b:
ec:a5:2d:70:d9:26:ca:4d:17:6c:d8:72:b1:b3:6d:66:01:14:
80:03:d2:cd:38:0d:6d:3b:1e:0b:40:21:b6:34:a7:67:b7:12:
96:ba:87:e6:96:dd:e4:ce:79:6c:81:26:aa:8f:04:e1:b1:38:
6b:74:b5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:47 2025 by rpki-client