Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CAA/AA6148485AAF11E9B961EE77F8AEA228/2908B1B45AB411E9AD55A47BF8AEA228.roa
File: 2908B1B45AB411E9AD55A47BF8AEA228.roa (raw, json)
Hash identifier: jSXcfZLE7jbKpY0N3reeqarn5JJAbWHpfTPNtOeAJ8M=
Subject key identifier: A6:BB:6B:A3:B6:0B:85:67:28:46:D1:09:CF:D0:D9:3B:21:FF:24:00
Certificate issuer: /CN=F3668CAAAF/serialNumber=A28532016A62C8E08AC783E6C071C11D342CF75D
Certificate serial: 0B
Authority key identifier: A2:85:32:01:6A:62:C8:E0:8A:C7:83:E6:C0:71:C1:1D:34:2C:F7:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ooUyAWpiyOCKx4PmwHHBHTQs910.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/AA6148485AAF11E9B961EE77F8AEA228/2908B1B45AB411E9AD55A47BF8AEA228.roa
Signing time: Tue 09 Apr 2019 10:42:24 +0000
ROA not before: Tue 09 Apr 2019 10:42:19 +0000
ROA not after: Mon 30 Apr 2029 10:42:19 +0000
asID: 327999
IP address blocks: 102.129.0.0/19 maxlen: 19
196.202.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CAAAF/serialNumber=A28532016A62C8E08AC783E6C071C11D342CF75D
Validity
Not Before: Apr 9 10:42:19 2019 GMT
Not After : Apr 30 10:42:19 2029 GMT
Subject: CN=5cac7710-99da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:b8:d7:07:c5:94:e3:ba:3b:c3:fb:a6:57:
93:a3:4f:03:cd:c8:07:b1:6f:2f:a9:e3:11:c3:6f:
2d:58:ea:e9:f5:92:0f:2d:bb:f1:00:cd:0d:8c:db:
cc:79:bd:c7:6e:1d:97:11:3e:73:a8:c7:d1:d8:b1:
c1:c0:07:53:5c:54:e0:22:84:b5:5f:fc:a7:5b:7a:
20:89:58:99:9d:37:16:e9:9e:cb:25:f0:2f:06:5d:
eb:c8:9f:94:f0:18:21:0c:21:b5:1b:c0:4d:1c:db:
0f:e3:7a:7c:c5:3a:85:2f:1b:42:5f:1c:18:84:1e:
05:4d:e3:39:a4:16:8b:16:0c:1f:a0:38:bf:f2:fa:
b4:92:04:04:76:9d:a2:f8:b9:66:dd:f6:23:49:ee:
73:00:69:f0:9f:4f:18:20:20:52:7d:bc:1e:4a:05:
d4:2a:ed:12:7c:f5:bd:18:7b:4a:06:30:57:3b:63:
13:3b:2b:14:cb:77:57:aa:bb:93:1b:19:21:7c:e7:
de:85:0b:f3:2a:4b:b8:25:5e:82:66:c6:3b:1b:9d:
d6:68:ab:2e:80:95:53:14:18:a3:2f:f1:89:e6:11:
46:52:c6:62:3e:b8:22:f7:8c:4a:1e:70:f4:e8:15:
83:0b:54:35:d8:80:1a:77:f4:3c:f3:00:7c:b2:75:
cd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BB:6B:A3:B6:0B:85:67:28:46:D1:09:CF:D0:D9:3B:21:FF:24:00
X509v3 Authority Key Identifier:
keyid:A2:85:32:01:6A:62:C8:E0:8A:C7:83:E6:C0:71:C1:1D:34:2C:F7:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/AA6148485AAF11E9B961EE77F8AEA228/ooUyAWpiyOCKx4PmwHHBHTQs910.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ooUyAWpiyOCKx4PmwHHBHTQs910.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/AA6148485AAF11E9B961EE77F8AEA228/2908B1B45AB411E9AD55A47BF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.129.0.0/19
196.202.224.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:d6:b2:7a:a7:60:2b:bf:f5:1a:26:fe:87:1f:e8:e4:08:92:
85:06:aa:92:9e:27:62:6f:8a:b0:e3:19:86:45:05:09:d3:28:
c8:1f:18:6c:62:48:6e:27:9f:5f:59:3e:9c:cc:6b:82:e2:3e:
c0:17:30:ae:2d:06:bc:22:ec:87:90:84:93:fd:6c:c0:e9:eb:
25:95:0c:4b:ef:40:1f:eb:c2:b6:37:ea:c2:a6:d4:6e:af:73:
7e:74:92:2e:10:57:6b:02:f7:55:f3:64:23:43:14:8c:23:5d:
2f:3b:51:19:56:2c:42:16:51:f8:74:c9:e1:29:9a:81:84:1d:
82:e4:57:aa:cf:a8:6b:3f:37:77:c7:1d:80:28:8e:7d:a2:be:
aa:3b:5b:be:ac:35:1c:b7:67:ae:a8:56:86:b4:0b:af:37:55:
61:c5:0f:8e:91:1a:02:0c:92:09:46:e2:db:e4:87:12:9d:c3:
24:fa:62:f5:57:27:21:f7:46:b8:f0:17:b6:35:36:e5:00:59:
ce:7f:e5:62:3e:8e:99:a8:a9:e2:48:d1:9e:a2:64:b9:30:6a:
20:b6:0d:00:68:9c:01:4c:ed:37:2b:e7:8d:5a:f6:f5:4b:8d:
c2:26:fe:98:7d:a8:0c:8d:23:f3:4a:97:1e:a5:28:be:b4:1e:
1d:6b:b7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:56 2023 by rpki-client on console-ams.rpki-client.org