Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CAA/AA6148485AAF11E9B961EE77F8AEA228/E643E5586FD811E99C5AD21AF8AEA228.roa
File: E643E5586FD811E99C5AD21AF8AEA228.roa (raw, json)
Hash identifier: lJW5XM9W+l6N25rmtrRNaUL5euQFmiAqA1KN2bvE2Kw=
Subject key identifier: 50:55:DD:39:AA:42:BE:8A:D8:FA:37:FF:48:F0:CF:B1:ED:10:90:B2
Certificate issuer: /CN=F3668CAAAF/serialNumber=A28532016A62C8E08AC783E6C071C11D342CF75D
Certificate serial: 29
Authority key identifier: A2:85:32:01:6A:62:C8:E0:8A:C7:83:E6:C0:71:C1:1D:34:2C:F7:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ooUyAWpiyOCKx4PmwHHBHTQs910.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/AA6148485AAF11E9B961EE77F8AEA228/E643E5586FD811E99C5AD21AF8AEA228.roa
Signing time: Mon 06 May 2019 08:28:18 +0000
ROA not before: Mon 06 May 2019 08:28:14 +0000
ROA not after: Thu 31 May 2029 08:28:14 +0000
asID: 327999
IP address blocks: 102.129.2.0/23 maxlen: 23
102.129.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CAAAF/serialNumber=A28532016A62C8E08AC783E6C071C11D342CF75D
Validity
Not Before: May 6 08:28:14 2019 GMT
Not After : May 31 08:28:14 2029 GMT
Subject: CN=5ccff022-516b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:63:ee:db:c4:26:e3:b7:de:84:9d:c5:33:
d7:35:95:75:24:59:a8:47:4f:9a:1e:80:ae:1a:13:
95:d0:07:23:7b:ad:48:a2:02:f9:d3:db:7a:4d:d7:
d8:27:35:f8:44:e2:78:71:e9:19:d8:8c:27:8b:cb:
cd:1a:c8:a3:87:28:42:e9:4b:ef:9b:f2:34:d0:ec:
4a:8c:89:eb:bb:f5:24:06:2c:79:fc:85:70:a2:e1:
30:e5:3d:05:5a:95:98:3f:30:fb:93:94:e7:f0:10:
90:ea:8d:e5:5a:6f:d0:46:cd:fd:b7:d4:e2:cc:7b:
c7:26:1f:1f:5c:8c:1e:5b:1a:7c:72:62:1e:4e:12:
f9:03:d8:25:75:7d:98:7e:a1:04:30:c0:78:54:fe:
a1:16:68:05:4c:b9:db:76:3d:4b:e3:68:50:f7:e1:
3d:1d:e5:90:62:97:45:f8:81:fc:3f:cb:4f:15:b1:
da:02:40:2b:ff:e5:dc:31:94:a9:48:ad:ba:bf:0f:
5c:b0:5e:30:7d:13:bb:a9:c1:19:c6:f3:35:3d:4a:
3e:72:3d:d3:c6:6b:c3:b6:f2:a0:68:73:21:f1:7b:
99:eb:22:86:e5:4a:01:6d:3a:26:e3:3b:6e:e4:43:
e6:fc:3b:f5:a5:be:c7:3d:b1:82:e7:ef:ab:ee:42:
24:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:55:DD:39:AA:42:BE:8A:D8:FA:37:FF:48:F0:CF:B1:ED:10:90:B2
X509v3 Authority Key Identifier:
keyid:A2:85:32:01:6A:62:C8:E0:8A:C7:83:E6:C0:71:C1:1D:34:2C:F7:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/AA6148485AAF11E9B961EE77F8AEA228/ooUyAWpiyOCKx4PmwHHBHTQs910.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ooUyAWpiyOCKx4PmwHHBHTQs910.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/AA6148485AAF11E9B961EE77F8AEA228/E643E5586FD811E99C5AD21AF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.129.2.0-102.129.5.255
Signature Algorithm: sha256WithRSAEncryption
6a:dc:26:9b:ca:83:f3:d5:1c:bc:5c:f2:eb:b3:3c:ae:72:03:
0b:2a:a4:39:70:58:bc:a7:7e:11:27:d9:d6:48:b6:b8:8e:9e:
19:71:50:73:db:25:d4:af:a8:d8:c3:e9:0e:a0:1d:78:a0:e7:
2c:16:0c:f2:e4:63:7f:19:3c:e5:b2:dc:ea:b7:1a:63:01:b9:
9a:43:63:bf:8d:0b:15:22:f8:89:b4:d4:d1:40:e3:fd:fd:55:
e6:5b:84:d4:78:3f:03:34:74:89:fc:f7:3e:17:dd:07:cc:55:
c6:60:19:6c:c4:ca:bf:f0:b0:83:5a:94:fa:b2:cc:75:0e:6c:
fd:22:e0:aa:37:05:f6:b3:6d:c3:57:89:c5:47:0b:ff:ec:0a:
27:d8:58:16:63:ac:e9:3f:ef:7e:ea:6a:ea:77:00:87:be:9c:
fd:c3:c2:8c:ca:86:a4:71:03:bc:51:15:5f:03:f2:9c:fb:8c:
9c:a1:5a:b9:12:9d:9c:fc:03:a7:44:85:0d:02:3e:14:fa:78:
59:c0:c7:47:4a:91:69:f1:cf:3f:6d:ba:92:3a:fb:7c:23:e4:
32:94:8d:59:12:1d:54:d1:bf:a6:6a:b9:99:30:25:4f:ed:f8:
91:a8:1b:db:93:3b:9c:d5:57:7c:d1:4b:ae:1b:8e:17:f9:2f:
d2:f0:2d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org