Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CAA/BF3D18AA5AAF11E98D1CFE77F8AEA228/D517E75C9C5911EB9B92A219F8AEA228.roa
File: D517E75C9C5911EB9B92A219F8AEA228.roa (raw, json)
Hash identifier: +tfCf3CxVrJGRIHm73LMruImKrYcjsq3c6jAW1uYXvg=
Subject key identifier: A8:55:19:47:E6:4D:AC:90:B0:B1:0C:0B:02:95:6F:82:89:18:6A:86
Certificate issuer: /CN=F3668CAAAR/serialNumber=69C4E69C18A4A4FA6237116763DC7C9D9B3756F2
Certificate serial: 02FE
Authority key identifier: 69:C4:E6:9C:18:A4:A4:FA:62:37:11:67:63:DC:7C:9D:9B:37:56:F2
Authority info access: rsync://rpki.afrinic.net/repository/arin/acTmnBikpPpiNxFnY9x8nZs3VvI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/BF3D18AA5AAF11E98D1CFE77F8AEA228/D517E75C9C5911EB9B92A219F8AEA228.roa
Signing time: Tue 13 Apr 2021 13:12:01 +0000
ROA not before: Tue 13 Apr 2021 13:11:57 +0000
ROA not after: Sat 12 Apr 2031 13:11:57 +0000
asID: 327999
IP address blocks: 45.220.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 766 (0x2fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CAAAR/serialNumber=69C4E69C18A4A4FA6237116763DC7C9D9B3756F2
Validity
Not Before: Apr 13 13:11:57 2021 GMT
Not After : Apr 12 13:11:57 2031 GMT
Subject: CN=607598a1-1ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:f5:f4:0f:b9:16:37:89:a3:38:39:d9:76:
b0:89:4b:d7:3b:de:5a:6d:32:26:b1:da:7d:03:63:
2a:6c:ab:f1:4b:c3:53:38:3e:e1:11:a1:72:23:88:
af:0b:d8:8d:04:62:f0:e6:c6:f1:e2:9f:e0:57:d1:
79:40:24:87:c0:13:2e:59:43:7f:a1:5f:39:b8:9e:
57:b2:cc:e7:6f:a4:12:8d:9f:0b:91:bf:e6:0f:79:
59:30:f4:c6:62:17:f3:01:70:be:9a:12:22:aa:db:
e0:95:a5:1b:bc:83:86:f8:12:84:10:3d:7c:9c:96:
23:ab:80:c9:42:8c:18:5d:86:b8:78:be:1b:5f:86:
d6:50:ed:73:fb:51:c5:92:40:6a:64:86:57:a8:0c:
80:f3:84:7d:d9:43:52:17:38:c9:09:c2:bf:9f:2f:
f8:fe:cf:34:96:d6:dd:c3:69:bd:92:fc:5b:b6:b7:
9d:18:8b:60:78:50:41:a8:48:55:a4:5d:12:7d:ba:
f6:69:b7:3a:4c:89:47:0d:e4:77:a9:39:44:9b:f0:
e6:81:9f:0a:ab:1f:42:06:c5:29:18:0b:ff:a8:6f:
82:dd:0d:ac:08:da:ed:6f:15:8b:12:46:d3:94:b7:
8b:c8:f8:ba:f5:ba:1e:a6:d9:63:76:20:19:44:0d:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:55:19:47:E6:4D:AC:90:B0:B1:0C:0B:02:95:6F:82:89:18:6A:86
X509v3 Authority Key Identifier:
keyid:69:C4:E6:9C:18:A4:A4:FA:62:37:11:67:63:DC:7C:9D:9B:37:56:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/BF3D18AA5AAF11E98D1CFE77F8AEA228/acTmnBikpPpiNxFnY9x8nZs3VvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/acTmnBikpPpiNxFnY9x8nZs3VvI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/BF3D18AA5AAF11E98D1CFE77F8AEA228/D517E75C9C5911EB9B92A219F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.220.36.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:75:a9:e8:42:2d:3a:40:01:cc:02:f9:ae:b0:11:ae:6c:84:
95:dc:0b:2c:f3:18:4d:fa:54:db:51:eb:48:96:f6:7d:5c:d3:
44:0a:12:ea:92:fc:70:b4:83:f0:58:fd:1a:16:43:4a:6a:fe:
00:3d:12:ed:8a:1d:35:4e:af:5e:a1:71:a5:1d:70:d1:ad:cf:
67:27:84:74:00:26:78:83:fc:83:9e:56:82:57:c9:eb:a6:db:
c2:33:d9:2d:35:a6:cb:82:11:bf:51:7f:51:69:a7:dd:f2:f6:
fc:f6:23:ae:f4:68:54:07:cb:89:d6:8b:0d:37:5b:12:72:f6:
b4:f0:42:35:e6:26:af:2e:91:89:7f:c3:03:f6:18:78:f3:0d:
25:b1:b1:27:0d:07:2c:1a:38:9c:4d:66:06:e3:f7:6d:95:f2:
00:e6:03:c8:62:b5:8f:cf:77:0a:66:3a:26:1d:44:84:7f:b7:
5a:6a:61:25:9f:22:94:66:1f:0f:ae:d3:7f:35:ef:58:dd:ed:
d6:fb:23:2c:5c:64:ef:bc:c6:cb:26:99:39:fc:45:56:f6:62:
9a:3f:e2:11:12:f4:9b:e1:6e:a4:cb:23:63:96:3b:28:3f:00:
a6:1d:cb:37:1c:c6:62:65:d9:97:30:31:04:fc:0f:94:a1:b6:
5a:e0:e7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org