Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F599/18B730289F1A11EABCE2D14BF8AEA228/EF34EA369F6111EA819B1715F8AEA228.roa
File: EF34EA369F6111EA819B1715F8AEA228.roa (raw, json)
Hash identifier: FodIGDT2mJAtIfH0q0g8bejRtPICLbpQWa+w4uY37fM=
Subject key identifier: 2E:32:41:2B:1A:EA:64:02:91:85:7A:62:AF:7B:86:4F:2F:43:67:12
Certificate issuer: /CN=F367F599AR/serialNumber=673CB1A8A3D7D027FFE651A64BEF750DDA3E76AA
Certificate serial: 08
Authority key identifier: 67:3C:B1:A8:A3:D7:D0:27:FF:E6:51:A6:4B:EF:75:0D:DA:3E:76:AA
Authority info access: rsync://rpki.afrinic.net/repository/arin/ZzyxqKPX0Cf_5lGmS-91Ddo-dqo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367F599/18B730289F1A11EABCE2D14BF8AEA228/EF34EA369F6111EA819B1715F8AEA228.roa
Signing time: Tue 26 May 2020 15:02:36 +0000
ROA not before: Tue 26 May 2020 15:02:33 +0000
ROA not after: Sun 25 May 2025 15:02:33 +0000
asID: 327997
IP address blocks: 169.239.252.0/22 maxlen: 23
169.239.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367F599AR/serialNumber=673CB1A8A3D7D027FFE651A64BEF750DDA3E76AA
Validity
Not Before: May 26 15:02:33 2020 GMT
Not After : May 25 15:02:33 2025 GMT
Subject: CN=5ecd2f8c-54d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:08:83:60:54:d6:7f:53:c4:16:bc:57:69:
a1:38:3f:ef:d4:4c:64:5f:e4:60:3c:dc:76:a1:11:
fe:83:f0:05:73:57:ec:0c:b0:9f:45:9f:58:ed:d7:
06:cc:6d:ef:b7:6f:57:a5:fc:5b:ed:22:80:30:54:
fc:19:7d:7c:f8:c1:32:21:b2:26:70:23:29:44:15:
41:3c:72:d3:6e:fa:20:e8:b0:71:1f:1c:be:2d:a7:
56:a3:93:38:c6:3a:be:9e:8f:5b:ae:5d:09:e1:9e:
d2:68:06:15:6c:d0:aa:d4:4f:4b:5c:2b:95:68:cb:
0c:0d:a5:c4:a8:39:28:55:6e:bc:98:d3:47:07:c7:
41:bc:e2:19:b0:42:6a:2b:df:1a:16:66:b8:37:e1:
b5:e9:f1:08:ec:19:65:a4:82:14:a2:0f:a4:0a:e8:
36:48:89:94:9e:2d:56:6f:17:92:32:02:57:84:99:
61:c2:e0:7f:56:0a:c1:83:10:d0:f4:dd:43:2e:81:
ee:e3:fc:82:94:f1:72:08:3d:94:5c:43:bf:b2:fb:
02:1e:94:86:c3:af:24:f0:38:40:7c:a1:67:e9:8c:
bf:a3:21:32:c6:f9:64:ae:93:27:c6:3d:bb:bf:b8:
48:6b:76:3f:98:c3:1a:ee:b2:bb:e9:82:f9:50:21:
f0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:32:41:2B:1A:EA:64:02:91:85:7A:62:AF:7B:86:4F:2F:43:67:12
X509v3 Authority Key Identifier:
keyid:67:3C:B1:A8:A3:D7:D0:27:FF:E6:51:A6:4B:EF:75:0D:DA:3E:76:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367F599/18B730289F1A11EABCE2D14BF8AEA228/ZzyxqKPX0Cf_5lGmS-91Ddo-dqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZzyxqKPX0Cf_5lGmS-91Ddo-dqo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F599/18B730289F1A11EABCE2D14BF8AEA228/EF34EA369F6111EA819B1715F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.252.0/22
Signature Algorithm: sha256WithRSAEncryption
95:a3:2a:2e:b2:15:1e:7e:5b:e9:29:a0:b0:36:ff:f6:46:76:
22:c3:98:c2:4a:c6:d3:56:71:9d:00:13:59:3b:25:eb:1a:59:
9d:cb:4f:05:2a:25:52:ab:14:74:3c:17:d9:60:d7:94:ba:e9:
56:b7:95:32:21:02:0f:3c:a6:7d:5a:9a:c2:c6:81:87:16:a3:
cf:4f:ff:44:f2:35:5e:49:12:95:25:eb:ae:7c:e5:93:85:a8:
21:52:51:fe:23:a2:96:a6:65:cb:13:6b:86:5c:8a:15:2e:68:
df:6b:77:1b:65:35:5f:db:02:48:10:e5:9c:af:b9:0f:41:23:
3c:d9:24:03:50:88:f7:e6:51:72:bd:81:9b:9c:9d:e9:b7:7c:
1a:6b:a0:bb:93:42:4a:b3:68:21:d1:80:36:ac:30:d5:ce:6e:
92:6f:ce:69:1c:8d:43:0c:6b:14:13:f0:74:b9:72:6c:df:eb:
1b:dd:02:3e:99:33:15:f9:da:3f:b4:05:f1:b9:1d:73:7a:36:
f0:d1:5d:18:95:08:38:3b:b6:59:2b:cf:0b:bc:e4:0b:91:33:
c3:b3:33:71:78:58:60:19:e6:2e:3f:69:69:03:eb:09:85:ee:
df:96:23:31:cc:b5:67:7a:01:d5:93:f4:a6:79:43:bf:c7:dc:
1b:9d:00:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 01:48:43 2024 by rpki-client on console-ams.rpki-client.org