Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/E3CC92B2AB1811EF86C7F479762E951A.roa
File: E3CC92B2AB1811EF86C7F479762E951A.roa (raw, json)
Hash identifier: TFsOPlhZpWRBJYJKBHhEjMZSgDMfyDlwRle6Xdkgtls=
Subject key identifier: CF:AC:DC:C7:CE:E1:99:A6:D9:45:A8:AF:F9:57:53:9F:03:F8:DB:5C
Certificate issuer: /CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Certificate serial: 07C8
Authority key identifier: 86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
Authority info access: rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/E3CC92B2AB1811EF86C7F479762E951A.roa
Signing time: Mon 25 Nov 2024 10:34:46 +0000
ROA not before: Mon 25 Nov 2024 10:34:42 +0000
ROA not after: Wed 01 Dec 2049 10:34:42 +0000
asID: 1288
IP address blocks: 160.0.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1992 (0x7c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368588EAR
Validity
Not Before: Nov 25 10:34:42 2024 GMT
Not After : Dec 1 10:34:42 2049 GMT
Subject: CN=674452c6-4426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:2b:d1:34:73:55:1c:a8:d7:24:57:60:ce:
07:e8:e0:28:bf:f6:13:77:dd:95:f2:ef:c9:20:f9:
b0:ad:b1:86:27:0d:b4:e5:64:9e:bb:84:88:9f:4e:
a3:73:d4:2b:82:78:6f:64:f1:51:3a:70:fc:ba:c4:
c5:f4:0f:0f:1f:89:80:bf:a8:08:d3:f2:be:23:33:
9f:79:11:b5:1b:c8:79:a3:ac:45:bd:f5:0f:fd:ff:
ee:bf:30:5d:5b:c5:fb:36:1c:9e:2b:e7:ad:ac:01:
b7:de:75:45:8f:c2:ba:64:82:df:bd:63:20:72:85:
5f:49:62:88:cd:0a:bd:ba:3d:11:98:41:a4:c1:56:
2e:7c:d8:8d:a7:ae:0b:9a:82:ae:31:1c:e3:4e:4b:
16:1b:71:f5:77:3d:15:bd:66:50:e5:1b:0d:4b:c8:
41:c5:d9:72:35:5f:58:53:b4:ca:a8:d4:1f:9d:05:
23:1f:8b:55:eb:d5:03:20:89:66:21:8d:7d:12:f2:
65:13:4e:fb:6d:42:14:3d:22:fe:ec:a7:b1:3b:24:
92:38:eb:d4:2e:6b:0c:bc:a4:4e:97:e9:7c:c9:cb:
ab:8d:1a:c7:2b:98:7f:02:c7:45:05:8b:80:a5:1a:
de:13:b6:2b:23:01:64:f4:f7:da:63:a7:2b:3d:ba:
0d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AC:DC:C7:CE:E1:99:A6:D9:45:A8:AF:F9:57:53:9F:03:F8:DB:5C
X509v3 Authority Key Identifier:
keyid:86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/E3CC92B2AB1811EF86C7F479762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b5:92:2a:17:cc:86:b0:08:94:16:43:40:8b:ff:19:3c:9f:77:
8d:18:0a:f6:6d:1e:09:ff:fc:62:86:b3:53:2b:a6:85:f3:d9:
85:c4:96:11:e9:e1:95:cd:08:22:9b:f3:09:8c:2f:94:27:13:
80:1c:28:9a:1f:8f:61:9c:bb:99:00:ca:ac:6e:3b:72:70:bd:
d8:69:42:03:2f:50:2e:eb:82:e3:e3:ba:83:e5:46:b7:11:c9:
bc:68:f2:54:f7:0d:8e:c0:1d:39:96:19:92:fa:37:78:62:6b:
68:12:60:61:b0:0a:f8:d2:df:77:38:c6:97:44:86:8e:bb:68:
20:9f:7f:78:fa:0f:f3:67:64:97:69:e1:9c:c9:e7:6d:7d:01:
32:20:09:0d:2a:d6:be:b9:2e:92:4c:19:01:a8:48:05:c4:e3:
23:1e:53:94:80:66:61:bc:2a:a6:cd:85:24:ac:d1:6a:11:1b:
51:d7:7a:07:af:75:68:ba:68:d4:17:66:5d:3d:cf:63:b7:fd:
c1:49:65:d8:ea:67:ea:52:df:e6:5a:dd:bf:33:91:50:4c:ab:
f3:31:fa:1c:6b:7a:38:85:3b:e2:d1:cd:36:f6:c6:12:ef:9d:
12:f5:8c:2f:b9:cd:5e:e3:1b:74:8b:f6:88:25:91:b4:5b:4a:
7f:9c:d3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:07:12 2025 by rpki-client