Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2DFE/241C3AF85DB411EC8E22A1A45A40D577/5C85507C5DB511ECA59354A85A40D577.roa
File: 5C85507C5DB511ECA59354A85A40D577.roa (raw, json)
Hash identifier: 7LvjFYC4Ld8HV1lgqDCbbr5tDoNYN5Lj7QfFGYNSdCg=
Subject key identifier: 93:6C:10:1C:56:1C:EE:44:3F:1B:C3:E3:1A:2D:48:83:08:4A:D2:83
Certificate issuer: /CN=F36B2DFEAF/serialNumber=9CDCE6F51AE37C5598AEB62B63F159E82F06C2A5
Certificate serial: 04
Authority key identifier: 9C:DC:E6:F5:1A:E3:7C:55:98:AE:B6:2B:63:F1:59:E8:2F:06:C2:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nNzm9RrjfFWYrrYrY_FZ6C8GwqU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B2DFE/241C3AF85DB411EC8E22A1A45A40D577/5C85507C5DB511ECA59354A85A40D577.roa
Signing time: Wed 15 Dec 2021 14:43:27 +0000
ROA not before: Wed 15 Dec 2021 14:43:22 +0000
ROA not after: Mon 15 Dec 2031 14:43:22 +0000
asID: 37658
IP address blocks: 154.66.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B2DFEAF
Validity
Not Before: Dec 15 14:43:22 2021 GMT
Not After : Dec 15 14:43:22 2031 GMT
Subject: CN=61b9ff0e-999f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:f2:fc:f4:81:34:af:05:6b:50:8e:f7:75:
98:0b:3a:c9:a8:e3:a7:66:70:ff:a9:32:13:96:3f:
6c:fb:e7:07:71:47:4e:36:29:5c:f7:66:4a:33:47:
3e:0d:dd:cb:c2:55:63:59:5d:f1:ec:d7:00:61:aa:
fd:52:c6:7d:ee:dc:d6:d1:df:9f:16:75:31:aa:9d:
84:02:4f:93:72:9f:40:1d:16:b1:3d:7c:7e:86:25:
0b:71:d6:68:c0:8d:d9:1a:68:ec:0c:12:79:fd:80:
b2:a2:58:52:93:64:eb:39:83:2e:87:dd:e7:a5:e4:
1f:d1:1d:ea:31:88:82:72:eb:5b:07:9e:8f:ed:3b:
cb:b4:af:c0:cd:e2:e5:56:cf:38:00:ce:a7:f3:01:
1b:2e:05:7d:3e:f8:1f:9d:1f:60:11:34:e1:b3:c6:
00:8a:fe:7c:93:53:75:2c:c7:8b:7c:61:a7:0d:6d:
79:e4:d1:65:fc:c0:8a:6b:b8:9c:89:a8:5e:2e:61:
d6:0d:7d:8e:26:dd:f1:dd:f5:5c:9f:bc:29:49:02:
da:7a:93:05:a9:00:8e:67:94:6a:29:7e:47:4d:6d:
d3:35:99:04:9a:8c:8f:ee:c8:13:68:6d:e1:c3:d8:
4f:f4:ee:35:d6:0e:88:b9:d3:de:b8:b0:15:af:98:
43:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6C:10:1C:56:1C:EE:44:3F:1B:C3:E3:1A:2D:48:83:08:4A:D2:83
X509v3 Authority Key Identifier:
keyid:9C:DC:E6:F5:1A:E3:7C:55:98:AE:B6:2B:63:F1:59:E8:2F:06:C2:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2DFE/241C3AF85DB411EC8E22A1A45A40D577/nNzm9RrjfFWYrrYrY_FZ6C8GwqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNzm9RrjfFWYrrYrY_FZ6C8GwqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2DFE/241C3AF85DB411EC8E22A1A45A40D577/5C85507C5DB511ECA59354A85A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.66.144.0/21
Signature Algorithm: sha256WithRSAEncryption
48:51:7b:0b:11:26:6a:93:28:5c:74:c0:8e:24:ab:f7:65:c1:
79:c6:6c:8c:62:50:98:ed:fe:fd:b3:11:ae:25:07:ce:c8:ba:
a1:f3:bf:d7:0f:9b:61:06:e0:3c:e1:96:3b:7b:c6:f6:ec:c0:
4d:12:6d:e0:0e:89:ab:f8:cf:c7:ba:0c:08:69:86:f6:2d:ed:
6c:5c:6c:9c:2d:b9:02:4c:4d:45:8c:7d:57:55:2d:5f:da:5d:
16:8b:09:49:fe:97:27:82:75:96:62:7d:12:7a:dc:6b:69:52:
6f:ba:9f:81:e0:54:b3:c6:10:74:01:aa:45:56:81:41:04:a6:
52:c1:11:96:44:04:bf:67:03:29:a0:ec:ff:1b:cc:81:08:df:
c0:f1:d7:a2:91:33:e2:a7:12:60:87:31:99:b0:a0:28:70:be:
5f:1c:7a:64:4a:c8:a9:86:68:e1:42:48:6a:38:f3:de:cd:90:
f3:79:73:e1:ba:d5:8a:5f:bd:fa:c8:4e:52:64:f7:b8:0a:79:
44:eb:60:2f:94:86:3d:e5:ce:b7:8e:35:95:6c:be:b3:f3:a9:
b2:a5:7a:2e:98:73:10:3f:11:c7:94:48:ed:b3:65:e3:5d:28:
75:10:35:0e:3b:6b:99:18:e6:68:d3:f2:c4:42:6f:18:46:af:
1e:26:30:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:12 2025 by rpki-client