Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2DFE/3912A1405DB411EC8234EFA45A40D577/603C32625DB511EC97DF61A85A40D577.roa
File: 603C32625DB511EC97DF61A85A40D577.roa (raw, json)
Hash identifier: Ha3FTiHyxxwIKC0kmynVkJPe9+deriOge21xJozPE+I=
Subject key identifier: E3:21:80:28:E5:B8:68:D1:EF:98:70:24:50:90:29:04:8D:DC:A4:0E
Certificate issuer: /CN=F36B2DFEAR/serialNumber=018BC6EB0B22C51D3143CEF08A5F0BAF399AB439
Certificate serial: 04
Authority key identifier: 01:8B:C6:EB:0B:22:C5:1D:31:43:CE:F0:8A:5F:0B:AF:39:9A:B4:39
Authority info access: rsync://rpki.afrinic.net/repository/arin/AYvG6wsixR0xQ87wil8LrzmatDk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B2DFE/3912A1405DB411EC8234EFA45A40D577/603C32625DB511EC97DF61A85A40D577.roa
Signing time: Wed 15 Dec 2021 14:43:33 +0000
ROA not before: Wed 15 Dec 2021 14:43:22 +0000
ROA not after: Mon 15 Dec 2031 14:43:22 +0000
asID: 37658
IP address blocks: 45.221.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B2DFEAR/serialNumber=018BC6EB0B22C51D3143CEF08A5F0BAF399AB439
Validity
Not Before: Dec 15 14:43:22 2021 GMT
Not After : Dec 15 14:43:22 2031 GMT
Subject: CN=61b9ff15-7680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e7:b8:ac:2e:88:80:b7:33:b3:4e:03:99:0c:
ac:53:6e:25:9f:0d:c7:c9:ac:eb:68:b9:a9:4a:dc:
76:77:23:d3:ea:3e:e5:00:0f:b7:8e:05:ad:5d:4e:
87:45:79:3a:35:8e:e6:e4:72:6c:ad:12:f1:26:dc:
01:91:db:79:fc:d1:c2:83:7f:79:b6:39:89:70:e7:
92:97:ac:43:89:72:d4:0c:f3:56:ba:b6:a2:bd:03:
32:27:e9:41:fa:23:2c:71:e1:bd:81:01:13:c0:34:
dd:50:0a:76:97:ae:01:5a:87:e3:af:8b:8a:e0:ea:
bc:c1:5b:b2:98:8b:df:2e:ad:c6:ca:55:d2:32:7a:
21:df:e9:2f:1d:0b:a9:dd:15:4e:6c:45:fe:c7:51:
8b:e6:49:75:25:bf:c0:39:ab:8b:fc:fd:3b:96:9d:
c4:e0:ad:90:42:13:7a:af:33:cd:0a:91:19:73:a9:
5b:10:f0:af:3d:88:5a:8f:da:ef:cf:bc:4d:37:75:
02:72:d7:7c:7d:cd:2b:95:82:8c:b6:04:52:2b:89:
a9:80:29:a5:4b:6c:a5:ed:45:bd:0c:79:5b:21:46:
95:06:a3:50:70:99:10:6d:f8:27:96:81:cc:24:73:
fc:dc:03:f7:5f:d9:eb:e4:ce:38:08:ae:ff:75:2a:
8c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:21:80:28:E5:B8:68:D1:EF:98:70:24:50:90:29:04:8D:DC:A4:0E
X509v3 Authority Key Identifier:
keyid:01:8B:C6:EB:0B:22:C5:1D:31:43:CE:F0:8A:5F:0B:AF:39:9A:B4:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2DFE/3912A1405DB411EC8234EFA45A40D577/AYvG6wsixR0xQ87wil8LrzmatDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/AYvG6wsixR0xQ87wil8LrzmatDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2DFE/3912A1405DB411EC8234EFA45A40D577/603C32625DB511EC97DF61A85A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.200.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:bd:47:7c:c9:c5:64:51:e2:59:40:a7:ca:c6:8e:48:00:25:
37:3b:39:2e:d9:44:a2:10:2a:43:45:98:10:6c:4f:fb:09:df:
94:e1:d8:64:96:fe:f9:a8:c1:f2:23:74:cb:53:96:98:9e:49:
9b:30:ec:68:74:46:b4:5b:24:f0:6d:a7:3a:a7:24:39:7e:a3:
87:e5:4f:1c:47:e5:06:91:91:fc:88:74:5b:e2:e5:e9:01:6b:
b5:be:b4:6c:80:b9:65:f4:e1:66:52:c3:9c:20:92:c5:1d:5a:
20:90:c8:fd:af:d3:9f:12:dc:9a:c1:df:e5:08:0b:af:40:a3:
1c:fe:98:95:28:a6:e0:77:6f:83:0c:cb:78:46:04:0a:84:14:
d4:2f:56:28:b2:0d:2a:62:7d:20:a0:ad:b4:cb:1f:43:64:18:
d9:ec:1f:1c:54:2f:6d:ad:57:00:94:dd:45:89:e2:01:5b:c5:
62:66:87:50:03:7d:f4:4e:4d:37:be:47:cc:a7:c3:ac:33:6d:
8f:eb:55:b9:72:52:29:51:9f:a1:dd:32:35:6d:44:ee:c6:94:
0e:0d:2a:ea:43:0a:84:6c:44:6d:dd:29:3d:88:46:ba:0c:95:
8e:bf:da:84:b0:3e:8b:14:f3:fb:a0:d2:9f:34:46:98:8a:dc:
27:11:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org