Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/85B9AA4CCF6711EBBF0B3227F8AEA228.roa
File: 85B9AA4CCF6711EBBF0B3227F8AEA228.roa (raw, json)
Hash identifier: vFUZR+6AGd6nb9aRvXvgvKRzXER6+WsJoFigAPy5nCM=
Subject key identifier: 75:B7:C8:59:60:2C:51:9F:CA:C4:1A:F9:E1:20:3A:41:2C:07:D7:DF
Certificate issuer: /CN=F36C65C6AR/serialNumber=1FF33E25A32B4691F723F85010D36C1D19AD2613
Certificate serial: 02
Authority key identifier: 1F:F3:3E:25:A3:2B:46:91:F7:23:F8:50:10:D3:6C:1D:19:AD:26:13
Authority info access: rsync://rpki.afrinic.net/repository/arin/H_M-JaMrRpH3I_hQENNsHRmtJhM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/85B9AA4CCF6711EBBF0B3227F8AEA228.roa
Signing time: Thu 17 Jun 2021 12:28:30 +0000
ROA not before: Thu 17 Jun 2021 12:28:17 +0000
ROA not after: Wed 31 Dec 2031 12:28:17 +0000
asID: 327901
IP address blocks: 45.220.0.0/19 maxlen: 23
169.255.196.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C65C6AR
Validity
Not Before: Jun 17 12:28:17 2021 GMT
Not After : Dec 31 12:28:17 2031 GMT
Subject: CN=60cb3fee-085f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:c2:df:4d:f9:58:a2:f8:18:7a:0e:1b:60:
0e:9e:23:32:c4:c5:19:17:a3:c6:95:d7:70:8b:2c:
4a:b9:89:1b:29:c0:e4:ec:0d:2c:ac:cd:ff:49:44:
cc:62:02:3c:d2:29:d7:62:18:c7:0c:f2:39:a0:82:
e2:0f:53:81:c0:38:84:56:73:87:c1:91:6c:26:79:
ed:04:c1:52:26:63:c5:0a:c3:2d:70:67:35:ac:83:
75:ce:f6:f4:b6:ea:25:66:f1:00:34:36:eb:e5:d6:
5a:fe:cc:65:69:32:dd:8c:90:f3:15:70:d1:94:4f:
0d:d3:92:a3:15:58:51:d6:2a:67:a8:4c:06:f1:58:
69:42:1b:de:06:c8:59:79:ce:fe:7a:44:04:00:8c:
31:78:c9:20:d6:22:54:da:68:21:56:26:d1:7e:82:
90:bd:a3:4a:d1:29:66:82:0d:b5:a0:c2:b8:34:68:
07:ad:ed:12:a2:7f:3f:e1:7e:ac:3e:f4:b4:08:58:
77:9c:25:4f:f6:10:7b:5f:ba:59:9a:3f:83:01:8a:
e5:32:7a:17:40:7d:6f:e2:ce:b6:9c:ab:0b:c6:0d:
08:88:92:b1:a0:d0:80:d6:f1:41:ca:e4:c7:d2:25:
6d:0c:b4:9b:e7:a0:a2:f0:f6:e1:62:2b:54:59:fa:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B7:C8:59:60:2C:51:9F:CA:C4:1A:F9:E1:20:3A:41:2C:07:D7:DF
X509v3 Authority Key Identifier:
keyid:1F:F3:3E:25:A3:2B:46:91:F7:23:F8:50:10:D3:6C:1D:19:AD:26:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/H_M-JaMrRpH3I_hQENNsHRmtJhM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/85B9AA4CCF6711EBBF0B3227F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.220.0.0/19
169.255.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:1f:6c:8c:88:b1:92:15:bd:95:6f:ef:37:53:88:76:2c:b4:
6f:78:3c:a0:c7:12:be:98:9c:9d:82:38:5d:9c:6e:68:f7:fa:
31:a1:4d:61:27:e2:47:b5:9f:c6:d1:01:03:fb:59:fa:31:bb:
64:47:b5:2a:bb:5b:18:70:45:e1:ed:37:08:bf:b0:5a:55:34:
09:a3:85:d1:61:d3:4d:ee:2a:a7:71:3a:30:6c:04:1e:81:db:
33:fa:99:db:68:0e:b4:42:34:6a:aa:d9:68:e6:c1:8c:06:db:
12:c8:c5:94:67:d3:80:29:1d:41:b5:47:bd:85:cb:3f:bc:17:
1f:eb:c8:28:98:be:d0:34:ce:c2:ae:ab:36:72:82:f6:0c:e2:
5e:2b:9f:fb:b7:6e:62:98:fb:6a:47:30:89:a9:42:b0:55:a5:
74:4b:42:25:ea:40:8a:26:3e:69:a7:f8:fa:91:fc:a4:d0:41:
ad:26:9b:c2:5b:16:2e:72:7d:47:d1:6d:82:f2:8f:0d:9e:9f:
9b:c1:69:3b:d4:d6:c3:65:1a:4e:12:6b:83:dc:57:8c:56:0f:
8b:19:f5:f2:d5:01:d5:ef:ba:07:c6:47:45:31:3c:0e:c1:7f:
bb:87:15:79:f8:c8:53:bf:e1:8c:26:ef:b0:f6:88:43:73:e0:
a8:ff:5e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:55 2025 by rpki-client