Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C87A/4FA315F806D711ED9DE70DDCF1222468/32DFA5880E7C11EDA3A55AAEF1222468.roa
File: 32DFA5880E7C11EDA3A55AAEF1222468.roa (raw, json)
Hash identifier: Mt5tp4ECBx6Rb7zLzKzurVgf0eXSGUNO8D63zv6UBQw=
Subject key identifier: 01:55:21:2B:97:CE:AD:B3:15:35:8D:96:F8:3B:B9:12:F3:A0:04:69
Certificate issuer: /CN=F362C87AAF/serialNumber=7922E5EEFD2B1AE5FED1BEB852C7DD78A0FC05B6
Certificate serial: 0C
Authority key identifier: 79:22:E5:EE:FD:2B:1A:E5:FE:D1:BE:B8:52:C7:DD:78:A0:FC:05:B6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eSLl7v0rGuX-0b64UsfdeKD8BbY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362C87A/4FA315F806D711ED9DE70DDCF1222468/32DFA5880E7C11EDA3A55AAEF1222468.roa
Signing time: Thu 28 Jul 2022 13:50:11 +0000
ROA not before: Thu 28 Jul 2022 13:50:06 +0000
ROA not after: Wed 28 Jul 2032 13:50:06 +0000
asID: 328831
IP address blocks: 102.220.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362C87AAF/serialNumber=7922E5EEFD2B1AE5FED1BEB852C7DD78A0FC05B6
Validity
Not Before: Jul 28 13:50:06 2022 GMT
Not After : Jul 28 13:50:06 2032 GMT
Subject: CN=62e29413-05c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8c:aa:d9:4b:93:20:f8:27:ca:9a:9a:f3:54:
44:a9:a2:2e:8e:73:52:04:3c:c5:b0:9e:1d:0d:11:
66:98:5f:e8:9e:63:b1:7a:3f:5a:53:5e:9b:5f:d9:
58:9c:9b:49:4b:45:12:db:96:75:dd:94:73:1d:1c:
a9:af:8a:0c:69:69:2d:38:b0:7a:2e:64:5c:2e:4b:
d6:19:3b:1a:5f:40:c6:b8:82:17:5f:9f:14:c0:53:
fe:cd:c9:fe:8a:2d:89:d7:1d:d7:81:f2:6b:3b:cf:
ff:61:4f:93:4e:7a:61:a3:25:51:cd:aa:a8:f5:b6:
7a:9f:45:5f:e5:13:62:d0:d9:0e:ee:5c:19:80:a5:
bc:3b:d5:2d:5f:4f:d1:5c:8b:ed:12:7a:96:d1:60:
f2:76:29:11:a2:8b:1e:65:f6:a1:91:39:a4:e9:33:
f5:28:6c:52:b6:23:5a:c6:69:a9:de:da:31:97:fd:
09:de:d8:f9:88:f4:10:59:6c:ae:9a:65:68:9d:60:
29:79:f2:e3:62:73:3b:fc:33:88:87:95:9f:30:53:
d6:3f:7f:24:49:b8:5d:5c:bd:72:44:23:4e:97:91:
02:c1:fa:8b:b7:39:76:ad:ac:e8:91:32:eb:b9:2f:
12:73:8a:b4:e7:25:d0:21:4b:49:06:1b:0c:7b:55:
2c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:55:21:2B:97:CE:AD:B3:15:35:8D:96:F8:3B:B9:12:F3:A0:04:69
X509v3 Authority Key Identifier:
keyid:79:22:E5:EE:FD:2B:1A:E5:FE:D1:BE:B8:52:C7:DD:78:A0:FC:05:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362C87A/4FA315F806D711ED9DE70DDCF1222468/eSLl7v0rGuX-0b64UsfdeKD8BbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eSLl7v0rGuX-0b64UsfdeKD8BbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C87A/4FA315F806D711ED9DE70DDCF1222468/32DFA5880E7C11EDA3A55AAEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.32.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:38:f1:42:33:ae:c4:a3:9e:2a:69:9b:a1:84:7f:12:7d:ea:
1c:fb:2a:df:7d:78:62:d5:1c:6d:fb:66:28:b0:40:1d:c0:7a:
ec:91:ea:eb:cf:2c:31:76:dd:fe:03:7c:aa:6a:84:b9:4f:03:
69:da:b6:96:54:fc:1e:b6:b5:fb:3a:0b:8d:bb:55:35:36:01:
b2:04:74:da:cb:13:87:10:d8:79:56:b0:f7:06:06:a6:b3:8e:
f4:51:8e:80:42:1f:f3:f5:c7:aa:4b:52:cd:fc:8e:ac:0a:dd:
5f:17:b2:ad:7d:35:42:a7:e6:c1:81:81:71:57:8b:6c:55:8f:
ee:6d:45:80:a2:a0:1c:34:07:7b:1e:ad:42:eb:ec:52:6d:40:
e1:b0:f3:9e:6b:f8:5f:b2:b1:46:92:8d:58:a8:00:6d:7b:e5:
99:62:0f:46:69:4a:a0:37:aa:f9:76:eb:34:5e:44:b1:57:fa:
bf:03:f5:98:63:fb:7a:71:d6:aa:b3:22:8a:d9:6c:02:d3:1d:
d5:63:8b:06:ad:cd:70:45:59:9e:c6:b4:f6:b0:c8:c3:b0:a9:
86:5e:05:5e:c9:b0:75:b7:6b:27:74:75:23:31:b7:96:13:a5:
b5:dd:0b:17:f3:aa:26:b3:17:b4:32:35:c7:c7:a4:8d:59:84:
1c:5f:a8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org