Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/0EB9C658F04911EC8AC15BBCF1222468.roa
File: 0EB9C658F04911EC8AC15BBCF1222468.roa (raw, json)
Hash identifier: JxHMFa7Bj4mz9rx9CGp/uV6b6A0zQPtvIM5VphXSOqU=
Subject key identifier: 08:C8:0F:C9:A1:02:AB:C0:8F:07:2A:D4:B1:1B:02:1E:7D:46:85:1B
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 058F
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/0EB9C658F04911EC8AC15BBCF1222468.roa
Signing time: Mon 20 Jun 2022 03:28:31 +0000
ROA not before: Mon 20 Jun 2022 03:28:26 +0000
ROA not after: Tue 20 Jun 2023 03:28:26 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1423 (0x58f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Jun 20 03:28:26 2022 GMT
Not After : Jun 20 03:28:26 2023 GMT
Subject: CN=62afe95f-924d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:55:27:e5:d7:47:6e:5f:b3:35:6a:55:6f:
f6:07:db:e9:f7:0b:a1:0c:92:cf:2e:61:3c:f9:7c:
c0:92:5d:c2:b3:8a:a9:63:e0:71:15:ec:41:37:20:
6e:31:d3:1f:1d:65:38:fb:7c:af:d8:15:7f:5f:1f:
72:a1:ac:ea:8c:9e:bd:8a:e8:c8:27:0e:07:c4:70:
b7:0b:09:2d:aa:32:0b:2e:31:f0:07:f2:eb:82:e4:
c0:56:b9:92:cc:2e:97:d9:d4:9a:46:e4:a7:90:39:
9a:12:f9:e3:5a:b4:55:e3:63:bb:7c:23:b5:9b:9b:
8c:3b:a4:6c:fd:5b:5e:fb:97:3f:e1:d2:a4:41:b0:
9a:96:7e:9d:07:55:be:11:00:48:f4:7c:43:a8:ff:
6a:07:57:46:6e:ae:d7:f6:f3:e3:57:4e:8d:10:33:
2c:6b:44:4b:d6:9b:50:3b:2d:d5:0c:43:93:9f:b2:
79:eb:0b:29:ad:56:d2:69:b1:42:26:f2:81:13:99:
49:39:35:9b:7a:68:c2:af:46:de:e6:0d:1c:e0:85:
41:c1:83:96:1a:03:c2:2b:df:46:2e:b4:44:8a:aa:
99:1d:79:3c:e3:d2:8b:66:30:10:aa:c1:1d:2c:6b:
1c:2c:c9:a4:92:c9:b3:90:8f:87:c5:40:8d:22:51:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C8:0F:C9:A1:02:AB:C0:8F:07:2A:D4:B1:1B:02:1E:7D:46:85:1B
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/0EB9C658F04911EC8AC15BBCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:ab:fb:f8:59:f0:76:72:9b:c8:d9:dc:08:a4:ab:51:e3:5e:
69:86:5b:a6:51:bf:de:ca:de:8d:60:79:76:41:01:77:2d:59:
c3:a0:6d:06:e4:7b:ec:b2:ac:50:cf:86:36:7d:95:6a:b6:24:
6a:53:2b:53:69:a5:ac:db:a8:ff:e9:10:13:bf:f3:45:c8:0d:
d2:86:3d:ff:66:6d:66:da:9a:d7:8f:24:70:fc:c9:a3:f2:34:
41:13:91:2f:7e:40:dd:db:d6:be:4c:3c:12:5c:72:a9:c3:3b:
65:e4:43:4e:63:93:e8:dd:69:1b:d9:7c:ba:9d:bb:41:04:67:
eb:5c:da:98:49:e8:0b:6d:aa:7c:17:e7:58:be:88:68:27:6e:
98:e0:9b:7f:85:7c:7b:34:24:0a:ee:03:bc:4f:ed:c7:77:cf:
b5:f5:d6:d6:b4:51:09:27:01:24:8a:d7:b7:3c:69:45:51:71:
fd:10:8e:96:7f:16:0e:00:c1:d4:14:85:d8:c1:27:12:b8:ef:
99:6a:74:ea:6b:48:f5:0c:ca:a4:b4:81:34:12:be:95:11:55:
5b:bc:a9:67:7f:79:a1:d8:61:e0:4d:28:64:1c:87:4b:b8:8b:
54:e4:d6:d2:91:fc:e7:dc:5d:0b:78:b6:73:7e:c3:1a:2e:d5:
3a:62:f4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org