Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3935154EAF2211ECBFF8E4BD5A40D577.roa
File: 3935154EAF2211ECBFF8E4BD5A40D577.roa (raw, json)
Hash identifier: pt+Me6QZRlbak9/RnUk96Hp192S/336qZtWbpD2W3ko=
Subject key identifier: EF:5A:A1:AE:77:F8:5D:A6:36:F8:2C:AA:AF:4F:F0:21:CC:87:F8:D7
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0366
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3935154EAF2211ECBFF8E4BD5A40D577.roa
Signing time: Tue 29 Mar 2022 05:36:47 +0000
ROA not before: Tue 29 Mar 2022 05:36:42 +0000
ROA not after: Wed 29 Mar 2023 05:36:42 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870 (0x366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Mar 29 05:36:42 2022 GMT
Not After : Mar 29 05:36:42 2023 GMT
Subject: CN=62429aee-7670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:45:47:b2:f7:be:9b:80:f0:b5:af:00:fc:
7b:e4:55:2d:da:3a:35:87:08:9f:55:c9:d7:ff:16:
18:4e:05:2d:71:27:00:5d:c3:d8:06:bf:55:a5:9f:
b6:83:87:7a:6a:fa:d4:af:58:15:c6:0d:6b:db:63:
f3:6e:05:2a:8e:92:36:9b:57:2b:15:6d:b1:f3:82:
f9:a3:ea:f2:76:6c:9a:dd:4d:2c:07:fe:e0:25:e3:
ee:b5:85:62:2b:e9:bb:cd:cb:76:04:f7:86:f5:aa:
01:11:9d:b1:d5:2c:fb:da:a0:92:13:c7:4d:99:fa:
31:bb:cd:2f:c8:3d:bf:ad:25:a8:dc:02:2b:9b:2c:
1d:b8:bd:f3:54:31:8f:20:49:5b:fd:ea:89:ff:c0:
55:8b:06:83:56:92:87:f5:5e:db:5d:52:18:39:4b:
b1:8a:13:02:2a:f5:4f:66:5a:9e:06:ea:8c:2f:aa:
6f:fb:d3:08:ba:3c:2e:3d:6b:63:f4:b8:ad:2e:ef:
2a:af:91:48:ae:3a:47:29:e9:cd:4f:d3:3c:9d:e4:
f9:4a:b0:c1:f9:92:b2:d2:0a:d6:21:b5:eb:9e:79:
13:6a:34:e9:02:37:92:a3:5e:60:e8:02:ff:b5:17:
e6:f4:17:ee:a1:f2:c9:49:19:3d:d8:ac:6a:27:68:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5A:A1:AE:77:F8:5D:A6:36:F8:2C:AA:AF:4F:F0:21:CC:87:F8:D7
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3935154EAF2211ECBFF8E4BD5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:17:b3:1b:44:8b:50:04:b4:25:a1:7d:cf:d4:0d:c3:7a:1d:
d8:8f:c0:8c:a2:62:33:57:90:ab:23:06:8e:97:dd:59:62:6b:
d1:e9:bd:91:6f:23:cb:a6:41:d7:c5:d0:6d:03:62:f9:62:a7:
4d:6d:ea:7c:a1:79:bc:6d:d4:b8:08:b5:0b:dd:d5:7b:a2:b1:
3e:be:9c:d0:45:25:88:41:e8:70:43:51:8b:5e:7a:54:4c:51:
a3:58:ce:68:bc:8f:26:21:d7:13:5c:26:16:12:15:9d:8e:c3:
14:10:68:5e:3c:20:33:57:d5:04:ae:9c:ab:b5:94:6e:c2:b6:
48:72:6e:84:cf:f7:d6:18:fd:40:1c:d7:9d:6b:7b:8a:27:10:
a4:da:0c:a9:c5:93:da:24:07:1f:e8:47:32:29:5d:c5:2c:a6:
b7:e8:fe:fc:60:c0:f0:38:1b:03:63:39:80:99:95:18:1e:4b:
e8:37:bb:a0:d7:cc:f8:56:70:19:23:be:4c:1d:6e:fd:14:eb:
d8:f6:5f:ae:54:87:b3:d7:54:87:09:2a:58:a1:5e:46:1b:57:
a2:0f:88:6b:50:b5:d0:9a:eb:2a:78:ed:7b:4a:cd:e2:ee:73:
ce:57:2e:3d:6d:46:99:6f:fb:c3:ee:d4:18:26:fd:79:f9:3a:
27:c7:7b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org