Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3BFE6E66A97711EC98D6988C5A40D577.roa
File: 3BFE6E66A97711EC98D6988C5A40D577.roa (raw, json)
Hash identifier: 9nS0uxrnqkzsHQO0mIE2U4NSqvWryVK6G7ibXD0cRDo=
Subject key identifier: A6:4D:20:0C:BC:39:E7:3E:2E:F1:9E:3C:FB:83:64:3F:66:E4:D0:F4
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 032F
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3BFE6E66A97711EC98D6988C5A40D577.roa
Signing time: Tue 22 Mar 2022 00:30:11 +0000
ROA not before: Tue 22 Mar 2022 00:00:07 +0000
ROA not after: Wed 22 Mar 2023 00:00:07 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 815 (0x32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Mar 22 00:00:07 2022 GMT
Not After : Mar 22 00:00:07 2023 GMT
Subject: CN=62391893-08aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:b4:d9:d0:7a:aa:f0:df:46:20:01:a7:38:
0d:87:1a:b9:6b:72:ed:a6:4d:3c:e0:3f:f2:1f:85:
18:ef:6a:f8:2b:f0:0d:0e:76:75:47:46:66:9c:ad:
f1:43:29:1b:2b:cb:97:15:d9:ff:3a:8a:21:7f:b5:
71:c6:a0:3d:72:58:4f:41:dd:37:55:09:b4:20:a0:
17:d0:be:e8:5d:71:29:97:af:27:7e:d6:f4:1d:f9:
b7:6e:8b:86:2a:e3:4b:4f:c3:3d:dc:51:5b:3e:c6:
04:ec:f4:db:b8:51:32:02:96:cb:d5:4a:ad:81:32:
86:7c:45:2b:f1:89:23:fe:03:e5:92:79:bd:a8:a1:
17:21:0b:96:07:07:e6:4c:92:24:03:10:a2:d4:54:
bc:f0:7e:7d:ee:3b:b9:75:70:68:c4:35:bc:13:8c:
23:e4:88:1c:2e:d0:66:64:a5:25:e6:3d:cc:f3:0b:
5b:60:ec:01:43:f5:60:b0:2c:e9:e8:e2:02:aa:df:
c2:6b:9a:64:a3:83:0b:5d:ab:36:1b:98:b2:e1:95:
a2:25:f4:ed:c7:71:30:01:c0:12:1f:bd:64:d3:2f:
e0:07:5f:b2:f4:f9:c0:d4:16:a7:6c:af:bc:54:81:
af:24:4c:dc:d0:77:b5:b1:ab:6c:83:92:c7:81:94:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4D:20:0C:BC:39:E7:3E:2E:F1:9E:3C:FB:83:64:3F:66:E4:D0:F4
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3BFE6E66A97711EC98D6988C5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
48:62:6e:52:6a:0e:e1:69:cb:69:e4:ae:d5:49:0b:c0:e6:19:
92:bc:85:8b:c3:b1:ab:ee:96:59:b0:c4:96:b4:ab:2f:6e:aa:
94:bb:84:84:5d:64:e2:a8:32:0a:55:f9:f8:ac:44:a9:0e:a7:
f5:89:a3:2b:37:ed:b4:54:c6:d8:21:9b:36:8b:6c:0f:7a:46:
cb:d3:92:7e:40:f5:97:e1:45:f4:6e:93:51:43:21:53:a4:30:
30:cd:0c:ca:17:12:af:91:77:af:11:14:d1:e7:cd:b7:94:bc:
db:b7:42:dc:c1:d0:85:70:b8:82:cf:1b:e1:0f:ba:ac:46:1c:
aa:9d:eb:74:eb:20:2c:89:2d:00:ff:87:53:95:2f:0e:fb:45:
e2:a1:99:a5:09:56:23:cb:54:b3:ad:f2:23:00:45:7b:eb:07:
1a:da:af:f2:28:1b:fa:f1:d1:0c:d1:93:fe:d9:13:58:ac:01:
d1:ed:ea:36:46:32:46:70:52:00:6b:4f:a3:cd:f3:93:c7:7c:
e3:10:8f:7f:0a:f1:71:01:f9:be:ff:cc:94:1f:70:57:00:9d:
c8:bc:b0:3f:3e:63:f4:1e:e5:24:70:03:f3:df:6a:2a:a3:c0:
c8:54:20:4d:38:d8:2f:74:33:27:23:57:10:d4:2c:be:40:11:
bb:f7:46:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org