Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3CC3113CED2C11EC8F763BDAF1222468.roa
File: 3CC3113CED2C11EC8F763BDAF1222468.roa (raw, json)
Hash identifier: q7tE4SNvzGrEWCXnac5iq2zjE1d/UpszXKUhUofRpGI=
Subject key identifier: 08:59:42:7D:5C:95:FC:90:1E:DE:56:49:F7:87:DD:A0:05:77:7C:B0
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0573
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3CC3113CED2C11EC8F763BDAF1222468.roa
Signing time: Thu 16 Jun 2022 04:24:40 +0000
ROA not before: Thu 16 Jun 2022 04:24:36 +0000
ROA not after: Fri 16 Jun 2023 04:24:36 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1395 (0x573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Jun 16 04:24:36 2022 GMT
Not After : Jun 16 04:24:36 2023 GMT
Subject: CN=62aab088-f6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:01:67:96:65:1d:ea:d3:b0:0b:b2:55:55:
b9:2c:6c:a8:a1:0e:9a:89:b9:6c:8b:9b:3b:d1:fb:
c0:0e:d5:57:b1:aa:85:25:0a:bc:61:d9:e5:5e:e1:
32:d0:7c:d6:24:a6:7b:b1:73:ee:36:14:93:7d:01:
a6:f3:ae:f5:80:91:c2:50:ca:28:d5:1e:d1:5a:82:
70:8e:0c:2c:e1:22:b8:21:e7:01:23:a3:da:cc:59:
91:a4:80:36:48:55:1e:30:8a:d6:b2:ee:5b:70:eb:
14:f3:c8:81:87:ef:ba:b5:76:1a:7c:9d:ac:c5:3b:
f7:b8:9d:f0:a7:5d:43:0b:f8:6d:29:f4:a5:dd:72:
bc:e9:d2:36:45:53:14:66:5b:0b:51:e8:3e:2a:e0:
77:8a:bc:74:9c:53:81:1a:de:f6:5f:8b:8d:df:6f:
44:cc:1d:db:65:1a:65:1a:ce:b1:3e:17:6b:cc:6a:
da:21:71:f6:6f:58:92:59:d8:d5:8a:26:eb:83:a9:
27:a0:f2:06:71:38:79:22:20:9b:70:3a:cf:9d:8e:
c5:4d:16:7f:d6:46:b4:95:7f:6f:cb:da:d3:82:ba:
6a:8f:42:5f:d8:72:1f:ae:72:05:c5:1b:14:fe:21:
52:50:d6:f0:a9:ee:46:65:12:82:61:9d:e3:e2:25:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:59:42:7D:5C:95:FC:90:1E:DE:56:49:F7:87:DD:A0:05:77:7C:B0
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3CC3113CED2C11EC8F763BDAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:85:4e:36:6a:5b:db:41:0d:79:4b:93:66:1d:34:4b:72:68:
8c:f8:89:e1:8f:87:22:ed:f0:25:6d:63:42:a9:38:4d:2f:eb:
5f:d9:a6:19:63:c8:35:c4:5e:90:80:0c:10:e0:22:a9:e6:7c:
ea:33:92:a6:79:a0:76:3b:70:a1:b5:08:a2:cd:b9:ce:2a:45:
0c:32:b4:7d:30:24:6a:52:88:ff:02:5d:75:28:d0:62:dc:63:
98:9b:ac:0c:3a:1d:42:a4:e7:06:18:85:3a:f0:b4:d1:b7:83:
53:1b:78:60:ec:fa:35:44:d6:ae:7e:21:cf:83:5a:61:aa:40:
31:17:5f:fa:4c:8a:3e:36:ce:d6:fc:97:d6:27:9e:5b:c5:97:
56:d4:1d:41:6a:f3:6c:4d:01:a1:19:f4:41:5d:83:14:99:60:
e7:67:86:fd:5b:3e:14:4a:4e:a7:89:8f:48:3e:c6:10:34:c9:
58:48:94:67:85:65:e2:d1:5b:bb:ff:b7:af:97:15:84:3d:b7:
ae:50:6b:2b:53:fc:ca:43:5b:58:3a:68:59:c6:ed:5b:bb:90:
8a:40:89:3e:f5:fb:e5:a6:3e:59:db:7c:3b:f7:b7:ae:1a:a0:
7a:6c:8c:2f:50:24:11:06:5c:fc:de:d2:c2:ca:be:fa:13:11:
4e:c9:94:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org