Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3D932ABC3AEC11ED97C74DCCF1222468.roa
File: 3D932ABC3AEC11ED97C74DCCF1222468.roa (raw, json)
Hash identifier: P5JWJCpYBHWYvU6DGoX+KDrVMBGqmQicJtSSFmDDcKY=
Subject key identifier: 4B:9B:F8:B4:BE:0D:EC:40:9F:15:35:AF:59:5E:FD:33:4F:85:CF:DC
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 071E
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3D932ABC3AEC11ED97C74DCCF1222468.roa
Signing time: Fri 23 Sep 2022 03:03:04 +0000
ROA not before: Fri 23 Sep 2022 03:03:00 +0000
ROA not after: Sat 23 Sep 2023 03:03:00 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1822 (0x71e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Sep 23 03:03:00 2022 GMT
Not After : Sep 23 03:03:00 2023 GMT
Subject: CN=632d21e8-222a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c4:a5:68:b3:c1:46:ec:0d:8e:f5:4c:e4:45:
2f:87:db:f0:69:6a:83:67:f0:3a:8e:cf:e3:51:01:
d6:f5:9e:14:fe:76:0d:05:80:72:5a:c6:6a:2c:96:
ee:35:72:da:47:4f:c4:3f:6b:7e:18:d1:0c:9c:94:
d2:b5:1c:f7:f3:5e:70:8b:99:58:08:8f:eb:07:c9:
af:f2:64:37:02:bb:c3:48:63:6e:eb:c2:06:be:29:
36:c6:03:fa:6f:17:3a:f6:aa:0b:aa:a3:eb:2a:17:
0d:a3:b6:cb:8b:86:56:ac:b0:e8:b9:4d:21:b2:1d:
ce:a4:d5:39:f2:b2:aa:7e:78:9c:08:be:10:07:a8:
68:a5:51:f8:bc:f3:45:19:3a:2b:d1:fb:d3:47:9a:
31:41:5d:85:ab:76:49:94:48:a3:84:3c:76:04:25:
d2:a5:fb:b3:8a:84:22:37:93:c6:cf:eb:67:36:be:
9c:85:8f:18:53:cf:25:8e:ad:b3:90:f7:6e:d7:45:
e6:9b:c9:ff:e8:42:2c:bb:69:86:69:69:63:57:78:
73:26:02:f5:e7:e5:6a:4e:26:82:0a:f3:1e:80:2a:
80:f3:5c:b3:06:11:7a:b5:89:49:f3:1d:08:50:7f:
6f:8e:e9:42:63:1a:3b:04:52:75:83:e1:92:bc:33:
f2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9B:F8:B4:BE:0D:EC:40:9F:15:35:AF:59:5E:FD:33:4F:85:CF:DC
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3D932ABC3AEC11ED97C74DCCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:05:4a:f2:8c:7d:7f:ad:30:95:77:18:17:a4:d6:b3:52:2b:
28:50:ca:b2:69:3f:d0:76:49:4e:ff:8d:a2:d1:75:fd:09:b5:
69:1d:0c:93:23:b5:68:7d:8f:d3:63:5d:10:68:af:35:b4:6f:
63:40:4e:b8:27:5b:ae:3e:a0:18:e1:fe:f7:4b:98:31:8b:0d:
40:3f:9c:d7:d7:ae:7a:72:cd:fa:51:e1:c9:52:57:bd:73:04:
4a:b3:93:f7:ef:6e:77:15:c8:39:56:d2:e5:3f:6d:ab:d8:09:
48:30:9c:a6:22:3a:1e:1b:a3:98:8e:68:ae:41:06:fd:bf:12:
89:5c:51:04:2a:11:56:6e:66:4a:c1:6b:6b:e7:8b:5a:bf:c0:
10:19:30:d7:6c:c5:d7:70:17:e3:ff:85:5a:1d:95:cf:dc:fd:
95:ad:4d:36:b8:1e:dc:7b:8f:a1:f3:1a:46:01:bb:98:6b:a4:
a7:ae:24:be:40:b5:d1:87:6d:70:a7:7a:5d:1a:96:2d:26:ae:
49:76:ae:f9:e7:d9:a5:3e:3f:a9:16:42:25:38:ba:b9:e1:56:
98:a5:4a:1d:eb:ff:c4:7c:82:fe:df:03:b2:bf:f3:3d:09:2c:
6a:53:7f:ec:b6:71:f3:bb:72:35:b6:ca:f4:56:fa:da:93:ec:
75:13:81:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org