Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3F1F58ECC5E911EC8143DE89F1222468.roa
File: 3F1F58ECC5E911EC8143DE89F1222468.roa (raw, json)
Hash identifier: LTBveMvlSBY2EHlOYYUkhLl2zg3HTaRqa28dzOf5b9Q=
Subject key identifier: 90:51:30:B4:C3:E0:D0:6F:EB:FB:D5:08:63:26:FE:36:14:F6:16:5D
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0422
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3F1F58ECC5E911EC8143DE89F1222468.roa
Signing time: Wed 27 Apr 2022 05:16:52 +0000
ROA not before: Wed 27 Apr 2022 05:16:48 +0000
ROA not after: Thu 27 Apr 2023 05:16:48 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1058 (0x422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 27 05:16:48 2022 GMT
Not After : Apr 27 05:16:48 2023 GMT
Subject: CN=6268d1c4-2ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:05:94:e6:99:dc:2c:d6:60:52:5a:6a:36:
fa:92:1d:cf:9b:dc:9b:fc:9e:f3:e8:c9:84:f4:12:
d2:86:a4:b4:b8:ab:34:28:fc:76:8b:a7:ac:4c:1a:
5f:be:c3:f2:d8:0d:6b:78:cd:af:18:d0:4e:c5:d5:
f1:80:72:53:a2:a6:b5:31:89:e3:47:f4:7f:7e:c4:
9a:2e:20:47:39:2b:dd:fe:44:58:3b:9f:b8:3e:ca:
57:b4:8d:1c:5b:ac:ef:1c:2f:b2:61:bc:4b:97:b3:
d7:14:a6:2e:98:2d:ac:52:f9:32:07:2b:a2:3e:7e:
37:b9:9a:b6:79:a4:33:20:eb:88:83:f1:d4:d7:5f:
a5:a2:0a:3c:9a:48:77:53:f0:9b:0e:3a:f9:cc:de:
9a:53:8e:70:26:cc:3f:f2:39:c7:95:89:c8:04:66:
bf:37:68:bc:96:81:7b:87:18:c9:e3:6e:df:66:3b:
8b:56:5b:18:17:1b:7c:50:91:d6:67:e8:d0:f3:33:
b9:7d:d4:e9:b2:07:57:11:0b:e5:aa:b2:74:2b:70:
c2:39:f1:81:ad:67:0d:bc:0a:1c:1a:d1:a6:ef:d0:
8e:43:6a:25:6e:55:36:d2:fd:3a:91:a3:0b:53:05:
63:26:ab:34:90:88:98:a4:18:6d:9b:9e:54:5b:e6:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:51:30:B4:C3:E0:D0:6F:EB:FB:D5:08:63:26:FE:36:14:F6:16:5D
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3F1F58ECC5E911EC8143DE89F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
00:37:5f:d2:c1:42:94:7d:fd:48:78:88:21:7b:de:e6:82:fe:
de:d7:30:56:a0:f3:c4:69:14:e1:ff:1a:48:7f:d9:0f:33:73:
30:14:8e:69:ff:35:32:89:25:e3:bb:3b:b3:f0:c1:47:b7:d7:
45:72:c9:8a:81:85:6a:2f:aa:93:d3:73:0a:cb:d0:a9:60:ba:
21:66:cc:8d:07:a9:2a:c9:61:97:6e:bd:8a:b6:35:9c:87:9b:
5d:07:12:b3:ed:8b:bf:33:e5:5d:e9:62:c5:04:c6:dc:c3:81:
61:7e:00:4e:b6:08:96:f3:32:6c:31:4a:79:21:a7:4f:cf:04:
5b:d2:42:17:4a:fd:d9:b0:18:83:4e:b5:17:9d:23:f6:ff:6b:
26:59:c5:40:da:8a:0d:a0:35:af:ec:d1:c7:ec:ae:35:18:4c:
d8:e4:5f:38:77:d9:f5:6e:fb:b9:af:c7:06:1c:cb:c3:63:f4:
ef:e4:1e:59:7d:34:2f:bb:de:f8:7c:c1:69:1c:82:b0:72:30:
f1:52:dd:b3:8b:3f:97:92:91:7b:cc:c8:65:f4:07:c0:f3:0d:
69:f8:93:93:85:01:dd:99:fa:6b:ea:01:2d:e8:bd:dd:69:17:
a8:bd:c6:49:3b:2d:30:c1:51:70:1d:f4:e0:3e:61:eb:49:be:
42:51:81:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org