Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3FC3CE74FA7B11EC81A452A3F1222468.roa
File: 3FC3CE74FA7B11EC81A452A3F1222468.roa (raw, json)
Hash identifier: pp4OFHm1oNxgCjhYpKazgcs6VPIE1kjUxpDRrED12NA=
Subject key identifier: 7A:8B:2F:DC:C5:A1:37:EB:40:90:6B:E3:8E:28:8E:86:2B:D2:7A:1B
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 05E7
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3FC3CE74FA7B11EC81A452A3F1222468.roa
Signing time: Sun 03 Jul 2022 02:53:00 +0000
ROA not before: Sun 03 Jul 2022 02:52:53 +0000
ROA not after: Mon 03 Jul 2023 02:52:53 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1511 (0x5e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Jul 3 02:52:53 2022 GMT
Not After : Jul 3 02:52:53 2023 GMT
Subject: CN=62c1048c-49d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:bd:d7:02:34:27:9c:90:0a:77:88:94:1f:
10:5a:6e:b9:ce:85:76:ea:cc:9b:51:eb:5e:33:49:
05:f7:d8:f6:b7:77:05:ae:be:04:f2:bb:46:15:09:
60:33:41:cb:dd:fe:5e:ee:f4:79:8c:9c:aa:75:45:
31:5d:86:1d:2a:8f:f8:92:29:85:f1:b4:82:41:8c:
c2:7d:a1:93:0d:ad:6d:32:1c:43:6e:23:71:a7:1f:
e7:4f:f0:d6:b7:91:d3:07:59:a1:8e:5d:9b:44:39:
48:08:c4:ed:c1:dc:b3:f5:b4:81:29:c5:09:c4:fe:
99:43:61:a0:db:6e:23:ba:ee:c2:94:e7:58:66:ce:
b0:4b:3f:6c:e7:6d:70:8b:b3:b6:4a:cf:0f:3e:a6:
b3:06:d1:ec:74:f4:c6:20:cb:11:f4:1f:98:6c:60:
e6:6d:98:8d:4f:2c:51:4d:d7:81:6e:80:45:e8:cb:
bd:c6:00:b5:57:af:dd:41:3e:ff:17:d0:49:26:b6:
91:eb:aa:d9:4e:95:20:dd:8d:23:73:28:ca:02:e0:
15:de:32:d0:70:61:53:80:d3:b9:a9:fa:39:ed:25:
b5:3f:ac:fb:28:82:d9:ff:7c:d9:bc:c9:92:48:98:
75:4c:d0:49:1b:b5:ef:6c:d7:fb:92:e0:05:92:69:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8B:2F:DC:C5:A1:37:EB:40:90:6B:E3:8E:28:8E:86:2B:D2:7A:1B
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3FC3CE74FA7B11EC81A452A3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
91:0c:e2:89:e2:b7:4c:53:8a:c1:a5:08:7a:8e:80:c4:9c:81:
b0:5c:be:cf:dc:a2:96:ae:c7:52:c9:36:b4:a9:b2:90:9b:68:
93:71:f4:7e:42:bc:30:ac:37:8d:89:13:5a:43:79:c2:e4:c9:
ea:da:b9:9b:dd:df:f6:b7:e7:32:83:4b:71:2f:88:61:dc:8d:
b5:9b:98:e1:a4:27:f4:f2:90:41:2c:8d:87:69:82:27:83:8a:
19:69:f8:ea:68:d0:59:c3:90:62:e3:f5:47:4a:d3:2f:e2:9c:
ac:09:63:ca:7c:c3:ae:6b:cc:0a:29:f7:2f:9e:51:94:0b:1e:
c9:b0:37:fd:91:70:9d:7f:47:0d:5d:56:59:60:3e:36:0f:12:
51:15:b6:0d:37:84:7a:97:57:56:19:8c:a7:a8:0f:fc:d1:17:
de:3f:49:d2:d8:2c:45:2c:66:b4:4f:a4:ca:87:cc:67:85:3d:
8a:16:4c:39:35:7e:8a:d0:aa:8c:bd:e0:85:02:92:65:6a:4d:
ce:54:16:07:ce:8f:19:76:32:da:e3:54:77:a4:00:b4:8b:6b:
5f:ec:38:16:34:25:65:78:f9:30:26:af:4d:cc:65:4a:b3:95:
9f:97:df:75:a4:65:b7:0c:9b:39:c4:fe:0c:ab:72:fc:57:17:
02:c0:40:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org