Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/517A21888B9D11EC8023D1DE5A40D577.roa
File: 517A21888B9D11EC8023D1DE5A40D577.roa (raw, json)
Hash identifier: A/gQSpe3RURxEuQ5FDqc+24VyuyHMK0zWRQr8g4p+y0=
Subject key identifier: 9E:79:B8:9A:70:4A:AD:7C:AA:E1:32:5E:79:07:C9:A6:40:F5:58:F0
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0279
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/517A21888B9D11EC8023D1DE5A40D577.roa
Signing time: Sat 12 Feb 2022 00:47:13 +0000
ROA not before: Sat 12 Feb 2022 00:00:09 +0000
ROA not after: Sun 12 Feb 2023 00:00:09 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Feb 12 00:00:09 2022 GMT
Not After : Feb 12 00:00:09 2023 GMT
Subject: CN=62070391-3f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:f0:60:d0:51:97:3b:dd:ee:ed:76:73:13:
0e:ba:3a:15:ab:25:86:88:0d:a6:5f:66:a6:90:b3:
ca:a5:ba:d4:cb:d9:91:b9:79:38:5e:a6:6e:d6:9d:
43:2a:b3:5a:66:07:d6:1a:aa:9b:e1:74:cc:58:06:
11:e7:fb:f5:1c:6e:39:d2:4a:23:3a:bd:5c:20:bc:
4f:c3:39:76:6b:07:93:6e:9e:e1:57:76:eb:55:f7:
bb:b5:4a:a7:5c:97:af:95:0a:c5:37:c6:15:24:ec:
95:2a:d2:91:18:fc:11:3d:fd:70:16:f4:49:6b:7f:
cd:17:f5:6b:2f:fb:8e:0e:61:88:f1:38:cc:a8:90:
47:e3:37:94:d8:68:18:71:2a:a3:bc:52:2d:09:83:
f8:8c:e4:2d:22:19:a2:47:c3:07:02:83:29:a8:bb:
1f:6f:61:4f:89:fd:f8:7f:77:0c:cf:e2:11:fd:48:
fe:4f:9a:fc:9f:1c:04:47:60:8e:b6:77:11:51:d6:
5b:4c:09:ca:8a:f0:7b:1b:c9:cf:dc:7b:8d:fa:f1:
da:9f:8f:b0:46:dc:11:1c:a9:da:fd:ff:40:9d:90:
50:73:26:ff:83:94:71:1b:84:d3:8f:f2:b6:75:64:
ac:3e:e0:3c:fd:4a:29:4f:4e:56:48:f1:c3:24:43:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:79:B8:9A:70:4A:AD:7C:AA:E1:32:5E:79:07:C9:A6:40:F5:58:F0
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/517A21888B9D11EC8023D1DE5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:d9:50:6b:b6:fa:95:fd:b4:92:04:ff:89:ec:f1:b4:86:a9:
5f:3d:cf:ef:c0:0d:db:f2:17:da:47:63:b5:f6:76:38:26:56:
b2:82:09:91:18:80:7b:6d:e4:fc:d7:06:e1:1c:ca:ea:95:fb:
17:e9:82:9b:6a:2b:01:87:5d:8b:48:ee:3e:e7:af:10:6d:ae:
7f:4a:29:14:0b:26:2c:65:2f:23:07:97:50:ba:74:59:ee:a0:
79:10:3d:c2:6c:e3:f2:f5:08:1f:b6:7b:34:bc:2b:35:2d:37:
27:3c:63:60:d6:22:f4:db:f0:ba:e7:0a:5c:fb:11:1c:a6:69:
47:af:ac:46:57:52:f8:c4:98:93:ba:56:d8:5e:db:be:05:91:
36:78:af:cb:96:0e:68:d5:53:54:58:40:a5:df:d1:7c:a0:aa:
05:f5:5d:0f:0d:8f:b4:53:02:51:47:d9:73:65:5e:4c:34:40:
4d:c1:d1:09:e6:32:c1:9a:a9:95:9c:ce:20:d3:70:43:0f:bf:
5e:ef:5e:ef:65:95:1a:3b:ba:4c:5b:04:d4:ac:89:2a:43:94:
57:19:d2:55:87:3e:10:71:ce:d5:8b:95:46:41:07:68:b4:44:
fb:0b:3f:81:63:53:fa:7c:46:2c:80:c9:0c:f5:71:45:68:08:
cb:6e:45:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org