Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5DBC7B7ED0DC11ECB7C3F5F8F1222468.roa
File: 5DBC7B7ED0DC11ECB7C3F5F8F1222468.roa (raw, json)
Hash identifier: Fc1Hs+c07LIE3kiglrMZJ4KjF/euEXMZNkYv/2KX8ZE=
Subject key identifier: AF:77:91:57:33:2C:DB:00:5C:CC:EF:E9:49:B8:53:34:AC:ED:14:9C
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0483
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5DBC7B7ED0DC11ECB7C3F5F8F1222468.roa
Signing time: Wed 11 May 2022 03:42:23 +0000
ROA not before: Wed 11 May 2022 03:42:17 +0000
ROA not after: Thu 11 May 2023 03:42:17 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1155 (0x483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 11 03:42:17 2022 GMT
Not After : May 11 03:42:17 2023 GMT
Subject: CN=627b309f-a03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:c1:66:d9:73:94:b3:4d:7b:1c:e3:6b:e6:
81:f0:93:fb:4f:29:49:f2:9e:1a:3a:1b:b8:ee:e3:
1c:4a:05:08:eb:14:d1:ea:5c:d8:8d:fd:49:01:cb:
14:b5:ab:9b:2f:88:f5:0c:ed:43:49:7a:b8:2c:68:
1e:2f:73:0a:5f:0b:d5:9f:16:84:56:25:a0:c7:9b:
84:cd:a2:cc:49:c4:8b:31:bc:af:29:80:ed:39:4e:
a3:dc:31:8a:44:52:ad:fc:da:7e:01:ca:3e:fa:e6:
69:93:68:19:0c:71:4f:ac:b5:81:78:f2:b9:bb:16:
1b:c6:3a:30:9f:b1:05:b8:bf:a0:cb:31:a9:e1:b1:
ac:06:59:a6:c8:56:c1:ec:99:e9:0f:a8:08:5b:4d:
bc:ef:4d:52:db:9e:e8:b1:85:03:e7:7e:e2:47:b3:
d3:c8:e4:8c:6d:7a:be:56:2f:2a:28:9a:55:5b:71:
b4:4f:04:b2:37:c8:da:49:eb:15:4f:85:05:83:a0:
29:f0:20:b3:d3:4d:42:99:c5:cc:f8:e9:e0:f8:6e:
99:7e:b3:48:c7:21:e3:b7:d6:85:46:70:3a:a5:1a:
aa:6c:15:95:cd:39:4d:f5:86:be:4c:ba:e4:17:de:
cd:04:f1:66:e7:f0:d3:33:48:60:f5:67:0c:b3:6e:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:77:91:57:33:2C:DB:00:5C:CC:EF:E9:49:B8:53:34:AC:ED:14:9C
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5DBC7B7ED0DC11ECB7C3F5F8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:bd:48:ed:3a:cd:67:33:73:34:eb:c7:b0:41:29:9d:72:6e:
00:f8:14:de:9c:57:bb:71:5c:48:97:8f:92:44:3f:c2:e0:ca:
be:81:7d:6d:f8:cb:69:d8:15:af:1b:63:83:48:d5:ed:35:88:
87:8a:07:d3:63:72:bc:a8:f0:3a:35:2e:d2:20:f9:e3:48:d2:
72:1d:6f:06:97:9a:9b:9b:80:bd:d2:ec:33:22:cd:4b:07:b9:
2a:25:77:7c:e7:14:a2:29:f2:0c:43:72:da:90:c3:d1:68:d0:
7c:c1:3b:e0:52:d0:03:8c:fd:5b:dc:b7:91:3f:9a:3b:c0:6b:
f5:b9:17:83:53:44:95:6d:c1:cb:eb:49:97:eb:9d:72:6a:18:
76:6a:2d:2d:64:8c:f2:d7:61:2b:5f:65:f1:14:a6:cd:f6:a3:
77:15:a8:dc:d0:e3:1b:ac:2f:17:13:9a:b2:0f:df:c6:80:df:
dc:db:a4:72:a5:10:6d:76:25:a8:54:8a:b6:13:27:fe:d5:90:
1b:82:78:02:79:76:54:de:e4:46:81:cc:0c:23:c0:32:81:bd:
10:0f:76:2e:45:04:59:ae:e4:6d:a9:d5:de:36:ab:82:bf:08:
f4:e9:f5:f6:47:02:b7:38:99:d3:67:5e:ed:4a:45:75:01:83:
98:96:7b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org