Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5DE7101EC75E11EC84BF699EF1222468.roa
File: 5DE7101EC75E11EC84BF699EF1222468.roa (raw, json)
Hash identifier: Rc0K5v/MjZW10vFRwfNhJied25dw6lf6sOVcUXS0+NM=
Subject key identifier: 1A:B7:BB:41:C9:31:3F:27:5F:D6:7F:D5:FF:62:18:8F:C6:72:71:D9
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0430
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5DE7101EC75E11EC84BF699EF1222468.roa
Signing time: Fri 29 Apr 2022 01:47:46 +0000
ROA not before: Fri 29 Apr 2022 01:47:40 +0000
ROA not after: Sat 29 Apr 2023 01:47:40 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1072 (0x430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 29 01:47:40 2022 GMT
Not After : Apr 29 01:47:40 2023 GMT
Subject: CN=626b43c2-f6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:02:f0:12:f5:a1:ab:11:12:25:9b:5d:95:
05:40:e0:74:89:01:fb:8e:04:59:a0:de:47:bc:f0:
98:06:d1:24:b4:1f:0d:ec:34:46:a3:8a:d0:e9:b4:
d6:a7:0d:e7:74:bd:34:34:f7:be:46:f3:a9:1c:4e:
9d:ec:24:3b:c6:a4:93:bf:34:8e:5f:70:e9:26:e0:
6d:e9:6d:71:6d:5a:af:c2:7d:9a:88:c9:a4:82:e1:
88:25:ac:53:fd:c1:b3:b6:c6:22:96:aa:50:77:e7:
14:a1:2d:f6:45:5e:d5:04:d2:40:d1:f6:f2:db:d5:
7f:19:27:d6:45:64:2a:dc:0b:96:da:3b:7c:95:70:
4e:22:ce:1c:b3:ab:b6:c3:1b:7f:b1:b2:83:fd:af:
9e:ec:a1:f0:1b:14:6d:34:27:8d:06:2d:24:bc:f1:
ad:d3:6c:59:c9:1e:3e:3a:f0:60:26:29:b6:bd:8e:
c6:21:93:3c:73:b8:42:c5:e5:d0:c2:1c:2d:54:f2:
5b:71:9b:6e:86:d3:51:80:a1:8e:01:5d:39:cd:73:
09:49:9a:cd:b2:be:a7:a1:cb:05:c7:6f:6a:bc:e8:
ed:2e:ff:67:37:c8:0e:c5:35:07:18:67:f5:13:45:
d5:6f:87:2a:80:b4:57:b3:af:89:73:51:1f:bf:8e:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B7:BB:41:C9:31:3F:27:5F:D6:7F:D5:FF:62:18:8F:C6:72:71:D9
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5DE7101EC75E11EC84BF699EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a7:04:64:9f:97:83:45:d4:08:00:16:83:56:6d:55:f7:dd:
8c:76:3a:06:b8:eb:38:b7:1b:7f:e3:33:b4:cc:83:61:4b:f2:
1b:da:f7:a0:4f:54:be:ce:16:2e:f4:36:1c:7a:c3:d5:ea:43:
0e:ca:fe:df:95:11:64:6e:d8:07:ff:b0:bc:41:ab:c3:dc:78:
dd:17:4a:0c:bb:2a:26:55:4d:dc:99:8d:96:1a:e4:39:de:de:
cc:d1:de:4f:3f:0c:47:16:15:65:61:73:72:64:d1:a7:3b:11:
45:54:86:25:5e:b5:5a:c4:8d:f5:d1:69:c5:ad:61:a5:d9:1c:
bb:93:85:ab:1d:29:fc:fd:c6:18:40:b7:79:83:1a:4e:8b:ff:
e2:46:d9:32:47:c6:b5:e5:e1:a2:69:2a:de:c3:04:6d:d1:c1:
30:56:5f:cb:c6:f8:41:28:50:e5:46:8d:bb:2e:9c:6e:56:11:
f6:97:64:6c:49:b8:73:b7:5a:d2:33:e5:4d:f8:76:cd:a6:1f:
6c:84:a0:4a:24:ed:4f:67:e6:00:71:8e:55:26:a3:a9:23:22:
03:62:2c:d0:b2:2a:d6:9b:3a:6a:69:b9:ff:41:46:93:1c:c6:
c8:5d:fe:6e:80:ac:86:67:f0:cf:99:71:63:af:6e:a9:b5:f3:
2d:f7:8c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org