Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5EDB9BD0DCB611EC9A0148BFF1222468.roa
File: 5EDB9BD0DCB611EC9A0148BFF1222468.roa (raw, json)
Hash identifier: aMK+6PLThUOyRseREikXR/8MsT7W6z/6Xwgz5XOk03c=
Subject key identifier: 6F:88:61:A7:C9:6C:96:5D:81:C9:F6:91:BB:90:CD:C1:81:45:4B:09
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 04E3
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5EDB9BD0DCB611EC9A0148BFF1222468.roa
Signing time: Thu 26 May 2022 05:40:37 +0000
ROA not before: Thu 26 May 2022 05:40:32 +0000
ROA not after: Fri 26 May 2023 05:40:32 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 26 05:40:32 2022 GMT
Not After : May 26 05:40:32 2023 GMT
Subject: CN=628f12d5-2e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c8:34:af:dd:1f:66:f6:4c:f2:b9:9f:ab:2d:
da:3e:24:a6:c6:bc:e2:89:21:ad:2a:09:be:f5:7f:
d1:aa:78:ad:94:53:46:75:a1:03:43:d5:79:70:32:
94:0d:fb:d4:86:28:07:83:46:0e:ab:7d:06:30:c8:
4b:e5:b4:4a:99:7c:50:34:79:6f:70:6b:7e:ca:c8:
76:85:65:7f:0f:ca:2c:97:24:bb:ff:a4:cc:e6:bb:
9f:8e:f0:04:f1:2b:f0:aa:1c:fe:f6:f4:66:db:8e:
fb:58:6d:4c:b1:78:65:e1:b4:60:65:10:fa:08:83:
ce:64:4f:65:54:75:56:5e:6c:a3:c9:43:ca:69:36:
ee:90:2e:96:3e:f1:3f:1a:da:29:1b:30:f8:c4:a1:
d5:b7:52:06:1b:98:5b:96:30:4f:23:04:27:2a:26:
12:88:80:03:39:78:9a:3a:a9:73:d9:11:0b:65:27:
ff:76:9a:24:c9:75:5b:34:af:31:5d:42:f6:76:53:
ab:e5:2c:5b:0f:cf:b4:1d:bd:f7:9b:3b:fb:42:f8:
de:d9:45:b5:40:29:02:5a:1e:96:fd:62:32:83:9b:
97:8a:e7:be:af:31:de:f0:3c:a7:ca:18:30:ed:9d:
65:71:f4:75:81:d2:68:d8:07:03:cc:0f:0e:6f:c0:
b5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:88:61:A7:C9:6C:96:5D:81:C9:F6:91:BB:90:CD:C1:81:45:4B:09
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5EDB9BD0DCB611EC9A0148BFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:82:bb:72:f0:c3:9b:8b:40:c4:cf:75:30:02:c7:eb:36:64:
8a:01:4c:b2:6e:02:0a:1f:b8:77:51:14:96:3b:a8:ae:57:02:
17:81:bd:27:8c:13:1a:a3:7c:89:bf:18:5f:64:55:ed:58:ad:
8c:1b:31:cb:c2:95:6c:32:1e:3e:d2:43:34:2d:da:81:91:8f:
72:1a:85:4c:56:b9:79:15:6f:52:8e:86:3d:5e:2e:9c:18:75:
5a:6c:70:8d:c5:92:c5:68:33:59:12:ea:b7:e5:68:92:0e:e3:
10:46:c9:26:7d:80:bd:a6:92:ea:e4:0e:c0:f8:23:40:72:37:
13:53:4c:14:f5:4a:ce:7d:31:f9:db:02:65:12:52:e0:c2:c2:
62:fc:22:99:b4:6a:5b:16:54:6e:d0:72:9d:05:37:d1:f1:44:
b8:72:a9:ca:98:7a:9f:54:d2:4d:cd:1e:36:b7:8d:49:3e:18:
ed:5c:a8:51:9c:55:d9:0a:10:6a:b4:79:be:31:77:fd:f6:fd:
b8:d8:7e:91:af:c0:e7:72:11:7d:d1:62:4a:fa:53:ef:41:f7:
80:b4:90:19:f0:f1:6f:32:a3:36:d6:63:13:18:76:fe:cd:aa:
50:4e:58:93:52:34:1f:1c:c5:af:29:9e:35:90:98:3c:7b:5e:
a9:d1:3b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org