Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/68333B86F35211ECA64A1CD6F1222468.roa
File: 68333B86F35211ECA64A1CD6F1222468.roa (raw, json)
Hash identifier: VRe5eGhWK2GfgtfOCpOEexmym9hka6S/4KIcgdFa/7c=
Subject key identifier: 32:04:8F:94:8C:3D:CD:6C:BA:86:94:E7:03:39:28:0B:63:24:FB:B0
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 05AA
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/68333B86F35211ECA64A1CD6F1222468.roa
Signing time: Fri 24 Jun 2022 00:13:00 +0000
ROA not before: Fri 24 Jun 2022 00:00:56 +0000
ROA not after: Sat 24 Jun 2023 00:00:56 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1450 (0x5aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Jun 24 00:00:56 2022 GMT
Not After : Jun 24 00:00:56 2023 GMT
Subject: CN=62b5018c-b88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:6d:3f:28:42:8e:58:d6:97:b1:04:62:1b:
dd:18:1a:75:02:e3:8b:13:22:c3:62:8f:0c:50:05:
a0:71:73:1f:13:25:8f:47:1a:7b:e8:91:41:84:fa:
ba:c8:e2:cf:1a:c2:f0:9f:f2:c7:b3:58:af:b2:4c:
74:6b:d4:6e:8f:23:17:c0:12:2e:24:2f:a1:f4:43:
38:b6:90:a0:c0:ad:f0:40:79:1c:3c:11:1d:dd:11:
80:f3:44:54:f5:7b:9b:98:03:9c:3f:5f:25:90:57:
15:5f:c2:74:b8:ac:a5:82:7d:5d:f2:0e:3f:e7:17:
c7:81:51:e2:38:a7:a1:1f:92:d5:05:1d:5f:ea:18:
49:4c:60:f5:1f:9e:66:a6:91:a3:be:21:a5:b6:ad:
80:39:49:cb:8f:26:aa:88:d7:cc:8c:28:15:30:36:
14:0e:1f:d2:25:01:bf:ca:bf:af:af:19:e3:0e:95:
4f:03:a1:20:01:b9:63:83:79:42:e1:c5:ec:27:c6:
7a:c3:14:22:6a:dd:7a:a6:e2:3e:9b:03:3c:53:2a:
b6:ad:dd:09:87:4a:5a:97:a6:59:d3:10:70:f0:79:
73:ef:b9:72:4c:4d:e8:cc:2a:59:8c:dc:24:95:84:
c9:d0:81:f2:f8:59:f7:35:a0:ad:b4:35:06:ae:59:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:04:8F:94:8C:3D:CD:6C:BA:86:94:E7:03:39:28:0B:63:24:FB:B0
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/68333B86F35211ECA64A1CD6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:14:48:5c:49:8f:d2:37:d6:2c:25:f0:0e:35:d6:84:cd:dd:
57:2e:1b:32:68:5e:9f:6f:53:2e:11:6a:8e:ac:ba:cc:96:8f:
ea:25:50:11:f3:a3:db:c1:dd:1a:83:0d:37:8a:39:6f:d5:c8:
1f:dc:c5:c3:d6:ea:79:e4:56:63:98:51:dc:aa:d9:9e:7f:9b:
3e:76:cb:da:5d:49:7c:24:23:a4:dd:a6:b4:e1:b3:65:52:46:
da:ec:24:99:79:af:cc:9e:54:d1:04:27:83:7d:46:34:ec:a5:
f9:1b:36:95:8e:80:eb:df:83:7b:8e:83:d3:dc:dd:29:ba:6d:
32:48:79:3b:bc:58:64:1b:43:f1:f9:26:68:8b:14:6d:db:1b:
cf:e1:c8:91:9f:fd:89:c3:31:75:7f:04:9c:64:f3:6e:50:8e:
bf:9e:f0:99:38:4a:66:2a:0b:a2:89:16:3f:6e:91:9e:12:92:
02:c7:86:61:d3:96:6c:5e:8b:4e:21:19:ea:d5:5c:a5:2c:c6:
8e:4b:d3:ae:85:e4:cd:45:a9:53:30:96:05:bf:3f:76:93:e5:
f9:3e:c1:8b:79:ef:68:7f:f7:62:d9:d5:cd:99:eb:b9:e7:64:
cc:f3:27:96:10:27:f1:b9:ea:08:a9:5d:94:b4:ca:18:48:3e:
be:50:68:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org