Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6EE401C4E2FC11EC8927EA7DF1222468.roa
File: 6EE401C4E2FC11EC8927EA7DF1222468.roa (raw, json)
Hash identifier: df9MEYNRDqC2EvQ1ZA6CMDvvhhKebooHppv8SIkUkTU=
Subject key identifier: D8:F7:E1:84:75:75:8B:F6:ED:C2:72:CF:1B:B8:86:85:92:2A:FB:C3
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 051D
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6EE401C4E2FC11EC8927EA7DF1222468.roa
Signing time: Fri 03 Jun 2022 05:17:16 +0000
ROA not before: Fri 03 Jun 2022 05:17:12 +0000
ROA not after: Sat 03 Jun 2023 05:17:12 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1309 (0x51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Jun 3 05:17:12 2022 GMT
Not After : Jun 3 05:17:12 2023 GMT
Subject: CN=6299995c-04b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:2c:8e:44:73:a2:df:e3:0b:ab:a7:e0:20:
64:3f:99:46:2d:a1:3b:c0:5b:60:5c:62:00:9a:e2:
d0:15:e6:cb:16:87:f6:75:40:30:28:5f:9d:f6:66:
c7:3a:02:63:01:98:50:40:40:ac:4b:05:bd:5e:36:
7b:9b:51:6b:8e:03:fc:2b:0f:31:3e:c3:d4:12:ff:
86:b2:ef:69:8c:af:f6:65:d7:a8:e3:db:6a:d7:42:
95:ab:5a:bf:04:d5:b7:d9:43:3b:5d:56:d4:59:6c:
9b:23:2a:27:5f:3a:1e:8d:ae:9b:00:1b:b5:90:e4:
59:f3:c8:12:8c:e7:05:c4:4a:fd:05:1e:92:20:81:
34:5e:93:16:a1:01:5c:28:76:75:5f:67:bb:bc:e1:
e7:ff:a3:79:31:13:f5:ca:d8:ae:b5:b4:b1:c2:c1:
b4:f7:79:19:a5:1a:5d:d9:63:1d:d1:c3:a2:44:2b:
d0:7a:15:49:b3:37:3b:0f:e4:59:09:d3:6e:ce:6d:
63:0d:2a:24:f3:e3:51:a5:b8:86:ff:69:d9:ff:7f:
a7:03:cb:6e:86:63:5b:c4:c9:c8:de:aa:a9:52:0a:
32:9e:34:e1:76:ba:bb:78:21:03:b3:56:b4:34:49:
35:49:09:fc:af:79:e0:e7:b4:d4:3d:a6:f4:b9:85:
00:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F7:E1:84:75:75:8B:F6:ED:C2:72:CF:1B:B8:86:85:92:2A:FB:C3
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6EE401C4E2FC11EC8927EA7DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ec:7d:82:51:81:1c:8c:39:42:93:cb:91:c5:2d:42:17:92:
d3:15:9b:f6:90:c0:0a:ed:a8:e9:87:eb:84:ad:16:f8:dc:f1:
9d:c6:23:35:9d:37:83:37:c9:d2:ca:9a:e5:08:c4:fc:da:56:
5e:32:b4:1f:62:ef:a5:a0:98:e5:7a:b2:73:52:fb:7c:60:87:
dc:b8:30:d8:63:13:98:7b:73:c6:7d:50:66:bc:b8:50:04:83:
be:a8:0e:17:38:98:2e:d4:ab:b3:08:63:fa:c7:bc:d0:c6:5a:
94:ac:ba:f9:27:38:aa:48:7f:c6:fd:86:2c:c5:28:c2:76:4b:
3a:df:74:a9:d7:ee:20:3a:31:65:ef:2b:ed:2b:bb:da:4c:32:
61:3a:3d:70:c4:c2:82:c8:ff:68:75:b1:95:07:26:71:fc:22:
12:f3:99:c4:63:cf:7e:29:67:b2:44:9b:70:68:68:23:f1:fa:
5c:df:da:a3:79:2e:8f:e7:20:d3:5c:18:05:b6:30:9a:ea:55:
c9:be:af:69:41:fb:76:b6:d3:df:5a:2d:db:3b:bf:43:a1:b8:
12:d6:0a:ec:c2:fc:3e:54:9b:22:7f:56:c6:af:d6:cc:b8:5b:
dd:46:b0:06:36:b9:92:ea:31:c5:36:76:46:9c:50:1d:49:57:
c3:fc:06:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org