Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/76B76DDC8AE111ECBE3D3DBE5A40D577.roa
File: 76B76DDC8AE111ECBE3D3DBE5A40D577.roa (raw, json)
Hash identifier: 1i+8nRtdu21h0Pvir/+lP1hWq6/5wqTtr3M5EQLtCcM=
Subject key identifier: 35:C7:1A:36:5D:7B:13:AC:AE:9F:99:5D:C8:35:F2:AF:AB:51:99:62
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0275
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/76B76DDC8AE111ECBE3D3DBE5A40D577.roa
Signing time: Fri 11 Feb 2022 02:22:31 +0000
ROA not before: Fri 11 Feb 2022 02:22:24 +0000
ROA not after: Sat 11 Feb 2023 02:22:24 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Feb 11 02:22:24 2022 GMT
Not After : Feb 11 02:22:24 2023 GMT
Subject: CN=6205c866-e75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:11:f5:87:77:6c:0a:80:91:5b:27:82:5d:e1:
bc:39:5a:5f:c6:55:ad:90:bd:91:fd:26:eb:95:46:
62:33:24:df:88:d7:bf:94:87:ec:7c:e6:24:68:ff:
38:1e:0e:db:db:3f:06:e8:8e:30:dd:8a:3b:98:23:
cf:8c:f2:ca:e4:1a:aa:d8:55:41:73:a6:6c:d3:d6:
6d:07:a2:b4:2e:fe:16:d0:56:39:3a:08:7f:f3:56:
22:df:35:40:e0:e5:ed:2a:b8:5c:bc:7e:25:9b:7c:
d7:2d:c4:38:22:aa:ce:ee:16:f2:f6:7f:0b:14:2b:
0c:5c:e6:92:a3:2a:a1:ca:5f:70:a6:f0:84:c5:11:
db:99:c0:fd:e1:68:26:22:2b:34:c5:9a:fc:a6:99:
fa:8d:8b:30:8c:5a:59:0a:a6:07:a4:9b:f5:8e:c6:
fd:75:20:fa:7f:18:d7:c9:71:77:10:ea:0b:bd:9f:
c2:3e:f2:f4:1b:d4:b9:b9:29:a9:46:40:1c:06:fd:
4c:02:d4:8c:be:2f:ec:20:52:77:ba:f1:ea:47:b9:
e0:25:b4:90:55:cb:bf:63:3f:8c:19:61:91:5f:24:
c8:86:1d:ba:6f:12:89:7b:42:3d:64:10:e0:47:cc:
3a:6d:6e:0c:f1:e8:7e:50:4b:0e:07:9e:df:22:c8:
fe:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C7:1A:36:5D:7B:13:AC:AE:9F:99:5D:C8:35:F2:AF:AB:51:99:62
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/76B76DDC8AE111ECBE3D3DBE5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
af:42:91:d2:04:c5:29:50:f3:3e:f3:fd:7e:40:53:b6:df:39:
0a:8a:5d:47:20:db:33:37:a0:2e:ce:a1:ec:d3:9a:3f:f9:2f:
52:d0:ee:5a:6c:34:6b:06:80:f3:2b:b6:a4:24:4e:80:44:1c:
be:c7:33:30:ea:60:fe:5d:98:94:bd:c7:4d:dd:b6:e7:ff:fd:
78:77:87:f7:6d:c4:13:62:e3:db:de:f4:37:6b:d1:e5:da:23:
66:a3:05:95:f6:75:f7:e0:f9:51:4b:59:b8:d5:52:25:28:8c:
ef:0f:e3:1a:d7:26:c2:11:ac:6e:51:89:69:a9:f5:28:32:0a:
c8:0f:09:15:79:c5:7d:3e:a4:65:2d:d4:6c:43:72:32:30:d6:
c3:23:4b:07:68:c9:2a:43:60:df:e1:20:51:52:36:5c:01:28:
2e:dc:6d:a0:21:00:9f:83:43:68:a7:e5:4b:f6:ce:43:44:7b:
ce:a8:7d:5b:0e:6b:6d:8e:fe:a8:49:bc:87:4e:95:0e:67:fe:
b7:c1:d4:f6:74:f6:b2:b9:61:cb:8d:f3:6f:9f:71:7e:4d:92:
bc:18:b8:dc:da:99:30:c7:a5:0c:d1:ee:e7:1d:79:7d:87:99:
cd:57:08:9b:7b:44:58:ad:1f:1f:b7:fd:bc:ad:4b:0a:dd:b4:
16:42:b6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org