Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/87D59AD2DD5A11EC8B326ABFF1222468.roa
File: 87D59AD2DD5A11EC8B326ABFF1222468.roa (raw, json)
Hash identifier: 0hrCkMwrdS0I5WP6lfVqq5kbh+vylhmP+opBbiYtqJ8=
Subject key identifier: 8F:E4:A4:94:87:90:E2:92:61:D3:18:52:3C:4B:42:21:BE:1E:A9:59
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 04E7
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/87D59AD2DD5A11EC8B326ABFF1222468.roa
Signing time: Fri 27 May 2022 01:15:44 +0000
ROA not before: Fri 27 May 2022 01:15:39 +0000
ROA not after: Sat 27 May 2023 01:15:39 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1255 (0x4e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 27 01:15:39 2022 GMT
Not After : May 27 01:15:39 2023 GMT
Subject: CN=62902640-bdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:0a:8b:00:22:70:a2:ba:6e:82:05:6e:e2:
68:17:fc:5f:5a:83:0d:43:96:94:e7:2a:bd:86:d1:
9e:61:44:5d:09:53:24:5b:47:70:a5:e3:c1:7f:e4:
d6:32:8a:6b:e2:44:6e:f4:dd:38:28:80:15:31:61:
ce:9b:01:74:23:fa:82:16:7f:f3:61:dc:32:85:1c:
d2:c9:74:be:35:5c:c5:ae:16:d7:f2:9b:1b:c4:c8:
ae:ff:c2:a3:f7:06:b0:43:48:00:aa:1a:9e:ec:f2:
a6:0c:ec:0a:38:f4:a3:54:95:6c:93:5f:5c:e5:20:
f0:6a:b8:0f:28:11:98:d2:d1:8d:5b:3e:24:79:62:
1a:de:c8:92:06:9e:10:8a:e1:ca:82:40:87:4a:8c:
75:b4:66:65:10:5a:a4:a8:e0:41:59:4c:d0:9a:f8:
0c:e4:ef:71:79:4a:89:fa:0e:b7:ec:92:f7:62:a0:
47:eb:f1:29:ce:3d:ab:f3:e7:b5:59:ae:42:23:b2:
a8:30:6b:4a:bd:d1:ad:cc:36:01:8f:ec:71:fa:78:
eb:3f:e9:94:81:95:21:75:5e:fa:ef:d0:42:c6:38:
13:cc:e5:21:9f:ae:31:18:72:39:55:0c:73:d5:fb:
3f:4a:07:4a:e9:cb:69:e6:3b:48:d8:f2:6e:24:6c:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E4:A4:94:87:90:E2:92:61:D3:18:52:3C:4B:42:21:BE:1E:A9:59
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/87D59AD2DD5A11EC8B326ABFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b6:64:60:bd:85:fe:4c:4a:d3:dd:bf:ad:ef:55:af:a0:2e:
31:f4:26:2d:61:3a:70:ca:00:4c:b1:11:88:43:24:74:c0:a7:
24:9d:00:54:35:2f:95:ca:a9:63:49:82:c2:ac:e7:c9:f9:2e:
07:94:b4:8c:15:9b:f4:05:53:19:c6:ac:c6:36:db:33:9d:fb:
00:d3:51:f3:73:bc:20:aa:4b:f2:bc:a8:dc:c5:a4:98:94:1c:
24:01:d8:b6:e7:6d:b7:c5:0b:dd:01:0f:2a:6f:3a:1a:f6:a5:
9c:3b:32:9f:11:b9:39:8c:5a:02:c6:26:da:f2:ea:6b:e4:7a:
68:ff:77:9f:f1:15:68:30:d8:b3:c9:48:20:03:e0:fe:ea:75:
08:5f:7a:ff:97:38:10:00:9f:98:95:61:eb:26:4f:50:31:05:
cd:a4:7d:dc:6e:91:c4:a5:f1:cf:dc:c5:b8:a8:2c:4f:8d:68:
cb:a2:45:27:cf:03:28:1e:b7:eb:61:df:f2:3d:31:19:34:d1:
2d:5f:d1:db:c1:bc:9e:c6:12:28:4b:72:23:aa:46:92:08:e1:
dd:ef:95:19:d5:b0:7d:d6:a8:14:54:3a:69:32:50:aa:67:59:
44:b3:0c:e6:fc:dc:66:ac:d2:f0:a1:1b:5e:fd:ef:91:75:7c:
8c:6f:3a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org