Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/9CEF93C6B96711EC8A2DF7E45A40D577.roa
File: 9CEF93C6B96711EC8A2DF7E45A40D577.roa (raw, json)
Hash identifier: keyrCqpbnFfhSiBuRhCl5ldAFJWHOPmpp21ZPSTWTh4=
Subject key identifier: DE:44:44:03:7E:57:1A:5D:BC:14:C2:A9:17:AC:BD:6A:70:3D:22:13
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 03B6
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/9CEF93C6B96711EC8A2DF7E45A40D577.roa
Signing time: Mon 11 Apr 2022 07:18:41 +0000
ROA not before: Mon 11 Apr 2022 07:18:36 +0000
ROA not after: Tue 11 Apr 2023 07:18:36 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950 (0x3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 11 07:18:36 2022 GMT
Not After : Apr 11 07:18:36 2023 GMT
Subject: CN=6253d651-128f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:c5:2f:be:e1:43:db:16:2e:64:b9:24:c2:
47:fd:23:9c:f6:67:c4:3e:3b:64:27:0a:87:81:f4:
0a:de:d3:52:f7:33:7a:5b:b8:7a:7f:11:ac:f4:17:
5e:20:f9:2d:2e:ab:2b:2a:03:95:79:a5:5c:3c:64:
3d:fa:e1:92:46:84:b6:62:30:5e:19:30:97:5e:9d:
3b:e1:c9:04:f4:08:35:ad:39:ca:f6:6a:ad:78:9e:
10:28:75:42:ee:ae:bc:c4:14:25:2d:89:88:6d:3b:
2b:9b:d4:72:c8:33:1b:f7:12:75:80:9a:3d:59:10:
5c:c7:5b:84:56:46:e3:81:3e:03:e9:c4:71:55:d0:
a1:be:d3:fb:3d:d0:34:63:37:51:c9:14:5b:58:be:
50:d1:75:15:06:aa:c7:a8:6e:62:91:a4:11:b2:4b:
e4:b9:73:ea:60:3d:ee:41:0e:29:37:c9:3c:c4:9b:
15:cd:2c:6c:8e:ca:d2:85:22:33:2e:cf:fd:da:92:
8d:ab:ce:f1:6f:3e:66:a9:ae:72:37:07:dc:ef:dd:
39:d5:3a:e9:f0:ff:dc:f3:9b:64:79:52:6b:0e:89:
f5:10:0f:95:38:f6:6f:be:e2:b7:ec:0d:c5:a0:dd:
bc:b4:72:31:8d:60:27:93:95:09:dc:01:50:04:7c:
ab:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:44:44:03:7E:57:1A:5D:BC:14:C2:A9:17:AC:BD:6A:70:3D:22:13
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/9CEF93C6B96711EC8A2DF7E45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
53:a7:7c:29:d1:40:f7:20:74:59:04:76:c4:9a:d8:a8:d1:e2:
ac:8d:4b:3f:ff:41:24:29:94:99:92:ae:94:2c:e5:8d:24:4a:
76:c7:03:c8:3a:56:82:cc:e2:ee:af:82:a5:11:9a:40:8a:9b:
d8:17:68:00:49:06:0e:33:6e:e5:92:07:66:5e:ec:29:ba:0c:
7e:13:ba:ee:32:91:7a:1f:a1:7e:45:ef:64:dd:28:9d:85:23:
b1:f3:04:3d:51:31:26:ea:b6:df:6f:85:4c:2e:f6:ec:a2:87:
86:67:e9:63:90:ec:6b:1d:a6:ad:94:b9:29:6f:e3:9e:7e:58:
85:6d:e3:97:7c:08:87:6a:51:17:88:24:b7:cf:2b:3e:d4:06:
33:11:8d:0c:30:22:0b:de:8f:56:38:1c:23:ff:fb:06:2c:2d:
9d:15:6b:26:0b:20:af:01:f5:e6:b2:8e:7f:a4:28:ab:d0:1c:
bf:92:2b:88:f1:2b:83:e9:d9:b9:31:d1:61:bf:1f:f8:ec:10:
85:03:d6:f3:9e:d8:51:a5:4b:21:3f:fc:fa:f9:b9:4c:a1:b5:
ca:fa:85:fa:4f:db:5c:59:28:55:c0:0e:b9:9a:95:5c:3c:8f:
0f:11:cf:18:02:2c:d2:5e:97:75:b2:5d:32:8c:85:54:d0:9e:
af:dc:fb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org