Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/9D2CE6C6C07F11ECA1ADF16A5A40D577.roa
File: 9D2CE6C6C07F11ECA1ADF16A5A40D577.roa (raw, json)
Hash identifier: AxKcrlB6lAkuCmlTikF3aFzbxZnNZJGUSaZNN6Onaic=
Subject key identifier: 48:D2:96:84:14:51:D7:D3:6F:A9:35:B0:95:2C:D2:57:82:DE:17:D7
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 03F1
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/9D2CE6C6C07F11ECA1ADF16A5A40D577.roa
Signing time: Wed 20 Apr 2022 07:58:07 +0000
ROA not before: Wed 20 Apr 2022 07:58:03 +0000
ROA not after: Thu 20 Apr 2023 07:58:03 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1009 (0x3f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 20 07:58:03 2022 GMT
Not After : Apr 20 07:58:03 2023 GMT
Subject: CN=625fbd0f-147f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:3a:b9:32:20:12:91:ba:6b:b8:b4:06:38:
90:8c:6a:bb:0b:73:87:46:03:ab:b7:68:00:77:fb:
90:46:6a:52:76:83:e1:e7:61:e3:e1:23:5b:af:48:
bf:7e:0d:17:7e:8b:ab:49:7a:2e:3e:5d:b6:9f:16:
b1:34:cd:63:72:59:91:3c:1a:25:b4:04:82:4b:60:
8c:c0:5f:88:5b:e0:85:13:a6:5c:ea:64:cd:a8:46:
dd:b5:9d:c8:74:bc:90:78:58:c7:7b:59:de:35:14:
fe:1e:3f:95:3d:d5:47:d1:f1:4d:67:8d:98:9f:b5:
4b:71:bb:8c:7a:0c:be:16:97:f3:7c:32:7b:bf:62:
fb:14:ee:5a:4b:44:75:5f:d8:30:17:17:24:6e:5f:
29:fe:13:d9:4b:6f:95:ea:dc:28:e5:27:5f:db:ff:
3d:cf:56:1f:62:06:e6:5c:19:34:fe:8a:a3:96:96:
bd:88:d8:c2:b5:2c:c9:ec:38:fc:be:4f:bb:6a:bf:
9b:81:a0:ad:7b:bd:00:89:f4:3d:1e:51:31:fb:87:
f3:44:56:15:c4:e6:7d:e5:01:ad:d2:14:d2:9f:83:
e8:12:0c:e1:fd:e6:3e:a0:86:34:84:26:c5:94:33:
30:80:fe:49:9c:4f:85:e1:79:f4:d6:10:e7:08:cc:
4d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D2:96:84:14:51:D7:D3:6F:A9:35:B0:95:2C:D2:57:82:DE:17:D7
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/9D2CE6C6C07F11ECA1ADF16A5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
68:47:41:c7:7a:71:ec:45:dc:9e:8f:ab:3d:57:b6:80:80:1b:
7d:28:e9:13:09:72:79:eb:70:d2:ce:5d:6a:45:ee:dc:d1:0e:
53:fd:0e:2c:46:0c:66:4b:5a:69:c3:c6:ed:17:38:7a:56:0f:
8e:5b:3f:3e:ba:55:76:67:46:16:c6:cf:99:44:d9:e6:5b:53:
f3:51:cf:19:eb:99:1c:b8:c9:c0:6a:37:00:20:2b:40:f2:f7:
3c:4b:67:a1:be:41:66:a3:03:fc:59:a3:85:90:5d:5b:54:27:
6e:e5:d2:76:37:7e:f0:39:6a:36:41:a2:14:d7:05:5a:a2:fc:
5d:0d:aa:a9:4e:1c:45:ae:05:08:6c:ac:c2:59:73:d2:2e:1e:
ea:34:47:c3:a0:d2:6e:5d:08:aa:44:7a:cd:dd:51:e5:7c:24:
0a:47:52:e7:23:69:3d:7c:c6:01:1d:88:79:d2:ea:5a:37:38:
86:a5:18:41:7d:ab:b3:76:92:ac:07:af:61:cd:98:d9:97:84:
b2:36:63:40:01:14:66:99:61:49:da:a3:9c:6e:fe:21:cc:18:
0d:dd:76:5a:e7:58:fc:20:07:d0:72:b8:68:26:56:1a:94:d0:
f5:f1:bf:7c:9d:54:78:20:f9:97:2c:f3:8c:d0:41:81:ce:d2:
3b:98:14:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org