Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/9FF959A6CCD311ECA7D126BFF1222468.roa
File: 9FF959A6CCD311ECA7D126BFF1222468.roa (raw, json)
Hash identifier: 7jh9qNtGtrPH147P7wU5qWlgsog9BU9/rC2sTH0m8Nw=
Subject key identifier: 01:18:55:C8:31:58:FD:B4:27:6A:CE:56:88:39:F5:1B:7B:45:FD:56
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 045F
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/9FF959A6CCD311ECA7D126BFF1222468.roa
Signing time: Fri 06 May 2022 00:29:44 +0000
ROA not before: Fri 06 May 2022 00:00:39 +0000
ROA not after: Sat 06 May 2023 00:00:39 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1119 (0x45f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 6 00:00:39 2022 GMT
Not After : May 6 00:00:39 2023 GMT
Subject: CN=62746bf7-4a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a9:3e:43:70:bc:d1:e9:cb:79:55:97:8d:86:
d7:45:88:b2:ce:71:72:fb:56:0c:8c:a0:aa:58:ab:
75:bc:b9:6c:a4:a3:b1:85:58:fe:1a:93:b0:ed:7b:
0d:6f:58:f2:8b:3c:92:f9:5c:31:97:89:67:aa:7a:
84:7f:70:da:56:6e:a3:25:27:ba:39:52:dc:f8:21:
f4:50:82:6b:b2:0a:85:a5:89:fe:77:99:02:48:e8:
19:cc:db:14:1b:49:a3:a5:93:e4:42:2d:a3:3e:f8:
a3:09:56:4d:f3:2c:b9:7d:9c:ce:c9:5f:23:0c:1c:
99:5f:2a:3a:d5:4f:9b:12:60:11:82:c9:a9:3e:4a:
73:41:62:8f:15:6c:5a:7c:3f:6d:f8:8f:fd:be:16:
26:f6:c0:b9:30:45:3a:86:7f:34:01:9b:12:8f:a7:
0e:1c:be:5b:2b:4d:a3:5e:d5:d7:d5:b1:e3:d0:ab:
15:e6:70:ca:2c:40:cf:04:ea:c5:25:8d:7b:a2:3b:
c5:7b:ec:bf:a8:6c:e4:1e:16:2c:65:5c:fe:54:75:
81:66:42:cb:95:a4:3a:e1:e5:e6:71:65:37:f7:e8:
4d:63:cf:a0:db:5d:01:dd:64:7a:d5:f6:d3:d1:73:
82:62:46:3e:2d:99:2b:77:67:ef:53:31:53:13:fe:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:18:55:C8:31:58:FD:B4:27:6A:CE:56:88:39:F5:1B:7B:45:FD:56
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/9FF959A6CCD311ECA7D126BFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
73:18:b2:e2:9a:28:52:5c:ab:73:ee:33:75:df:71:56:5a:13:
64:d9:1c:d9:3d:b7:0e:93:10:c5:83:a8:38:b7:fd:a3:0d:bf:
db:93:60:c2:c2:44:44:a0:39:6a:f8:1c:c5:98:2e:ac:29:80:
14:80:77:85:b1:a0:6b:02:2c:06:af:74:ae:4a:0a:61:53:3c:
79:b2:27:eb:8f:0b:28:d7:85:8e:4b:2c:1a:87:91:5d:0b:bb:
a1:78:2e:e3:11:f1:0e:19:d9:8f:78:38:0d:09:f1:7f:12:fd:
fc:a5:c3:a8:b6:64:39:92:d2:a2:c5:96:6b:1b:0e:32:46:d3:
fc:2c:ea:d6:3a:c4:cd:97:f5:9f:81:b5:be:59:50:1d:6b:12:
1f:ea:63:c6:1e:83:82:08:d5:96:65:70:e1:f2:d7:a5:ac:13:
1a:5a:d8:b9:76:38:79:89:10:fe:6d:69:ee:54:a1:bc:97:de:
84:68:bb:a4:23:f1:f8:d8:6b:44:2c:85:4b:46:97:bb:1d:dd:
36:d0:0a:ab:23:79:d7:02:55:7d:b7:a7:d5:26:d1:7d:91:6b:
54:a2:b2:85:97:0a:c2:90:f7:1b:d6:3d:e2:f9:11:fa:4c:29:
1b:dc:f2:18:e0:21:95:93:f4:ff:a4:f5:a1:f8:ec:1e:d4:73:
8b:15:e1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org