Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/AE6BB49ECC2311ECA5DA29A1F1222468.roa
File: AE6BB49ECC2311ECA5DA29A1F1222468.roa (raw, json)
Hash identifier: ebuiqvQ9uYJy+wkUELHXuaWEruMZNoqQ8hUXm0sCVdg=
Subject key identifier: 69:71:CC:02:37:4D:F6:B2:B6:D3:EA:6F:22:A2:05:EE:CF:81:C1:E7
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0459
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/AE6BB49ECC2311ECA5DA29A1F1222468.roa
Signing time: Thu 05 May 2022 03:30:17 +0000
ROA not before: Thu 05 May 2022 03:30:11 +0000
ROA not after: Fri 05 May 2023 03:30:11 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113 (0x459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 5 03:30:11 2022 GMT
Not After : May 5 03:30:11 2023 GMT
Subject: CN=627344c8-475d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:5b:44:38:95:aa:ad:99:73:e2:6e:c7:7a:
f7:b9:ec:96:45:96:79:40:d2:2f:b3:e5:eb:7c:da:
8e:cb:31:95:6a:70:cf:25:ea:70:b1:b5:5b:ec:6f:
3e:51:54:66:07:0a:3b:17:e5:8b:ee:24:18:1a:91:
80:d5:5e:ce:b6:8b:ec:ef:17:4b:9e:30:ef:c2:a9:
7a:94:72:c7:38:df:05:1e:93:0a:c0:93:cb:a3:aa:
cc:0d:a8:59:10:79:3c:6d:1f:ec:ff:dd:08:ca:b1:
1d:2d:0a:99:4d:22:ab:e6:56:0e:d1:04:30:a1:ab:
46:4c:81:8c:e2:a7:90:43:85:7e:06:e5:9f:38:ed:
f4:94:0e:21:78:6f:c8:22:8f:05:f7:5d:c0:7f:ff:
4b:1c:ff:fb:dc:3e:fb:1b:88:3c:b5:05:71:2b:6c:
aa:5a:a8:1e:61:81:a9:51:54:91:ce:88:d0:67:bd:
db:d7:3e:d9:b6:36:0e:a1:55:c2:40:d7:fa:bd:0a:
f6:55:77:2a:ec:2d:90:f5:04:5e:bc:39:23:b2:8f:
69:ec:56:d6:70:7f:9f:1c:6f:bc:78:f2:de:83:bd:
c7:a1:6d:99:64:85:a5:6d:b5:54:7a:e0:2e:1a:49:
7b:b5:c7:4d:b3:f6:32:fb:2f:02:2d:cb:78:83:a3:
cf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:71:CC:02:37:4D:F6:B2:B6:D3:EA:6F:22:A2:05:EE:CF:81:C1:E7
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/AE6BB49ECC2311ECA5DA29A1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ff:b1:7a:b7:80:31:b2:f1:70:04:4a:d9:74:2d:57:fc:3c:
1f:88:9d:81:af:1f:14:85:f5:45:9a:1c:64:16:49:17:f4:ca:
9f:0d:1a:8f:18:44:ee:62:14:f7:76:46:fe:b6:5a:02:ed:88:
fe:9d:79:01:d5:76:7d:bc:25:1e:d7:25:a6:33:fb:5f:b8:e7:
53:4e:39:fe:62:aa:cc:76:6e:36:72:16:72:9f:50:73:c6:3b:
18:79:4f:76:85:ca:f7:77:e9:a1:17:97:cb:3d:39:40:32:2e:
96:7a:8b:88:6f:36:97:de:e0:07:8a:d7:1d:68:d9:f6:43:1e:
e0:32:32:9c:f6:6c:3f:41:80:8a:85:9b:c2:22:f2:1a:1a:a3:
f1:8a:bd:31:a7:db:59:61:3d:3c:29:32:29:fa:74:ee:b9:0e:
06:a7:a9:1e:43:75:b6:04:a3:85:8b:ce:f4:30:2c:0e:c6:23:
e8:7c:46:b5:40:98:ec:c1:f4:fa:46:62:4a:70:81:24:f5:ed:
a2:58:5e:d5:ef:df:29:02:d7:41:c1:9c:44:70:6f:83:47:a0:
ce:61:cc:42:10:66:ab:de:d5:21:a6:38:3c:c7:49:a6:a0:1f:
05:f1:3d:55:6b:2f:8e:62:59:af:a3:67:64:80:42:4f:3c:2a:
68:27:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org