Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/B8C40088B3B211ECBAAF31A25A40D577.roa
File: B8C40088B3B211ECBAAF31A25A40D577.roa (raw, json)
Hash identifier: aO1/KMf32JFuB4WUgxrXA/QFqgLOv4DDFb9hS4z2jeg=
Subject key identifier: 4D:EA:5D:AF:4D:D6:FB:8C:1E:25:E7:DC:55:66:B2:3F:EE:0B:A9:F3
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0386
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/B8C40088B3B211ECBAAF31A25A40D577.roa
Signing time: Mon 04 Apr 2022 01:01:13 +0000
ROA not before: Mon 04 Apr 2022 01:01:08 +0000
ROA not after: Tue 04 Apr 2023 01:01:08 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 902 (0x386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 4 01:01:08 2022 GMT
Not After : Apr 4 01:01:08 2023 GMT
Subject: CN=624a4359-85bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:a1:1e:5f:c1:40:d5:4e:9c:cd:b7:93:ae:
69:5f:cd:33:2a:0c:8a:07:84:18:b7:b5:7e:85:e1:
87:76:26:2e:ae:a6:e2:02:27:90:21:03:b4:fd:81:
ac:fa:ad:f3:ae:2a:36:24:ca:17:a5:5e:4f:64:09:
b5:49:6a:53:dd:a2:e8:fd:c0:92:0e:9f:7a:2a:b8:
3c:d1:b6:0a:16:d0:ac:09:cc:8f:63:38:f4:05:05:
a8:e5:e6:47:21:c6:45:a6:3f:69:78:a9:81:21:3b:
05:55:4f:27:c9:80:c3:b7:e7:b6:fb:6f:0c:0e:ad:
d9:91:bc:ce:63:ff:9f:47:57:7d:7c:95:16:54:39:
f8:ff:de:cd:05:56:56:93:fa:bf:67:f6:02:05:8b:
47:e3:ab:19:f6:e0:dc:4e:4a:03:3e:52:b0:f4:0e:
c4:86:19:de:97:d8:61:03:43:8f:47:4f:6c:14:95:
dd:09:0b:0f:b3:ba:81:41:c0:50:00:ad:80:6b:68:
ca:44:66:36:46:b2:86:e1:53:6c:79:e0:fc:38:5a:
ad:28:45:53:9a:c8:1b:c2:fc:23:37:af:2e:72:2e:
74:5b:0f:58:cc:63:e9:0a:ac:2a:e6:ea:76:af:e8:
cf:a1:87:5b:f0:16:58:f8:38:c5:49:93:b5:b6:ea:
87:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EA:5D:AF:4D:D6:FB:8C:1E:25:E7:DC:55:66:B2:3F:EE:0B:A9:F3
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/B8C40088B3B211ECBAAF31A25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e3:85:7c:06:b0:21:a3:81:2f:2c:7a:94:8e:7f:73:ce:e2:
98:97:19:1a:3a:30:74:44:0b:f7:f5:f1:4b:b6:21:4d:46:f5:
b6:e3:00:76:b1:7d:6e:71:4b:31:a1:55:05:01:45:7f:e5:6e:
75:0c:5c:c0:53:ab:74:ff:52:fa:0b:b5:9b:3a:6f:b9:43:45:
9b:8f:d0:f1:49:e6:49:f2:7e:44:b8:2b:b1:c0:c7:c4:cb:48:
24:64:7b:d4:37:26:de:48:31:77:ef:ba:c2:f7:e5:f2:98:08:
ad:68:3d:4d:7b:10:64:98:f6:58:d7:a2:62:a1:99:16:f4:10:
eb:4c:24:29:8c:8e:03:a7:bb:5d:c2:4e:53:b9:78:3b:61:ce:
b7:47:22:6e:f3:40:b3:17:0e:bc:cc:81:72:56:37:c9:bb:c3:
ce:32:cb:1c:39:5b:56:57:ad:70:cc:f1:f5:9c:45:04:e9:34:
c6:94:9f:89:c8:6f:38:2b:79:60:f4:f4:6e:97:0a:bf:64:dc:
81:b8:db:80:26:b6:66:e7:ed:1f:6a:88:7a:c7:fb:c5:60:26:
35:92:07:07:c1:3b:ec:7a:f5:9f:2e:60:e1:51:87:78:c4:e9:
fd:32:47:30:43:13:65:ab:f9:f3:b9:5d:f7:b0:42:a3:45:31:
ad:24:1e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org