Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/BB25BFE6CA7E11EC9F05A0EFF1222468.roa
File: BB25BFE6CA7E11EC9F05A0EFF1222468.roa (raw, json)
Hash identifier: LbYDXj1rIV2FIEytSlkzeUk89iY9rHMLVThm1CMR6No=
Subject key identifier: 0D:79:5F:AA:89:00:AC:48:13:64:19:99:51:8F:EC:8B:7C:D3:80:7F
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0448
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/BB25BFE6CA7E11EC9F05A0EFF1222468.roa
Signing time: Tue 03 May 2022 01:17:00 +0000
ROA not before: Tue 03 May 2022 01:16:55 +0000
ROA not after: Wed 03 May 2023 01:16:55 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096 (0x448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 3 01:16:55 2022 GMT
Not After : May 3 01:16:55 2023 GMT
Subject: CN=6270828b-3ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:e3:55:34:40:43:c9:63:9c:eb:13:97:e1:
e2:b3:53:be:45:a2:c9:d6:8a:04:46:ff:b5:1c:77:
05:2d:34:dc:18:a9:39:1a:a3:ce:c2:52:ff:b4:7e:
6f:1c:c7:87:78:63:08:5a:ba:23:72:16:6d:3f:15:
63:06:a9:1d:99:82:bf:fb:92:88:f7:a1:7b:99:01:
c0:b4:82:b3:e7:f0:05:5c:04:e2:9a:6c:a8:b8:a2:
b9:6a:32:47:45:16:27:90:5c:aa:58:70:d6:a0:ba:
e1:26:87:e7:c1:7a:4d:d3:7f:11:f1:f5:18:1d:73:
6e:95:ed:2b:ca:92:42:d2:19:9a:c4:24:5b:38:02:
f0:4b:0d:e3:b2:0c:c1:c9:51:79:59:9c:09:a2:ea:
a4:ad:d2:a4:a7:84:3c:3e:46:02:81:eb:6a:18:ac:
26:e4:b0:60:cf:b6:11:b6:14:d9:9d:dd:3e:eb:43:
f8:a8:c4:e3:c7:ca:f1:da:28:91:95:57:8e:f7:55:
62:fd:37:33:aa:d9:42:65:fb:70:f8:60:09:17:ea:
be:42:43:89:54:e0:02:10:50:41:37:4d:cd:76:6b:
f2:41:1b:3a:a8:55:54:1f:90:c1:3f:18:9e:4a:31:
9c:ea:29:48:9b:f7:ba:45:29:f6:bf:8f:fc:5c:7b:
0d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:79:5F:AA:89:00:AC:48:13:64:19:99:51:8F:EC:8B:7C:D3:80:7F
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/BB25BFE6CA7E11EC9F05A0EFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
99:43:47:78:1a:70:10:f1:ac:e5:e7:a5:e4:37:e4:08:7c:99:
07:a1:c0:d1:c2:f3:41:92:a8:92:c1:ee:78:61:2a:d1:94:a3:
24:1b:df:2a:87:17:fd:69:10:2f:4e:79:e2:8f:a4:d6:84:f1:
3d:17:95:5a:1c:8c:94:54:89:1a:29:ea:21:6e:78:fd:3b:e4:
6c:ff:39:39:57:91:8f:26:36:5b:cf:21:3e:50:d2:f1:70:77:
ef:20:ff:3e:ae:e5:fc:67:13:7e:25:0d:33:83:ba:03:67:db:
d2:fc:9a:e1:3a:13:8c:ea:96:c9:e2:f7:9c:8d:e9:cd:20:6c:
60:94:c2:03:6e:3f:6e:02:c5:d7:67:8b:11:cf:22:aa:03:e4:
a2:4e:27:6b:00:ad:6a:18:13:6a:95:9a:1f:0f:7e:f5:03:1e:
1e:c3:6f:9e:ff:5b:13:81:0b:3a:c5:45:66:94:2b:ee:8a:12:
0c:a2:cd:0c:eb:c4:22:67:d0:ed:46:01:62:a0:e3:2a:af:99:
88:51:83:78:22:d9:4b:8a:1f:5a:50:75:9b:c8:74:d9:d6:fd:
b7:83:48:92:ee:1c:f8:7e:c6:b7:46:68:f6:78:31:e8:a9:2c:
1a:4e:1f:ad:34:9a:55:8a:28:cf:c6:8d:5f:81:16:ae:78:59:
af:a1:63:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org