Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/BBEC02DEC90511EC8AC73AD3F1222468.roa
File: BBEC02DEC90511EC8AC73AD3F1222468.roa (raw, json)
Hash identifier: GqOrsXvbpZTg/lIaxyNZ8a/6/P4omiwWwSLQ45ynmWk=
Subject key identifier: CF:00:0A:81:9F:78:CF:91:D1:38:5C:0C:63:DD:F7:19:87:40:88:01
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 043E
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/BBEC02DEC90511EC8AC73AD3F1222468.roa
Signing time: Sun 01 May 2022 04:18:21 +0000
ROA not before: Sun 01 May 2022 04:18:16 +0000
ROA not after: Mon 01 May 2023 04:18:16 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1086 (0x43e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 1 04:18:16 2022 GMT
Not After : May 1 04:18:16 2023 GMT
Subject: CN=626e0a0d-d45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:0b:16:74:db:a2:d3:55:f1:58:77:30:1a:
b2:77:17:dc:12:5f:e0:11:6d:55:8d:a0:ef:7a:8d:
a3:a4:6e:74:75:8c:ea:ce:01:c8:81:ea:26:27:a9:
8f:44:32:73:6f:25:b3:9a:13:c8:48:c2:38:cc:2a:
1f:80:60:e8:e8:60:c0:d2:a1:56:f5:92:57:42:f1:
54:81:d7:1f:ec:61:6f:36:2d:dd:64:cc:af:38:9d:
63:a7:e5:4d:aa:e1:0c:da:20:ac:90:5d:b2:0d:9c:
0d:44:d8:e5:94:11:66:aa:da:c5:c1:28:38:62:eb:
eb:29:cc:69:8c:db:38:bd:1e:2c:60:dc:36:21:09:
3e:0f:b0:de:3a:85:91:fa:0f:50:f4:5e:54:87:6b:
a4:fa:a8:86:71:af:c5:55:25:a9:f4:67:b1:98:72:
be:34:94:3b:ae:92:c9:19:dd:5d:fc:ad:14:a4:61:
44:b1:58:51:55:38:52:e7:ea:db:ca:ab:fc:d2:d8:
fb:40:ec:b2:37:8a:39:05:9c:2d:e9:7b:15:5a:c1:
94:ca:7d:a0:93:54:57:64:8f:ef:42:d8:84:12:a1:
74:03:3b:6e:05:d0:ae:5d:7e:90:78:dd:67:94:d0:
0c:57:26:e9:a1:0f:56:dd:ab:db:3a:8f:07:83:a7:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:00:0A:81:9F:78:CF:91:D1:38:5C:0C:63:DD:F7:19:87:40:88:01
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/BBEC02DEC90511EC8AC73AD3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
86:20:15:a8:43:fc:45:2b:64:f7:93:c1:47:f8:cb:fa:f3:59:
41:c8:84:f8:a8:93:e1:38:06:2f:7d:ae:cc:ac:fd:1b:89:dc:
ad:19:97:22:3d:a8:64:7b:98:f1:97:89:e6:15:de:dd:42:fd:
e9:e9:0e:73:7d:b4:da:ea:ed:c6:50:c3:e6:c5:37:58:7a:00:
e8:20:26:58:25:3e:95:b2:c9:c4:33:98:85:6e:26:3e:1e:30:
73:33:2c:0d:db:32:e7:d3:25:8e:8f:25:89:1a:81:13:5f:ea:
d6:b0:1b:9b:e9:15:a9:59:59:71:cf:80:e3:66:b9:ef:b9:88:
18:2b:88:a5:b2:9c:b3:e1:05:54:b7:c9:a6:10:2b:a9:e0:12:
54:e7:a9:c7:09:63:6f:64:76:57:22:52:e0:29:2a:54:c9:aa:
2d:da:41:a0:e3:88:a3:ec:b5:44:3b:44:13:90:03:96:03:86:
d5:2f:f8:9b:4d:1c:bb:11:a6:92:a0:62:1f:f6:de:6b:ba:86:
da:57:bc:b9:3b:26:1e:75:de:9e:0b:0f:e0:bc:ae:d5:ba:b1:
cc:46:04:2e:f8:15:58:36:97:00:4c:c1:2f:71:24:90:13:fa:
5c:2d:f8:04:1f:9b:3d:98:6f:c5:76:14:b5:ac:18:93:2f:a1:
e4:21:47:87
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjA1MDEwNDE4MTZaFw0yMzA1MDEwNDE4MTZaMBgxFjAU
BgNVBAMMDTYyNmUwYTBkLWQ0NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3EgsWdNui01XxWHcwGrJ3F9wSX+ARbVWNoO96jaOkbnR1jOrOAciB6iYn
qY9EMnNvJbOaE8hIwjjMKh+AYOjoYMDSoVb1kldC8VSB1x/sYW82Ld1kzK84nWOn
5U2q4QzaIKyQXbINnA1E2OWUEWaq2sXBKDhi6+spzGmM2zi9Hixg3DYhCT4PsN46
hZH6D1D0XlSHa6T6qIZxr8VVJan0Z7GYcr40lDuukskZ3V38rRSkYUSxWFFVOFLn
6tvKq/zS2PtA7LI3ijkFnC3pexVawZTKfaCTVFdkj+9C2IQSoXQDO24F0K5dfpB4
3WeU0AxXJumhD1bdq9s6jweDp9jJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUzwAK
gZ94z5HROFwMY933GYdAiAEwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFL0JCRUMwMkRFQzkwNTExRUM4QUM3M0FEM0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2mEwDQYJKoZIhvcNAQEL
BQADggEBAIYgFahD/EUrZPeTwUf4y/rzWUHIhPiok+E4Bi99rsys/RuJ3K0ZlyI9
qGR7mPGXieYV3t1C/enpDnN9tNrq7cZQw+bFN1h6AOggJlglPpWyycQzmIVuJj4e
MHMzLA3bMufTJY6PJYkagRNf6tawG5vpFalZWXHPgONmue+5iBgriKWynLPhBVS3
yaYQK6ngElTnqccJY29kdlciUuApKlTJqi3aQaDjiKPstUQ7RBOQA5YDhtUv+JtN
HLsRppKgYh/23mu6htpXvLk7Jh513p4LD+C8rtW6scxGBC74FVg2lwBMwS9xJJAT
+lwt+AQfmz2Yb8V2FLWsGJMvoeQhR4c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org