Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/BE5EA5F4FC2611EC9137A2F2F1222468.roa
File: BE5EA5F4FC2611EC9137A2F2F1222468.roa (raw, json)
Hash identifier: TRFtTNqgOghLDNP9PgBpH9p6se4BNcSfPBYLGCuAd2Q=
Subject key identifier: 91:AD:C5:5C:F2:87:0B:7A:10:57:6D:82:F0:BD:67:AE:A2:E0:8A:EE
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 05F7
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/BE5EA5F4FC2611EC9137A2F2F1222468.roa
Signing time: Tue 05 Jul 2022 05:53:08 +0000
ROA not before: Tue 05 Jul 2022 05:53:01 +0000
ROA not after: Wed 05 Jul 2023 05:53:01 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1527 (0x5f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Jul 5 05:53:01 2022 GMT
Not After : Jul 5 05:53:01 2023 GMT
Subject: CN=62c3d1c3-c40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:0a:9f:d7:28:3e:3d:97:f4:07:15:85:a5:
41:c7:a0:0a:64:32:5c:b9:e7:ff:c1:bf:bb:d2:1f:
05:87:b9:a2:4d:45:88:c0:fb:f7:15:b4:8e:4c:2e:
32:e9:fa:37:cc:cb:4e:5b:55:74:45:0b:99:28:3e:
3b:ca:7b:e9:75:a4:41:9f:21:07:99:32:9d:3e:8f:
16:34:6f:e6:54:16:f9:59:18:7c:d2:e7:02:f9:19:
b8:18:09:14:44:98:b1:5b:aa:65:0a:b1:d6:43:18:
e9:24:c5:aa:0e:0a:e5:ae:13:c3:7c:1a:1d:95:d7:
63:8d:24:6c:da:e7:5b:dc:36:07:23:70:ba:fa:ba:
9b:fe:ed:f9:4f:25:b5:b6:10:79:f1:f0:da:9e:34:
81:5d:52:32:3b:bb:62:ab:1b:73:a5:24:de:2f:1a:
23:14:80:ca:8d:6c:0c:ac:5b:0c:74:33:2a:01:44:
c6:4a:71:d1:c8:9b:5a:78:3c:2f:28:5c:6f:76:ac:
d0:21:30:e6:0f:8b:77:32:ab:a3:78:ee:62:16:d9:
cb:e2:ef:19:0a:73:56:e7:fe:57:96:49:c5:26:78:
57:28:bc:5c:74:6f:3d:e7:fe:6f:31:5d:69:b6:9b:
bd:e0:03:e7:c3:7f:06:e6:dc:92:86:ff:38:f5:0d:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AD:C5:5C:F2:87:0B:7A:10:57:6D:82:F0:BD:67:AE:A2:E0:8A:EE
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/BE5EA5F4FC2611EC9137A2F2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:3b:fd:83:ca:ae:39:db:97:41:76:4d:ac:d5:98:7c:66:63:
20:aa:da:b3:83:d9:d4:33:25:21:af:c8:59:94:b3:e2:04:3a:
76:d1:e0:e3:ed:1d:ed:bd:ea:01:28:35:ec:fe:7d:86:4a:3b:
65:60:16:df:e2:a8:a4:ba:18:93:fe:70:64:a8:04:47:cd:be:
0e:91:d0:90:d2:0b:22:b9:28:b1:60:17:89:4f:cc:3e:dd:bf:
19:58:78:df:4b:a0:32:cc:24:5b:85:0b:a0:7a:c7:cc:67:77:
09:dd:cc:1c:33:a8:c8:e3:28:08:2f:4b:cb:42:53:90:f6:8c:
c5:de:83:a9:fa:61:7b:25:75:16:ad:01:4f:2b:a0:e2:14:aa:
24:d0:f8:97:49:42:ad:b5:6a:cf:de:25:b1:01:14:04:0d:c9:
d7:43:ad:45:45:fb:58:58:4b:3d:5b:a2:2e:9e:63:8a:7c:bb:
f2:d8:01:82:62:93:50:e6:c9:49:0d:66:b7:c7:03:50:25:c1:
d5:e9:c5:b8:d2:eb:89:07:ee:b7:d0:3d:46:38:93:b4:b3:59:
06:55:fb:00:89:e3:ca:ef:c5:0e:94:31:5c:86:74:06:cb:be:
ef:6a:3f:ba:ba:0e:2a:fa:cd:f3:e0:e8:5d:9a:a8:56:84:03:
b2:64:3b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org