Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C4CCFF12BD5111ECA7C5A9E85A40D577.roa
File: C4CCFF12BD5111ECA7C5A9E85A40D577.roa (raw, json)
Hash identifier: AueG3j33BlU6mOaTASrw+fiv7Pjbi3mq02qySYpcs9s=
Subject key identifier: 7B:D8:DE:F6:B2:B9:0A:8D:02:41:AD:DC:B0:8E:95:6D:2D:70:AE:AA
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 03D4
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C4CCFF12BD5111ECA7C5A9E85A40D577.roa
Signing time: Sat 16 Apr 2022 06:52:23 +0000
ROA not before: Sat 16 Apr 2022 06:52:18 +0000
ROA not after: Sun 16 Apr 2023 06:52:18 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980 (0x3d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 16 06:52:18 2022 GMT
Not After : Apr 16 06:52:18 2023 GMT
Subject: CN=625a67a7-d127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:29:88:a0:b8:a3:ec:3c:53:d7:b8:14:f6:e9:
46:cb:2f:7d:ef:5a:a6:b0:5c:07:ea:91:a3:91:b0:
48:63:4d:86:35:3d:b8:a6:00:a1:41:a2:32:c9:58:
f8:e3:64:b5:bf:00:45:b3:69:1a:eb:39:2d:73:54:
ee:17:1c:df:49:5c:6b:c0:da:e4:f3:32:9d:30:26:
16:4c:9a:df:c3:4f:3a:a6:cf:85:dd:d4:fb:2a:7e:
1a:8e:c5:b7:c5:d5:26:be:7f:b4:43:63:73:4b:ce:
2d:e2:27:fc:47:21:d3:bc:8f:99:48:58:fd:1f:2b:
a0:4c:8a:01:20:42:01:7d:44:f7:86:e3:34:c9:7d:
d5:b2:ed:b4:e6:14:bd:5a:15:20:57:a9:aa:75:78:
05:ed:85:26:6a:9e:bc:f4:d2:4d:eb:77:d2:40:f9:
9e:f8:56:d3:d3:7f:5b:29:b7:10:10:da:d1:cb:e6:
e5:42:0e:7d:0f:dd:48:0e:22:89:2e:f4:d5:0b:00:
26:e7:4f:28:f8:f4:4f:f1:9e:dd:a3:75:da:11:10:
a3:8f:c8:c5:6a:ad:f2:c2:f0:17:f0:10:1d:59:c8:
fa:0c:94:17:5f:6a:db:05:9c:fb:55:81:5c:eb:dc:
0b:91:26:0e:d3:95:e6:54:6c:67:c6:d2:7d:75:34:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D8:DE:F6:B2:B9:0A:8D:02:41:AD:DC:B0:8E:95:6D:2D:70:AE:AA
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C4CCFF12BD5111ECA7C5A9E85A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:1f:8a:32:aa:b6:8d:64:f8:d2:8a:9b:b9:75:b0:bf:1c:8a:
5b:1b:8d:69:d4:d4:5d:31:13:f0:15:fb:db:e6:07:2a:71:75:
3d:51:9f:ba:d5:1e:83:5d:de:c5:c9:96:95:98:e1:eb:f0:99:
c4:96:21:03:d1:e8:fd:2e:cc:da:3e:0c:3d:a2:1b:2e:c6:b0:
47:28:b9:07:7c:f3:a5:34:60:66:1d:f8:f5:e2:50:b3:87:47:
39:34:a7:66:88:fe:aa:3b:3e:14:5e:78:a0:71:45:d4:75:11:
df:f1:1e:f7:64:f8:3e:31:3b:e8:3e:db:75:3b:af:86:21:4b:
e5:fe:64:d4:6a:f4:9e:70:bf:ac:38:3a:e0:52:6f:0b:d5:d4:
46:e2:10:74:b0:3f:66:aa:0a:5c:21:4f:25:6f:13:9f:56:20:
f3:f6:eb:dc:ae:3a:dc:99:c6:0e:b2:f5:19:83:48:2b:de:f3:
80:9b:83:6d:6d:b5:39:2c:8b:1b:71:f7:8f:de:01:7f:54:5a:
5e:a4:16:96:12:4d:af:cc:15:4b:bf:ce:8e:c9:3e:c1:2b:3e:
98:5a:b4:33:e9:c0:cb:1f:57:03:9c:9e:37:1c:9b:68:b8:40:
e6:03:43:36:6c:e3:c2:76:f9:f0:c8:45:cf:c1:88:df:3c:60:
93:7d:51:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org