Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/CBEC300C37CB11ED9D28D4F9F1222468.roa
File: CBEC300C37CB11ED9D28D4F9F1222468.roa (raw, json)
Hash identifier: /WErlqsTLt1XYYND2uY/IIe8BE66+3lpqX7zRft1WtY=
Subject key identifier: D7:C3:1A:D2:5D:EB:34:4F:5F:49:B0:83:CD:1B:7C:87:7A:8E:80:55
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0705
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/CBEC300C37CB11ED9D28D4F9F1222468.roa
Signing time: Mon 19 Sep 2022 03:33:16 +0000
ROA not before: Mon 19 Sep 2022 03:33:11 +0000
ROA not after: Tue 19 Sep 2023 03:33:11 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797 (0x705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Sep 19 03:33:11 2022 GMT
Not After : Sep 19 03:33:11 2023 GMT
Subject: CN=6327e2fc-2145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:3f:6b:85:83:4d:29:5f:78:13:38:48:f7:
09:53:43:20:b5:f4:3e:b2:49:f5:8e:27:ad:5e:89:
b8:27:a8:80:b1:26:f9:b7:c2:ca:7d:6b:f0:23:26:
37:d2:8f:9f:5a:5b:e5:ad:fd:e1:b7:ce:b2:1f:71:
3a:87:70:d4:96:9a:30:ae:1a:54:45:d0:51:43:17:
b3:86:e4:08:80:d0:cb:23:d6:3d:f6:71:54:9c:05:
4f:2a:15:f7:54:8b:5a:80:30:81:90:88:a1:4a:b0:
e2:05:cf:49:6c:8d:55:8b:d1:2d:e8:cb:80:d7:c4:
1a:9b:40:7b:36:5f:e1:61:a0:63:19:4b:7b:73:06:
37:dc:cd:65:27:14:d4:e4:49:09:ba:e6:4c:bd:9f:
4a:b6:f6:e5:5d:5a:00:af:f2:78:92:1d:ad:9f:f5:
9e:ea:52:b8:2a:da:2b:fe:bf:a2:e8:68:c4:e0:91:
c2:47:91:70:e1:4d:26:b4:80:cf:6a:2a:b2:1a:e2:
15:2d:86:da:43:8e:4f:7f:7b:13:5f:16:9e:16:20:
cb:eb:59:67:46:7d:03:92:f5:34:86:8e:56:14:60:
f0:2d:92:dd:bd:87:58:bc:71:03:52:b8:f8:1b:08:
4b:7c:35:a6:f2:d9:cf:f6:dc:2e:84:da:79:bf:41:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C3:1A:D2:5D:EB:34:4F:5F:49:B0:83:CD:1B:7C:87:7A:8E:80:55
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/CBEC300C37CB11ED9D28D4F9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:5e:87:73:7f:80:69:16:e5:a0:33:cf:aa:9b:dd:5b:ab:52:
3c:d3:7d:a8:94:00:a1:12:d5:fc:2c:86:08:46:29:0c:9b:b3:
8f:f6:89:6a:cd:e1:a0:e1:4d:ca:26:f7:eb:9b:5b:61:41:2f:
77:3b:b9:3a:e7:6e:c6:36:bf:68:8d:bd:c8:59:f4:f9:ae:fe:
e5:0c:7a:f9:e5:38:17:93:bd:20:fd:4e:41:00:e7:3b:4e:d2:
16:d9:ee:76:98:2a:a9:43:82:d3:bf:a7:ae:ed:67:8e:81:62:
c9:b8:09:a8:5c:4d:c6:13:b3:b7:3d:27:b7:3a:77:3a:6b:ae:
8a:2a:4e:27:39:5c:e0:b1:e9:42:63:1e:4f:8c:ae:72:3d:b0:
f8:f0:23:c1:b2:aa:8b:32:ba:c8:30:59:75:59:fc:33:a8:38:
dc:dc:59:78:13:8e:14:08:15:04:02:f1:8b:67:5b:6d:63:84:
5e:3b:c6:3f:58:49:0e:f6:68:96:05:d5:a3:9d:13:70:8e:c3:
26:6f:c3:d8:ad:bd:81:ab:93:13:85:a5:f7:56:b4:24:cf:40:
96:a8:88:d4:7d:08:22:bc:e8:77:10:be:2b:b1:ac:58:1d:94:
84:62:f5:2a:de:0a:62:73:db:68:79:07:7e:87:be:6e:27:41:
68:b8:39:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org