Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/D09548B2C81F11ECBD7DE2F6F1222468.roa
File: D09548B2C81F11ECBD7DE2F6F1222468.roa (raw, json)
Hash identifier: 4WtUQRsNEd6cgaZkuPRphNtznUNX1o8SDUZY8OEvmCE=
Subject key identifier: 9F:78:D6:B7:84:73:BE:57:5B:BD:7B:84:C7:05:54:4E:95:43:C6:47
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0436
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/D09548B2C81F11ECBD7DE2F6F1222468.roa
Signing time: Sat 30 Apr 2022 00:52:31 +0000
ROA not before: Sat 30 Apr 2022 00:00:27 +0000
ROA not after: Sun 30 Apr 2023 00:00:27 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1078 (0x436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 30 00:00:27 2022 GMT
Not After : Apr 30 00:00:27 2023 GMT
Subject: CN=626c884f-a48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7d:66:89:89:45:2e:b3:5a:87:6a:a6:13:a4:
24:6b:a2:bd:63:89:8d:a4:82:ed:7d:30:5c:e8:45:
7a:d0:5d:79:59:db:26:d4:d1:ec:f2:cc:ae:42:a9:
be:2a:2b:45:c8:4d:7b:99:b7:29:d9:c7:78:66:91:
53:00:ef:d6:37:92:f1:60:37:8d:04:e4:4d:dc:31:
19:ae:c2:50:5a:b3:17:d3:4c:6b:67:fb:c1:dc:57:
72:d1:4c:1c:11:73:33:dd:df:32:14:1d:92:f4:07:
bc:49:db:ec:60:1d:72:10:4d:00:3a:d8:8d:ee:36:
bb:e9:31:0f:82:d5:f3:80:62:e5:7e:88:58:fe:69:
74:e0:32:c8:16:48:63:43:76:ad:93:d4:ca:87:9f:
16:9e:fd:e8:5e:14:2d:c3:39:db:87:56:61:af:7d:
15:1a:d2:af:17:66:72:7d:05:cc:54:ef:be:3a:2d:
6d:f7:66:7e:26:80:73:44:45:73:37:b4:56:04:05:
52:a3:9a:3a:e9:05:a1:51:25:36:3a:17:a8:30:27:
e8:75:bb:8d:6e:1b:25:d3:98:6e:9c:ca:f5:0b:4b:
9f:71:61:ae:9d:bc:6e:86:8d:fb:24:59:ae:eb:19:
ec:94:f7:b1:34:91:c7:44:29:95:8f:ed:1e:03:cd:
84:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:78:D6:B7:84:73:BE:57:5B:BD:7B:84:C7:05:54:4E:95:43:C6:47
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/D09548B2C81F11ECBD7DE2F6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:eb:5b:57:d5:6a:e1:45:40:e8:c1:21:02:f7:d5:f1:ea:40:
09:58:b7:1b:7a:3b:6a:83:e9:30:4e:39:a3:a3:eb:1d:7f:a5:
c3:0c:17:f9:eb:18:51:a9:bf:4a:e9:9f:59:1a:d4:58:88:2b:
48:4f:c6:a5:e2:56:9f:21:39:fe:09:2a:8a:64:1a:22:70:68:
0a:36:49:66:ce:6c:da:06:a4:54:af:be:8c:27:ae:2a:41:dd:
ec:45:34:9c:2f:18:0f:d7:ef:5f:7b:de:b7:48:f5:03:ba:75:
9a:6b:71:71:e7:65:0b:d6:99:08:52:ab:67:b1:fc:75:94:8a:
3b:40:02:71:33:c4:a3:e2:ef:c8:c3:3a:2f:2a:c8:f3:f8:07:
5c:4a:47:30:0e:2d:6a:91:dc:09:5b:94:ba:4c:cf:a9:50:87:
02:53:8f:6a:3a:1d:cc:53:97:6d:12:7b:6e:81:c8:d1:40:14:
c6:b7:72:cd:1c:3b:60:60:63:9e:39:3e:ed:5b:29:59:fe:a8:
18:d9:3b:1c:e5:56:89:54:94:b5:ed:fe:44:0f:b9:e6:f8:12:
b9:89:69:db:9e:57:38:fd:39:4f:ad:4b:58:14:06:14:fc:b2:
f8:fe:97:95:c9:83:58:71:0f:47:56:25:d5:17:81:bb:3a:f7:
37:19:0d:5b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjA0MzAwMDAwMjdaFw0yMzA0MzAwMDAwMjdaMBgxFjAU
BgNVBAMMDTYyNmM4ODRmLWE0OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmfWaJiUUus1qHaqYTpCRror1jiY2kgu19MFzoRXrQXXlZ2ybU0ezyzK5C
qb4qK0XITXuZtynZx3hmkVMA79Y3kvFgN40E5E3cMRmuwlBasxfTTGtn+8HcV3LR
TBwRczPd3zIUHZL0B7xJ2+xgHXIQTQA62I3uNrvpMQ+C1fOAYuV+iFj+aXTgMsgW
SGNDdq2T1MqHnxae/eheFC3DOduHVmGvfRUa0q8XZnJ9BcxU7746LW33Zn4mgHNE
RXM3tFYEBVKjmjrpBaFRJTY6F6gwJ+h1u41uGyXTmG6cyvULS59xYa6dvG6Gjfsk
Wa7rGeyU97E0kcdEKZWP7R4DzYQBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUn3jW
t4RzvldbvXuExwVUTpVDxkcwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFL0QwOTU0OEIyQzgxRjExRUNCRDdERTJGNkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2mEwDQYJKoZIhvcNAQEL
BQADggEBAAvrW1fVauFFQOjBIQL31fHqQAlYtxt6O2qD6TBOOaOj6x1/pcMMF/nr
GFGpv0rpn1ka1FiIK0hPxqXiVp8hOf4JKopkGiJwaAo2SWbObNoGpFSvvownripB
3exFNJwvGA/X71973rdI9QO6dZprcXHnZQvWmQhSq2ex/HWUijtAAnEzxKPi78jD
Oi8qyPP4B1xKRzAOLWqR3AlblLpMz6lQhwJTj2o6HcxTl20Se26ByNFAFMa3cs0c
O2BgY545Pu1bKVn+qBjZOxzlVolUlLXt/kQPueb4ErmJadueVzj9OU+tS1gUBhT8
svj+l5XJg1hxD0dWJdUXgbs69zcZDVs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org