Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/D5E37C8E83CE11ECA7CF49795A40D577.roa
File: D5E37C8E83CE11ECA7CF49795A40D577.roa (raw, json)
Hash identifier: XAqcBSTPZdUpoMVru6JBGvAy2LByPd+DQlyCIaX+8UI=
Subject key identifier: 50:F0:7C:C6:FA:E4:71:C1:07:93:0C:26:F8:2D:F0:4E:64:9B:ED:B0
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0235
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/D5E37C8E83CE11ECA7CF49795A40D577.roa
Signing time: Wed 02 Feb 2022 02:21:32 +0000
ROA not before: Wed 02 Feb 2022 02:21:27 +0000
ROA not after: Thu 02 Feb 2023 02:21:27 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Feb 2 02:21:27 2022 GMT
Not After : Feb 2 02:21:27 2023 GMT
Subject: CN=61f9eaac-04bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:d3:59:b3:b6:99:95:ee:ca:97:45:60:9f:
e7:49:db:0f:c9:b8:e2:2d:70:d2:e9:56:a3:5e:ea:
55:3b:11:e5:06:b2:3d:ea:a3:b7:9f:77:44:46:95:
41:51:37:5f:ae:08:94:e1:96:5f:5a:03:a6:90:83:
c0:3a:ac:8a:1f:e1:c2:37:89:da:4c:c4:f6:74:d6:
36:f3:85:cc:83:92:b9:88:81:c5:5b:c2:3e:80:b4:
c2:9e:1f:e1:3d:59:32:ae:1d:22:7a:38:22:db:fd:
02:71:3e:ab:05:43:46:b6:b8:74:29:29:9e:83:76:
8b:c3:06:72:b9:27:0e:62:60:10:68:89:1f:f9:0a:
a4:8d:f3:11:ce:a0:3f:85:ab:7e:55:02:d2:0e:ee:
ed:27:25:69:30:5e:12:82:0b:9f:4e:d7:8d:1b:b4:
ae:23:87:45:a2:66:a9:e6:2f:90:d2:06:df:29:1c:
f5:b3:d3:08:9c:19:9c:96:0e:9c:73:8e:7d:d6:00:
d4:f1:e1:28:47:b9:75:bf:f6:c7:60:29:08:cd:9f:
ee:c7:0d:16:9c:eb:7c:eb:a0:0a:18:1b:42:47:e3:
25:d7:c1:5d:0d:c9:02:b8:fe:59:71:40:fb:3f:5c:
75:3e:6d:9b:1b:82:d4:41:f9:47:c5:3c:50:4d:3d:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F0:7C:C6:FA:E4:71:C1:07:93:0C:26:F8:2D:F0:4E:64:9B:ED:B0
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/D5E37C8E83CE11ECA7CF49795A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c0:9f:35:55:05:1e:87:01:f6:bf:88:22:4a:82:03:74:f3:
ad:06:4b:0b:a0:7f:39:4e:8f:f3:80:dd:2c:3e:83:9d:1e:94:
23:3f:a6:36:2a:42:c0:34:56:de:58:86:9a:0b:fb:33:85:73:
07:7e:67:74:6f:62:9b:b4:65:74:79:03:6a:c7:e4:60:c2:d7:
db:e4:20:e3:e5:8e:1a:99:a4:1e:6d:12:b8:0d:35:c2:4a:e0:
32:8d:78:5f:6f:8e:7b:16:0f:fc:56:5b:a1:61:b1:14:02:f7:
00:66:77:57:6a:37:fb:48:39:72:6a:bf:e7:23:4f:f1:38:8b:
af:b1:06:a0:17:bb:3c:88:79:f5:bc:58:9d:65:e8:ae:b4:ab:
7b:70:6b:eb:00:22:47:d1:4a:7f:83:79:87:98:51:0d:63:5e:
8a:21:8b:5e:5a:9e:94:77:b4:de:49:fc:c7:43:f0:a7:59:9f:
3d:12:69:1b:32:d1:f5:d5:33:94:79:f8:44:25:e0:8a:4f:c4:
5e:60:cc:7b:34:bd:58:24:84:f3:4f:50:ca:96:69:29:40:10:
f7:c7:b2:ad:a7:32:9b:42:ea:ff:4c:3d:64:91:27:6c:e3:5d:
62:8a:bf:04:a1:ba:42:e9:4c:0b:51:c3:56:2b:41:d0:a1:6b:
14:f2:55:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org