Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/D6A72BC2BE3211ECA83BC57E5A40D577.roa
File: D6A72BC2BE3211ECA83BC57E5A40D577.roa (raw, json)
Hash identifier: 1Z+TDEiZjvi61BGqOMxqB7onZv6ssO/xXekEf1UZo1I=
Subject key identifier: 45:CA:C6:FF:FF:04:BD:99:05:FB:2E:7A:D9:C1:B7:85:1D:46:C2:7E
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 03DD
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/D6A72BC2BE3211ECA83BC57E5A40D577.roa
Signing time: Sun 17 Apr 2022 09:43:30 +0000
ROA not before: Sun 17 Apr 2022 09:43:26 +0000
ROA not after: Mon 17 Apr 2023 09:43:26 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 989 (0x3dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 17 09:43:26 2022 GMT
Not After : Apr 17 09:43:26 2023 GMT
Subject: CN=625be142-c58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:09:02:60:3f:ab:e4:87:d8:88:aa:21:32:
34:d0:13:64:5a:c4:2c:4c:ba:8d:97:30:c6:02:59:
d4:65:91:b0:94:a0:cf:e4:48:d0:60:5d:ef:4e:ca:
f7:65:48:82:07:ef:0f:93:ed:3c:e3:00:6c:14:93:
85:72:26:90:5c:8a:5e:ba:88:71:47:ce:95:22:a1:
23:15:71:8f:83:6d:b0:dd:b2:a8:ca:4d:8d:0b:7d:
be:cb:ad:bd:a8:ed:19:d4:1a:50:0d:6c:d0:9e:be:
05:3f:c7:f8:01:c3:10:11:91:15:71:43:c8:07:e4:
42:7d:3e:de:4b:4b:fb:ff:f3:f7:25:74:30:bf:d5:
39:e2:52:b2:16:e6:27:7d:38:3c:f9:fe:28:6c:67:
aa:63:b6:70:f2:f4:eb:f2:5f:c8:4a:64:85:25:d7:
89:29:e9:a6:b8:b4:96:9f:d1:c4:48:82:8a:55:d9:
74:07:9f:2f:3b:ba:02:7a:a4:86:bd:e1:8e:c6:1f:
e4:da:8f:11:dd:85:ab:ea:09:63:41:39:06:77:29:
d8:b7:9f:2d:f2:77:00:4e:82:84:4f:63:f3:15:58:
8a:e6:77:90:36:f3:f4:be:88:63:59:21:5f:e7:1e:
04:b1:52:f1:de:1e:4e:07:8f:fa:a6:39:2b:8d:5f:
e5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CA:C6:FF:FF:04:BD:99:05:FB:2E:7A:D9:C1:B7:85:1D:46:C2:7E
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/D6A72BC2BE3211ECA83BC57E5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:32:29:a9:e6:61:29:c4:43:86:a3:26:d3:75:bb:40:4c:f0:
2d:29:50:69:13:ad:7d:19:ea:e1:d0:4b:69:8c:a6:f9:40:58:
4b:ac:36:07:71:02:90:59:45:70:a2:a2:02:bc:3a:95:8c:42:
b1:cd:01:78:04:eb:f5:ae:7f:22:c8:77:89:7e:77:20:10:5e:
93:b1:c4:ba:1d:28:ad:22:59:7c:38:69:e8:89:6d:c0:a1:d5:
af:20:d0:db:6b:67:6d:e7:a0:4f:b6:76:37:ed:0f:cc:91:9b:
d3:51:9c:29:e6:3f:5b:40:4a:8a:32:c7:3f:84:b4:5f:50:b7:
0f:50:34:f2:63:89:a9:17:4f:0a:c1:0d:76:f5:c5:6b:ca:ae:
bc:46:76:26:f1:cb:6d:f6:8f:59:5f:dc:45:e4:f9:a7:18:72:
3f:83:33:1e:f9:f2:8f:37:a9:99:ee:e4:dd:43:5e:7f:86:4d:
c5:23:d0:80:f3:00:3f:4c:a0:b1:ab:4a:ba:e0:6d:a9:d4:37:
28:03:d8:86:be:d3:31:25:55:17:5a:3b:39:50:c0:9f:f5:a1:
c1:23:2e:45:26:d4:90:d2:b6:8b:91:9d:44:b1:8b:c2:b3:8e:
76:ab:1b:30:98:28:d1:2c:82:49:e6:17:6e:ed:ca:33:dc:3c:
7f:32:e1:12
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA90wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjA0MTcwOTQzMjZaFw0yMzA0MTcwOTQzMjZaMBgxFjAU
BgNVBAMMDTYyNWJlMTQyLWM1OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCmQkCYD+r5IfYiKohMjTQE2RaxCxMuo2XMMYCWdRlkbCUoM/kSNBgXe9O
yvdlSIIH7w+T7TzjAGwUk4VyJpBcil66iHFHzpUioSMVcY+DbbDdsqjKTY0Lfb7L
rb2o7RnUGlANbNCevgU/x/gBwxARkRVxQ8gH5EJ9Pt5LS/v/8/cldDC/1TniUrIW
5id9ODz5/ihsZ6pjtnDy9OvyX8hKZIUl14kp6aa4tJaf0cRIgopV2XQHny87ugJ6
pIa94Y7GH+TajxHdhavqCWNBOQZ3Kdi3ny3ydwBOgoRPY/MVWIrmd5A28/S+iGNZ
IV/nHgSxUvHeHk4Hj/qmOSuNX+V9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQURcrG
//8EvZkF+y562cG3hR1Gwn4wHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFL0Q2QTcyQkMyQkUzMjExRUNBODNCQzU3RTVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2mEwDQYJKoZIhvcNAQEL
BQADggEBANcyKanmYSnEQ4ajJtN1u0BM8C0pUGkTrX0Z6uHQS2mMpvlAWEusNgdx
ApBZRXCiogK8OpWMQrHNAXgE6/WufyLId4l+dyAQXpOxxLodKK0iWXw4aeiJbcCh
1a8g0NtrZ23noE+2djftD8yRm9NRnCnmP1tASooyxz+EtF9Qtw9QNPJjiakXTwrB
DXb1xWvKrrxGdibxy232j1lf3EXk+acYcj+DMx758o83qZnu5N1DXn+GTcUj0IDz
AD9MoLGrSrrgbanUNygD2Ia+0zElVRdaOzlQwJ/1ocEjLkUm1JDStouRnUSxi8Kz
jnarGzCYKNEsgknmF27tyjPcPH8y4RI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org