Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/D8F6A514DA3511EC8DCD63DAF1222468.roa
File: D8F6A514DA3511EC8DCD63DAF1222468.roa (raw, json)
Hash identifier: l8ir+mS7hacet7Yw52Geb06QLSIp5QGgofQrzDjpfdE=
Subject key identifier: D9:6F:3B:BF:9F:33:A3:7C:A2:9A:DE:2E:BF:B1:D1:0B:E5:9F:02:71
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 04CE
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/D8F6A514DA3511EC8DCD63DAF1222468.roa
Signing time: Mon 23 May 2022 01:15:35 +0000
ROA not before: Mon 23 May 2022 01:15:30 +0000
ROA not after: Tue 23 May 2023 01:15:30 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230 (0x4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 23 01:15:30 2022 GMT
Not After : May 23 01:15:30 2023 GMT
Subject: CN=628ae037-68eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:c3:c2:69:a9:7c:c9:04:b0:ab:71:82:14:
36:a7:ab:d4:13:20:97:53:e1:02:53:3e:42:ba:98:
e1:04:40:44:0b:5a:66:22:e5:52:62:4d:c7:f6:ab:
99:b5:d8:2b:06:94:0f:0b:6b:31:19:d9:07:7e:5e:
bd:65:72:91:6c:4d:3b:86:f8:4c:c3:84:83:1f:a6:
aa:28:e8:12:52:4d:f2:3a:42:c7:e0:77:e3:66:ed:
ce:3a:41:08:e3:bc:ce:09:45:c6:02:ef:f0:9b:f3:
12:09:bc:5e:cc:82:0e:dd:38:fa:48:62:a1:ee:12:
f8:2d:a2:96:ca:60:43:2b:4a:98:2b:eb:27:4c:64:
ad:cd:5b:38:8a:08:c6:8a:64:85:7a:d7:56:85:b0:
ea:b1:0d:8d:15:a0:aa:fc:8c:2f:8d:ca:c9:f3:c8:
47:9b:86:47:94:67:bc:d3:be:6e:8c:55:e2:3b:04:
fb:67:84:e1:62:ac:b3:be:da:5c:c1:d1:78:01:36:
47:6b:30:63:f9:b1:bd:76:d1:e9:ad:0f:3b:39:58:
27:9b:f1:4a:4d:09:33:10:0d:44:72:21:b5:13:84:
70:24:a8:e8:21:3d:b9:9f:cf:5e:45:a0:3f:de:c1:
0c:c6:70:19:59:de:89:19:77:31:e4:e1:3a:a2:6f:
f0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6F:3B:BF:9F:33:A3:7C:A2:9A:DE:2E:BF:B1:D1:0B:E5:9F:02:71
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/D8F6A514DA3511EC8DCD63DAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e4:65:85:f4:4d:fb:82:10:0f:dc:37:7d:5b:94:5f:b1:3f:
dd:87:80:33:1f:8d:d0:65:02:4e:5b:d0:2c:42:9c:7c:82:80:
0d:a5:c9:48:6e:39:20:d3:c0:e8:2d:ab:9d:3c:65:92:78:53:
a9:31:3e:72:02:d0:4a:0d:0b:d3:8d:5a:1f:2b:87:fc:5c:4c:
83:8d:6d:d4:16:2a:57:43:25:7d:f2:4e:35:d5:0d:46:4d:69:
5a:90:4f:82:dd:e2:8e:c2:bf:67:50:36:c4:95:e0:56:7a:1b:
43:58:74:2e:c7:19:c2:98:4c:fa:a3:1f:f9:b6:cf:01:95:99:
6a:a5:cd:bf:48:b1:bf:1f:55:be:07:6b:47:6f:65:ed:43:a1:
5b:21:a0:b3:f9:dd:00:ee:87:ba:6d:2a:c5:da:41:88:80:49:
e7:8f:ca:47:d0:4c:b0:b5:06:05:84:19:cc:8c:86:07:e3:3c:
f3:63:17:d1:29:40:e8:d6:2e:f5:33:a9:59:75:d2:83:83:cd:
e0:eb:16:0e:25:a9:ce:c5:00:4c:36:6e:f6:e9:ef:20:74:9b:
93:f5:99:7d:3e:e9:bf:26:51:e6:18:87:63:13:b7:ba:5e:7d:
63:7c:eb:63:1e:28:a6:e2:81:5d:1e:80:35:85:da:06:30:79:
5f:33:ae:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org