Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DEA0434CC9D411EC80E055DEF1222468.roa
File: DEA0434CC9D411EC80E055DEF1222468.roa (raw, json)
Hash identifier: 3Sdz7rdEPKhLxSd+/4focoWXmjqnhLIjHiN67rN2d10=
Subject key identifier: 61:CA:EE:73:2C:6B:ED:A1:DC:B4:79:72:B7:14:58:F0:37:A1:CD:2E
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0444
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DEA0434CC9D411EC80E055DEF1222468.roa
Signing time: Mon 02 May 2022 05:01:05 +0000
ROA not before: Mon 02 May 2022 05:00:59 +0000
ROA not after: Tue 02 May 2023 05:00:59 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092 (0x444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 2 05:00:59 2022 GMT
Not After : May 2 05:00:59 2023 GMT
Subject: CN=626f6591-8565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:86:00:d4:d4:d0:a0:45:21:b1:98:b9:64:
a2:10:a7:1e:95:bf:a9:19:a4:ca:e0:e2:19:06:cf:
83:23:1a:25:23:3e:7b:e9:e3:e0:db:d7:4f:0e:43:
2f:a7:ba:9a:37:b1:72:3b:cb:09:c4:c6:89:9f:20:
47:e0:15:59:f9:41:fa:d7:e6:e2:cd:4a:d5:3d:4f:
3e:1b:e5:73:fc:18:d2:56:79:66:0d:f4:52:93:c8:
10:a5:4a:7a:d7:3d:2c:7a:5b:7a:03:2d:b4:29:fa:
cd:fb:2c:4f:d4:f0:cc:dd:7a:83:c5:10:81:39:40:
a8:92:3a:d3:22:2f:d6:d5:65:df:b2:1f:54:db:08:
09:a6:59:bb:fb:e3:39:27:75:21:6d:70:23:07:7d:
71:d0:01:ec:12:fb:b3:21:be:cc:22:fe:ec:bf:8e:
4c:7d:16:29:c0:4d:10:aa:b8:45:9a:ba:d4:5b:29:
e5:46:a8:2a:35:0b:dc:e8:78:fc:4b:eb:bb:d5:5d:
49:65:43:6c:d8:78:1c:de:11:f5:a8:88:ce:b5:74:
15:87:28:1a:e4:83:58:03:10:33:83:1a:58:0d:17:
f7:c5:cf:e6:d9:95:87:db:1a:36:04:48:e8:45:24:
16:fc:a7:06:0d:5a:7c:39:2a:68:8e:b0:61:eb:7b:
31:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CA:EE:73:2C:6B:ED:A1:DC:B4:79:72:B7:14:58:F0:37:A1:CD:2E
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DEA0434CC9D411EC80E055DEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:cd:4a:86:6a:f1:3f:f4:0e:a1:69:d0:4b:13:53:7c:89:9f:
98:b2:a5:37:cf:0c:11:52:90:39:82:6e:7f:a7:58:0b:b2:e9:
1e:bf:d0:13:98:1c:5e:a2:0e:1c:5f:f6:49:67:be:57:b1:ca:
92:16:e2:82:26:52:cd:1b:c7:af:fd:22:e1:4d:dc:9e:c5:5b:
3e:9e:30:aa:fa:d8:e9:a9:f0:60:a4:c9:cb:94:4d:01:bc:25:
0c:11:68:c1:5d:c3:fa:d5:20:e1:9c:fc:3e:72:15:af:55:60:
52:a0:d7:40:90:a6:30:da:e6:b7:42:a4:8b:28:53:e6:ab:c7:
e9:3d:dd:d9:f3:47:75:a2:8b:1b:01:8f:95:e5:a5:a3:f8:11:
f7:03:4d:e9:1d:ba:ec:8d:70:e4:f6:7b:4f:3c:7b:1a:53:37:
11:3c:6f:1b:10:f1:f2:9a:98:fd:82:59:a2:be:75:4e:72:bf:
33:a1:26:6f:4a:d6:5e:be:16:b2:48:dd:c6:b7:b5:08:9e:a2:
6f:47:13:8a:02:b0:e7:67:97:a7:b7:d0:3f:70:45:e8:3f:d4:
a0:0f:f2:19:eb:b1:5d:ff:7e:dd:db:4b:87:2b:e5:fb:8d:16:
07:74:71:97:ac:f1:58:60:88:2e:7a:b5:24:90:2c:e7:5e:92:
c6:12:da:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org