Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EB0A67F23A3611ED98E3BCE9F1222468.roa
File: EB0A67F23A3611ED98E3BCE9F1222468.roa (raw, json)
Hash identifier: NDWIm1NG5VEZgu1NULYbUNDJahrdLducpczgHB+P4Gs=
Subject key identifier: 22:BE:CE:E4:AA:68:79:91:B5:1E:DF:27:70:1F:6E:D8:A5:CE:57:10
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0717
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EB0A67F23A3611ED98E3BCE9F1222468.roa
Signing time: Thu 22 Sep 2022 05:25:06 +0000
ROA not before: Thu 22 Sep 2022 05:25:01 +0000
ROA not after: Fri 22 Sep 2023 05:25:01 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1815 (0x717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Sep 22 05:25:01 2022 GMT
Not After : Sep 22 05:25:01 2023 GMT
Subject: CN=632bf1b2-12e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:28:b3:51:fe:df:b4:28:4f:e1:f1:ba:c5:6b:
e6:81:50:5a:12:5d:c8:d1:69:aa:5e:38:b5:ad:54:
4a:f2:b5:a5:6c:dc:ec:e9:d0:1f:d7:70:d2:f3:91:
ae:b6:07:88:da:cb:10:49:8a:f3:ac:d2:2e:1b:ec:
ff:9d:3f:2a:5e:de:f4:fd:50:b1:cf:71:b3:7a:a7:
6e:0f:1b:71:07:dc:e6:c3:8d:e2:cb:2a:ce:6f:ad:
8c:f1:ea:66:b8:6a:bd:4b:90:f7:47:0f:6b:95:57:
e3:1b:48:de:b7:c5:1f:77:48:7d:7b:06:37:ec:c9:
e3:62:32:8f:60:31:22:fb:3f:96:1d:64:09:a3:8b:
f6:7c:2a:48:dd:33:22:97:bb:65:24:02:18:67:d7:
44:60:6d:da:10:27:17:82:7f:1c:28:5a:3b:fe:ec:
91:5a:90:73:ad:c2:30:72:91:8d:26:39:28:6e:f7:
e4:36:84:70:27:de:45:de:e0:77:a2:8d:0a:3d:c4:
f7:c5:af:45:5e:ed:3e:c8:10:49:e3:8a:f9:db:fb:
20:77:39:12:2a:5a:d4:ef:c0:a5:c4:9d:58:50:ba:
d5:ed:06:b7:4b:76:88:63:dc:67:1e:0b:4c:5f:cf:
38:68:39:16:76:12:c6:d1:a3:2b:90:75:48:d8:90:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BE:CE:E4:AA:68:79:91:B5:1E:DF:27:70:1F:6E:D8:A5:CE:57:10
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EB0A67F23A3611ED98E3BCE9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e6:bb:91:3d:c7:c3:0d:96:1d:6a:80:0c:b0:8f:a3:25:23:
01:c0:26:b7:2e:85:db:15:d2:52:d2:d3:69:3c:a0:18:4c:78:
ec:35:6d:44:e7:2a:c5:22:18:9c:e6:ce:48:6a:38:d7:47:d3:
02:71:ae:b6:76:a4:77:b6:26:cb:cb:82:3b:8c:4a:9e:fc:be:
1a:0d:ef:00:6a:50:f3:d9:e1:88:5b:64:4e:17:3e:fe:c6:07:
42:a3:39:5a:fd:7a:64:05:4e:ef:97:7b:45:c5:05:3c:1c:5c:
bf:f1:04:ac:5d:1b:5d:fb:d0:a1:1f:9d:55:50:00:02:8a:49:
6e:2e:a0:92:e0:6b:c8:e1:c9:ab:6c:13:19:71:91:53:2c:14:
c9:b2:3f:e8:ec:3c:e9:31:df:54:a8:dc:0b:1e:d1:0b:7d:1f:
4d:d6:34:56:76:7c:c4:3c:f9:25:0d:c2:62:ce:bd:de:60:fc:
20:d6:36:96:43:7a:25:22:b7:73:a5:04:fd:bb:f1:57:93:52:
bb:d3:f3:68:56:33:74:da:88:a7:ca:92:8f:1b:6b:2a:cb:4a:
65:c1:75:93:cd:b7:b1:e2:3d:48:19:c1:8b:42:f0:af:4e:3c:
e8:35:81:2d:7c:8d:4d:ca:24:54:3d:36:c6:be:36:10:23:b8:
5e:22:81:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org