Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EB9C9B54DB0E11ECBDCB2D89F1222468.roa
File: EB9C9B54DB0E11ECBDCB2D89F1222468.roa (raw, json)
Hash identifier: pSW3TL8WjLGiN+8h+2lwhmN+rmwKtcIS76j6kqCzBNw=
Subject key identifier: BB:BE:CC:8A:84:A7:1B:F0:FF:78:48:29:0D:4D:D9:67:77:E4:25:91
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 04D8
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EB9C9B54DB0E11ECBDCB2D89F1222468.roa
Signing time: Tue 24 May 2022 03:09:27 +0000
ROA not before: Tue 24 May 2022 03:09:23 +0000
ROA not after: Wed 24 May 2023 03:09:23 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1240 (0x4d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 24 03:09:23 2022 GMT
Not After : May 24 03:09:23 2023 GMT
Subject: CN=628c4c67-a0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:cd:66:ae:15:7a:48:f2:44:f2:68:d0:67:
38:9e:a0:a7:b9:0f:26:c9:b1:56:e7:be:ed:1e:47:
f7:a0:52:30:b9:c6:16:0f:21:07:03:b8:09:3e:53:
99:78:d3:fe:3c:46:1d:fe:4f:e6:df:86:0c:db:3c:
de:0e:8b:f7:2f:42:4f:ec:d1:ea:e9:50:b4:e7:43:
7d:a9:fe:22:9c:f3:17:cd:78:b2:4c:fc:e6:30:51:
4b:9e:94:1c:c4:0e:2b:dc:8c:e7:09:a3:08:01:5c:
e7:db:e2:f6:1a:a4:e0:9f:c1:33:8b:8e:aa:a8:83:
fa:65:b6:db:a1:7c:40:09:c4:32:0c:4c:90:ca:21:
9a:ce:48:22:da:c3:a9:d2:f2:86:69:31:04:e5:42:
1c:25:84:d1:cf:b0:1c:13:f9:5f:1b:80:21:0f:f7:
10:fd:72:39:71:c0:e9:cc:db:d0:74:90:9b:34:47:
5a:0a:5d:12:70:4a:b2:9d:a0:bc:98:5f:d7:75:c1:
70:8e:8d:5a:d7:f1:3e:b9:69:7b:a4:88:91:45:aa:
e5:c5:ee:d3:b7:31:3a:49:7b:8c:ab:6e:64:1f:33:
35:a1:71:f3:cb:48:89:56:b1:3c:18:9f:52:a9:2e:
11:1b:bf:a9:cd:41:3e:13:d8:30:7e:db:fe:cb:ca:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BE:CC:8A:84:A7:1B:F0:FF:78:48:29:0D:4D:D9:67:77:E4:25:91
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EB9C9B54DB0E11ECBDCB2D89F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:28:4f:c9:a3:31:f9:df:91:e1:a3:96:9d:56:36:53:7b:75:
62:29:ec:ad:e5:52:2c:5c:b5:1e:53:03:81:60:8d:2e:99:52:
1d:76:f4:73:48:0f:ed:c8:0a:dc:1a:71:6e:57:7a:3e:c8:e7:
58:4a:ff:24:63:23:20:86:e5:c5:11:c3:48:71:e8:da:ee:33:
ac:56:1c:4e:c6:8c:1a:63:8c:3a:75:9c:28:ca:35:cf:38:cb:
94:e3:cd:28:3c:4c:5a:ff:6f:e1:41:d4:f2:1e:02:13:00:c3:
6d:21:4a:55:7e:b9:73:d9:6b:17:01:3a:38:5c:cf:fc:18:16:
41:8f:28:9c:10:35:b7:b9:a8:48:9d:05:c4:b7:f0:ab:91:15:
21:4c:aa:3b:5d:86:b6:82:aa:17:9c:5f:2e:88:f0:74:a4:c1:
1c:ee:d0:4e:23:2e:ae:e0:10:cd:01:38:ab:61:67:e7:56:66:
db:84:7d:54:45:00:0d:3c:45:85:2a:57:0b:a0:ab:7f:78:60:
ee:47:6b:20:92:a6:6c:38:91:11:e7:7d:74:60:ec:18:28:69:
8c:14:aa:bd:a7:e0:d0:f0:4f:e6:ae:5e:fe:21:e9:7f:28:c5:
e9:14:6e:2e:31:1b:6a:fa:a6:7b:27:9a:99:1e:17:f0:1d:59:
28:30:77:ea
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjA1MjQwMzA5MjNaFw0yMzA1MjQwMzA5MjNaMBgxFjAU
BgNVBAMMDTYyOGM0YzY3LWEwZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDF0c1mrhV6SPJE8mjQZzieoKe5DybJsVbnvu0eR/egUjC5xhYPIQcDuAk+
U5l40/48Rh3+T+bfhgzbPN4Oi/cvQk/s0erpULTnQ32p/iKc8xfNeLJM/OYwUUue
lBzEDivcjOcJowgBXOfb4vYapOCfwTOLjqqog/plttuhfEAJxDIMTJDKIZrOSCLa
w6nS8oZpMQTlQhwlhNHPsBwT+V8bgCEP9xD9cjlxwOnM29B0kJs0R1oKXRJwSrKd
oLyYX9d1wXCOjVrX8T65aXukiJFFquXF7tO3MTpJe4yrbmQfMzWhcfPLSIlWsTwY
n1KpLhEbv6nNQT4T2DB+2/7Lym5VAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUu77M
ioSnG/D/eEgpDU3ZZ3fkJZEwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFL0VCOUM5QjU0REIwRTExRUNCRENCMkQ4OUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2mEwDQYJKoZIhvcNAQEL
BQADggEBALMoT8mjMfnfkeGjlp1WNlN7dWIp7K3lUixctR5TA4FgjS6ZUh129HNI
D+3ICtwacW5Xej7I51hK/yRjIyCG5cURw0hx6NruM6xWHE7GjBpjjDp1nCjKNc84
y5TjzSg8TFr/b+FB1PIeAhMAw20hSlV+uXPZaxcBOjhcz/wYFkGPKJwQNbe5qEid
BcS38KuRFSFMqjtdhraCqhecXy6I8HSkwRzu0E4jLq7gEM0BOKthZ+dWZtuEfVRF
AA08RYUqVwugq394YO5HayCSpmw4kRHnfXRg7BgoaYwUqr2n4NDwT+auXv4h6X8o
xekUbi4xG2r6pnsnmpkeF/AdWSgwd+o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org