Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FC20A9E8BA4811EC9A09547C5A40D577.roa
File: FC20A9E8BA4811EC9A09547C5A40D577.roa (raw, json)
Hash identifier: dUOHx2bJNTn+3KEXk5xkGyE1dR8GIZpdKewA5ua7yrA=
Subject key identifier: 18:74:FD:2E:29:D3:90:B8:18:37:14:61:DD:88:19:82:EB:74:3F:F0
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 03C1
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FC20A9E8BA4811EC9A09547C5A40D577.roa
Signing time: Tue 12 Apr 2022 10:11:57 +0000
ROA not before: Tue 12 Apr 2022 10:11:53 +0000
ROA not after: Wed 12 Apr 2023 10:11:53 +0000
asID: 3970
IP address blocks: 102.218.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 961 (0x3c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 12 10:11:53 2022 GMT
Not After : Apr 12 10:11:53 2023 GMT
Subject: CN=6255506d-d562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:0c:70:9f:8f:7c:0b:ea:8c:46:ab:36:99:
1a:76:b0:50:66:bd:56:be:4f:f4:50:90:50:d5:f5:
12:f2:29:a1:a2:19:5b:da:79:2f:52:a3:7e:9e:a5:
25:2a:97:31:dd:80:95:92:4f:85:8e:2d:c1:01:ef:
fa:79:ef:32:09:f2:72:96:68:da:fa:18:07:44:35:
f0:de:ce:dc:d3:26:6b:dd:c4:90:6d:59:94:8a:d0:
35:84:72:65:06:b7:e6:3e:0d:d3:f1:c4:38:1d:17:
f9:6e:9c:22:51:bb:1e:0c:e6:42:bc:0a:7a:f4:30:
f8:8c:7f:82:76:6d:ba:ea:d3:dd:89:73:a8:95:dc:
a9:4c:cd:ba:1c:0c:b8:27:46:ed:17:bd:47:8e:e6:
69:29:50:28:8f:8e:e6:42:ad:8b:5a:87:18:38:76:
2d:c5:45:f4:64:20:0e:63:a5:83:ac:cd:34:66:c8:
56:39:ba:40:3f:8d:c4:b6:a6:3d:79:a9:79:3b:f5:
8c:c6:b8:17:e5:40:40:3a:84:92:8c:e9:6e:5c:0e:
2d:16:40:57:82:18:0e:e5:f6:f5:96:4c:e0:7e:6c:
9c:fa:9d:89:82:a1:51:c3:36:27:c2:a4:b4:5a:e6:
7b:5d:4e:a7:9a:74:c4:12:97:3e:09:b2:70:d8:f6:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:74:FD:2E:29:D3:90:B8:18:37:14:61:DD:88:19:82:EB:74:3F:F0
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FC20A9E8BA4811EC9A09547C5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.97.0/24
Signature Algorithm: sha256WithRSAEncryption
94:3f:fc:1c:f4:e5:37:4c:24:4d:5c:48:df:10:4a:75:e9:66:
07:7c:c4:0d:5c:c0:62:65:c9:fa:f2:63:8c:67:b6:66:4e:56:
ba:47:af:8a:74:81:cb:71:fc:8c:08:14:fb:ba:e4:81:c2:07:
9f:29:0b:27:9a:df:79:45:07:54:f5:13:ca:28:35:38:96:60:
c1:09:a4:6e:dc:46:3c:15:8d:0e:06:25:60:83:b8:87:57:74:
d1:ff:75:2f:59:31:77:02:d9:95:a3:1a:da:59:bf:8c:68:42:
b6:aa:52:a8:74:71:20:fb:b1:10:c6:61:12:54:ac:74:cb:7b:
9e:57:27:64:ee:55:ab:9e:76:9d:4e:19:de:3a:e4:8e:73:24:
0d:c9:3a:a4:05:54:7c:2c:50:2d:75:5d:b4:ca:2d:9d:fd:c5:
79:ba:91:ad:f3:2d:7d:19:db:63:fa:40:87:77:93:f5:30:9e:
bb:dd:8f:8f:3b:53:d2:82:66:92:c9:75:a3:de:b9:67:73:de:
da:21:f1:d8:8a:ee:2a:7a:87:65:6d:fd:a8:4e:36:d3:77:70:
72:83:f4:a2:1f:b7:60:bc:df:74:3b:aa:71:c7:57:cd:2e:19:
7f:f4:ae:0f:10:d6:4d:73:ee:4c:93:36:af:e7:a9:51:b0:57:
cf:a1:a5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org