Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/0948D8EE4ABC11EDBAB6B182F1222468.roa
File: 0948D8EE4ABC11EDBAB6B182F1222468.roa (raw, json)
Hash identifier: J6Km21jhg8epLEBYKvNSv3hVw0p/Xknhtr8HUAcTJAo=
Subject key identifier: 17:56:8E:0E:45:7B:AF:F8:5C:EA:B1:55:09:8F:8A:3E:F0:42:D3:AD
Certificate issuer: /CN=F3657687AF/serialNumber=6A3123D3DA8BBC118D3C0042F47993B316F64C77
Certificate serial: 0C
Authority key identifier: 6A:31:23:D3:DA:8B:BC:11:8D:3C:00:42:F4:79:93:B3:16:F6:4C:77
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ajEj09qLvBGNPABC9HmTsxb2THc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/0948D8EE4ABC11EDBAB6B182F1222468.roa
Signing time: Thu 13 Oct 2022 05:58:19 +0000
ROA not before: Thu 13 Oct 2022 05:58:15 +0000
ROA not after: Mon 13 Oct 2025 05:58:15 +0000
asID: 29286
IP address blocks: 102.215.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3657687AF/serialNumber=6A3123D3DA8BBC118D3C0042F47993B316F64C77
Validity
Not Before: Oct 13 05:58:15 2022 GMT
Not After : Oct 13 05:58:15 2025 GMT
Subject: CN=6347a8fb-f107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:50:ee:66:13:30:0c:fa:2b:6a:e5:18:51:
90:fb:52:4e:43:ac:34:94:bc:a0:66:a7:ac:08:72:
bd:b6:b6:f0:bf:e3:fd:d0:76:2e:ad:70:88:eb:47:
96:1b:07:4a:7e:67:70:b1:3c:9f:64:79:2c:3a:d3:
25:a9:80:dd:02:65:fd:fd:f6:e4:a9:94:d0:b6:af:
1d:dc:52:d3:f1:ba:c6:53:7b:c0:1b:f5:c0:3c:03:
84:5b:ac:2a:d1:ca:be:0e:59:45:2e:31:bd:71:77:
f2:8c:d5:5e:88:d9:26:2f:9d:3c:bd:26:67:7c:60:
23:b8:52:07:a2:fb:73:9e:68:e6:8d:80:97:85:fa:
ff:52:5d:50:94:c1:95:b4:6f:7b:66:39:b1:26:2e:
76:e8:6b:7c:3b:8e:aa:f4:36:5c:d8:0d:a1:73:84:
84:61:07:c9:f0:6b:8a:6c:9f:d7:24:18:6f:dd:2a:
f7:a8:43:f9:6e:ce:6d:d0:3d:b2:eb:74:27:f6:80:
47:d7:0a:8c:61:c6:cc:89:8c:58:e4:4a:fe:3a:b3:
67:34:a2:7c:f7:a6:ca:d7:a9:54:76:0a:bc:79:d0:
37:c7:68:e6:71:3e:68:5f:65:0e:03:77:6b:5c:76:
53:6f:c5:04:33:75:85:d1:a0:c6:73:fe:8c:7c:f8:
89:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:56:8E:0E:45:7B:AF:F8:5C:EA:B1:55:09:8F:8A:3E:F0:42:D3:AD
X509v3 Authority Key Identifier:
keyid:6A:31:23:D3:DA:8B:BC:11:8D:3C:00:42:F4:79:93:B3:16:F6:4C:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/ajEj09qLvBGNPABC9HmTsxb2THc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ajEj09qLvBGNPABC9HmTsxb2THc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/0948D8EE4ABC11EDBAB6B182F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.147.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e4:bb:b0:f6:1c:8f:1e:5d:16:8c:ad:c0:81:25:51:b1:f0:
c3:19:ee:f2:d1:40:38:77:ac:94:05:97:09:da:fb:58:6a:04:
de:a6:9a:46:8e:e2:92:1a:52:4a:c0:99:33:69:97:9b:82:ff:
2d:9d:43:1a:91:e2:60:03:d2:1d:25:7d:d1:41:49:81:0c:34:
a7:b7:d8:33:ff:67:0d:9a:1a:4f:a2:b9:6d:22:cb:eb:18:f0:
fb:7f:db:af:c6:65:9e:94:c4:36:60:75:44:53:ff:77:90:df:
89:c5:0d:6e:77:d5:16:8f:e8:2f:57:e7:b0:11:67:61:30:76:
ac:13:c0:dc:5f:fc:a1:ec:49:00:4c:cc:68:ce:f2:02:68:ec:
a3:d2:9b:97:9f:8f:2e:d5:dd:bc:b0:4c:67:87:99:93:7d:b7:
ed:24:6b:ad:3b:b0:b8:de:9f:44:2a:ee:e9:0d:4f:7c:da:3f:
2c:88:0f:c9:d0:ff:05:e2:2f:01:0a:72:fe:76:c2:51:6b:a3:
9e:31:94:17:8d:dc:fe:12:4e:76:cf:c9:15:8b:bf:24:2d:5f:
b3:23:de:fe:f8:55:1f:36:cf:5f:e6:fe:31:d6:ca:78:9a:cf:
cf:61:97:62:db:e0:f2:61:a2:2a:af:0c:d5:71:9c:d1:9a:d4:
ca:a4:fb:75
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBDDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY1
NzY4N0FGMTEwLwYDVQQFEyg2QTMxMjNEM0RBOEJCQzExOEQzQzAwNDJGNDc5OTNC
MzE2RjY0Qzc3MB4XDTIyMTAxMzA1NTgxNVoXDTI1MTAxMzA1NTgxNVowGDEWMBQG
A1UEAwwNNjM0N2E4ZmItZjEwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALm8UO5mEzAM+itq5RhRkPtSTkOsNJS8oGanrAhyvba28L/j/dB2Lq1wiOtH
lhsHSn5ncLE8n2R5LDrTJamA3QJl/f325KmU0LavHdxS0/G6xlN7wBv1wDwDhFus
KtHKvg5ZRS4xvXF38ozVXojZJi+dPL0mZ3xgI7hSB6L7c55o5o2Al4X6/1JdUJTB
lbRve2Y5sSYuduhrfDuOqvQ2XNgNoXOEhGEHyfBrimyf1yQYb90q96hD+W7ObdA9
sut0J/aAR9cKjGHGzImMWORK/jqzZzSifPemytepVHYKvHnQN8do5nE+aF9lDgN3
a1x2U2/FBDN1hdGgxnP+jHz4iZMCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQXVo4O
RXuv+FzqsVUJj4o+8ELTrTAfBgNVHSMEGDAWgBRqMSPT2ou8EY08AEL0eZOzFvZM
dzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTc2ODcvMENEQzI2M0M0NEVBMTFFRDg4MDFDNUQ1RjEyMjI0NjgvYWpFajA5
cUx2QkdOUEFCQzlIbVRzeGIyVEhjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvYWpFajA5cUx2QkdOUEFCQzlIbVRzeGIyVEhjLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTc2ODcvMENEQzI2M0M0NEVBMTFFRDg4MDFDNUQ1RjEy
MjI0NjgvMDk0OEQ4RUU0QUJDMTFFREJBQjZCMTgyRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbXkzANBgkqhkiG9w0BAQsF
AAOCAQEAfuS7sPYcjx5dFoytwIElUbHwwxnu8tFAOHeslAWXCdr7WGoE3qaaRo7i
khpSSsCZM2mXm4L/LZ1DGpHiYAPSHSV90UFJgQw0p7fYM/9nDZoaT6K5bSLL6xjw
+3/br8ZlnpTENmB1RFP/d5DficUNbnfVFo/oL1fnsBFnYTB2rBPA3F/8oexJAEzM
aM7yAmjso9Kbl5+PLtXdvLBMZ4eZk3237SRrrTuwuN6fRCru6Q1PfNo/LIgPydD/
BeIvAQpy/nbCUWujnjGUF43c/hJOds/JFYu/JC1fsyPe/vhVHzbPX+b+MdbKeJrP
z2GXYtvg8mGiKq8M1XGc0ZrUyqT7dQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org