Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/A4D1283044EE11EDA43AB4E0F1222468.roa
File: A4D1283044EE11EDA43AB4E0F1222468.roa (raw, json)
Hash identifier: c8uvClIvVYoG88laCw+Y77GQzUlS4/VxnDmW87O6u6o=
Subject key identifier: DC:58:98:45:59:CC:0E:8C:14:9D:AC:8B:A7:8D:49:42:71:50:C6:15
Certificate issuer: /CN=F3657687AF/serialNumber=6A3123D3DA8BBC118D3C0042F47993B316F64C77
Certificate serial: 02
Authority key identifier: 6A:31:23:D3:DA:8B:BC:11:8D:3C:00:42:F4:79:93:B3:16:F6:4C:77
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ajEj09qLvBGNPABC9HmTsxb2THc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/A4D1283044EE11EDA43AB4E0F1222468.roa
Signing time: Wed 05 Oct 2022 20:45:28 +0000
ROA not before: Wed 05 Oct 2022 20:45:24 +0000
ROA not after: Sat 05 Oct 2024 20:45:24 +0000
asID: 329073
IP address blocks: 102.215.144.0/22 maxlen: 22
2c0f:1e80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3657687AF/serialNumber=6A3123D3DA8BBC118D3C0042F47993B316F64C77
Validity
Not Before: Oct 5 20:45:24 2022 GMT
Not After : Oct 5 20:45:24 2024 GMT
Subject: CN=633dece7-935c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:1b:ce:8d:ca:ca:08:24:ec:1a:a4:42:30:
a1:0e:31:78:e8:fa:18:0b:a6:12:2b:0d:2d:ef:c3:
23:a6:87:5d:47:35:dc:5a:b8:46:be:46:57:00:24:
11:db:10:86:7d:f6:24:1b:8c:01:e8:31:5e:a7:16:
3d:1a:5d:9e:70:1c:04:c9:cf:5a:1e:bc:61:b7:e1:
26:e7:0f:39:98:ca:45:ef:20:e0:28:b4:f8:fd:37:
70:07:62:45:3c:0c:cc:5a:7f:32:16:1f:db:0f:54:
21:f7:82:d2:97:34:bd:8a:eb:b7:1a:09:38:94:b2:
d0:cb:78:4f:07:28:87:b3:70:52:aa:2b:f5:1c:94:
6f:cb:b3:0d:77:29:97:90:91:88:d4:2f:37:45:82:
b8:e2:f8:8b:c0:c0:3c:0e:3d:9b:2d:7d:55:ff:f5:
a4:95:17:67:ed:03:30:ff:1d:57:40:51:5f:73:cf:
6c:86:43:70:17:14:ef:51:00:75:64:3a:3d:9d:1f:
de:da:63:8f:f8:b4:f8:84:6e:9e:79:5c:c8:e0:e8:
d8:d3:e3:6d:15:94:54:90:8d:59:32:0e:66:85:00:
06:95:71:a8:6f:75:1e:cc:c4:99:70:3f:56:87:74:
62:6c:b8:02:0c:cd:61:b1:46:3b:a7:df:2e:0c:01:
23:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:58:98:45:59:CC:0E:8C:14:9D:AC:8B:A7:8D:49:42:71:50:C6:15
X509v3 Authority Key Identifier:
keyid:6A:31:23:D3:DA:8B:BC:11:8D:3C:00:42:F4:79:93:B3:16:F6:4C:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/ajEj09qLvBGNPABC9HmTsxb2THc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ajEj09qLvBGNPABC9HmTsxb2THc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/A4D1283044EE11EDA43AB4E0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.144.0/22
IPv6:
2c0f:1e80::/32
Signature Algorithm: sha256WithRSAEncryption
6f:2f:55:60:e3:08:79:a1:09:fc:85:09:67:8f:50:e6:7b:e0:
de:ab:86:65:96:99:87:21:b8:c7:2a:5e:18:1e:6b:71:84:12:
64:08:98:ee:a7:9a:ad:d6:f7:98:01:b9:ab:f1:bc:40:c9:56:
5f:90:0f:0e:01:a3:74:2e:b4:d2:91:f9:c0:89:0e:c2:f3:6f:
e0:9c:09:3b:0f:06:19:28:b5:eb:db:ab:e9:6a:c5:68:74:7b:
09:f6:b1:10:79:9b:ae:e2:01:18:66:4e:f7:dd:6e:c8:88:aa:
2b:95:51:fe:34:7a:4d:d1:d2:4a:6f:96:ef:30:83:76:5c:d5:
48:3d:eb:b9:92:12:4d:46:dd:43:83:5f:59:0d:d9:ed:fb:78:
11:da:46:01:f1:fd:76:a1:96:53:88:92:09:57:e3:ea:f0:36:
34:34:31:38:96:0e:2f:53:9a:38:96:ea:89:a3:02:12:0e:8f:
ff:e7:a2:71:01:14:a8:ce:c7:5e:18:bd:23:38:c4:57:d0:85:
37:86:95:50:79:47:38:e4:f4:3d:fd:ec:8e:29:2a:c1:ca:8a:
24:51:0f:c4:e0:83:91:52:4b:0b:39:9b:44:38:ce:6e:17:4a:
8c:7a:5d:86:df:18:45:7d:7c:c8:87:7f:20:d3:73:34:4c:bf:
a6:b5:8d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org