Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36665C1/A59EEB5CA6B711EB921BE22DF8AEA228/9319A76CA6BA11EBAA0FC931F8AEA228.roa
File: 9319A76CA6BA11EBAA0FC931F8AEA228.roa (raw, json)
Hash identifier: BMqpVWMRM2qV7gH1EpiYCRoVCVtMR15wCtxY433BR68=
Subject key identifier: 64:05:D8:5D:7F:36:07:99:FB:BC:84:A7:F0:64:EE:95:71:BC:8E:E0
Certificate issuer: /CN=F36665C1AF/serialNumber=726458AC5385500836B96DDFB828FF668E753551
Certificate serial: 02
Authority key identifier: 72:64:58:AC:53:85:50:08:36:B9:6D:DF:B8:28:FF:66:8E:75:35:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cmRYrFOFUAg2uW3fuCj_Zo51NVE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36665C1/A59EEB5CA6B711EB921BE22DF8AEA228/9319A76CA6BA11EBAA0FC931F8AEA228.roa
Signing time: Mon 26 Apr 2021 18:09:43 +0000
ROA not before: Mon 26 Apr 2021 18:09:38 +0000
ROA not after: Thu 31 Mar 2022 18:09:38 +0000
asID: 328771
IP address blocks: 102.222.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36665C1AF/serialNumber=726458AC5385500836B96DDFB828FF668E753551
Validity
Not Before: Apr 26 18:09:38 2021 GMT
Not After : Mar 31 18:09:38 2022 GMT
Subject: CN=608701e7-ab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:48:83:33:03:3d:17:3b:c6:26:63:62:6c:
69:75:88:4a:c3:8c:a4:1f:f9:47:3e:3c:d3:55:be:
7b:19:66:3d:d4:8b:83:2b:2f:5c:d8:c0:7a:79:fc:
fb:11:c4:21:86:52:04:c2:2b:c5:c2:5c:3d:77:94:
c0:04:89:ff:53:34:76:66:4b:78:77:4f:40:f2:c0:
9c:b7:01:b8:18:2f:08:d4:ac:64:1b:1c:91:21:fd:
76:58:d4:12:4e:57:a1:10:93:99:e5:75:b1:ce:09:
46:bb:15:b7:5b:74:20:3a:a0:76:2d:a3:3c:05:38:
81:35:a4:c8:18:30:4e:06:22:ce:01:8d:dd:a7:0c:
fe:ec:ab:da:72:54:8b:3f:ab:75:9e:3d:29:a0:54:
a5:56:87:e0:41:bc:b4:72:c3:17:46:7b:70:3d:0d:
b0:2b:ad:8d:ef:d7:93:67:50:fe:47:66:fd:b3:1f:
dd:88:1f:ea:f7:8c:f3:1b:4d:6c:c2:fc:0c:57:a1:
34:53:c7:48:78:19:cc:4a:90:bf:a9:90:c2:6f:7e:
00:08:b4:57:83:47:46:fd:b6:0b:75:5c:7f:b8:d0:
08:a0:75:cb:13:2d:38:1d:56:58:fa:c0:60:67:c6:
1a:99:24:48:c5:cc:e2:65:ab:0b:91:9c:6f:58:09:
98:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:05:D8:5D:7F:36:07:99:FB:BC:84:A7:F0:64:EE:95:71:BC:8E:E0
X509v3 Authority Key Identifier:
keyid:72:64:58:AC:53:85:50:08:36:B9:6D:DF:B8:28:FF:66:8E:75:35:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36665C1/A59EEB5CA6B711EB921BE22DF8AEA228/cmRYrFOFUAg2uW3fuCj_Zo51NVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cmRYrFOFUAg2uW3fuCj_Zo51NVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36665C1/A59EEB5CA6B711EB921BE22DF8AEA228/9319A76CA6BA11EBAA0FC931F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.60.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e4:c8:21:03:3a:5c:44:85:6c:7a:d2:07:9a:ff:23:4d:69:
99:bc:16:00:e7:90:64:b4:79:f8:6d:38:cc:be:58:56:54:b0:
72:61:e9:ce:7f:6e:b0:02:c9:0c:6a:08:21:a0:1a:4b:41:64:
d0:96:db:6c:d6:e5:59:58:cb:08:b2:89:8f:a1:34:e0:2d:dd:
63:d1:e2:f5:5c:73:ff:7b:6a:dc:a2:73:2d:e0:3c:a8:2f:9a:
f6:57:8b:32:63:90:96:1d:e4:7d:03:c6:5e:ca:a6:5b:f9:50:
88:48:eb:05:a4:92:96:09:df:47:9b:e7:b8:c4:8d:fa:26:1d:
58:33:cb:1a:e6:ee:8b:98:28:5e:3b:62:40:29:ad:da:73:76:
60:2d:07:13:fc:02:3b:d7:20:81:af:5b:ab:b6:1c:c7:f4:82:
96:fd:fa:c9:cd:98:d3:f2:f8:a1:22:cc:87:4d:79:99:bd:4f:
a5:c0:eb:19:9f:09:25:8b:47:ed:53:fb:f9:d7:51:14:8c:bc:
f7:52:b6:88:e3:bf:19:36:8d:86:b5:5a:95:6c:32:7d:55:46:
49:91:15:28:ef:6b:a9:af:b7:e9:7b:56:f9:b1:80:90:99:a1:
dd:35:ff:d6:ec:b6:f1:db:7f:38:f3:45:e8:46:7d:4b:c9:60:
99:75:d8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org