Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B0940/432814BE289111EDA7771097F1222468/7E5B1D4C289111ED9717C897F1222468.roa
File: 7E5B1D4C289111ED9717C897F1222468.roa (raw, json)
Hash identifier: CIj7Y1UV5PA2pbJtKZ5DjHzYp8F+mplqnhv5D2/dBYM=
Subject key identifier: 4D:B3:F4:19:71:61:2D:E9:A4:E0:76:F1:55:40:79:C9:86:58:57:F3
Certificate issuer: /CN=F36B0940AF/serialNumber=88612E6579E71244CB57203DB8D84DB231066694
Certificate serial: 02
Authority key identifier: 88:61:2E:65:79:E7:12:44:CB:57:20:3D:B8:D8:4D:B2:31:06:66:94
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iGEuZXnnEkTLVyA9uNhNsjEGZpQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B0940/432814BE289111EDA7771097F1222468/7E5B1D4C289111ED9717C897F1222468.roa
Signing time: Tue 30 Aug 2022 18:28:07 +0000
ROA not before: Tue 30 Aug 2022 18:28:04 +0000
ROA not after: Sun 29 Aug 2032 18:28:04 +0000
asID: 328382
IP address blocks: 102.130.60.0/22 maxlen: 22
2c0f:eb70::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B0940AF/serialNumber=88612E6579E71244CB57203DB8D84DB231066694
Validity
Not Before: Aug 30 18:28:04 2022 GMT
Not After : Aug 29 18:28:04 2032 GMT
Subject: CN=630e56b7-0e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:94:b8:e7:81:a5:2b:47:94:9c:7c:7a:ae:
cc:b8:b7:f2:fb:52:a1:39:f4:d1:c4:7b:60:e6:d3:
3c:cd:96:59:84:94:aa:5f:4d:e2:90:64:22:4a:99:
93:c8:c5:b4:56:97:8c:1f:fe:08:d9:66:b6:a0:86:
d3:48:2d:7c:e1:f1:4c:f5:17:2f:e5:b3:62:2c:6a:
aa:d8:42:ce:be:70:47:12:90:b5:6f:3f:ae:b4:a4:
1d:d5:24:29:be:2b:fc:61:a0:2d:05:49:ed:f8:1c:
67:b4:82:e0:ce:cc:50:1c:36:80:68:de:35:78:f7:
fe:38:6e:5d:4c:d5:a4:8f:4d:b5:ec:66:c6:5b:a5:
32:31:f4:72:c7:06:bd:f6:66:38:7b:56:f4:76:ad:
e3:93:9d:46:ab:91:e1:c6:0c:c6:32:6e:1e:3f:fa:
17:c4:0f:14:30:80:42:75:60:6c:c5:1b:64:e9:0a:
9d:e5:d4:b6:53:22:71:72:87:26:3f:62:fa:59:e4:
d8:df:9e:f8:87:07:52:7f:08:4f:9a:7a:a9:1b:cb:
ff:93:5c:3d:e3:97:bb:b5:b2:7e:3d:f8:4a:4c:8d:
d5:4d:67:64:a6:47:80:ab:88:f3:5a:e3:f4:a0:46:
a5:3c:c8:86:ae:9f:76:fe:cf:36:c7:95:50:8c:ec:
0c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B3:F4:19:71:61:2D:E9:A4:E0:76:F1:55:40:79:C9:86:58:57:F3
X509v3 Authority Key Identifier:
keyid:88:61:2E:65:79:E7:12:44:CB:57:20:3D:B8:D8:4D:B2:31:06:66:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B0940/432814BE289111EDA7771097F1222468/iGEuZXnnEkTLVyA9uNhNsjEGZpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iGEuZXnnEkTLVyA9uNhNsjEGZpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B0940/432814BE289111EDA7771097F1222468/7E5B1D4C289111ED9717C897F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.130.60.0/22
IPv6:
2c0f:eb70::/32
Signature Algorithm: sha256WithRSAEncryption
b1:c3:3c:50:dc:48:fa:ff:a0:58:70:32:e7:64:13:fb:24:4c:
ed:5d:c6:72:64:15:f6:38:0a:71:62:89:2a:89:26:13:99:5b:
42:35:4d:5d:8b:48:98:97:ef:cb:fa:a3:2d:2d:d1:b9:9a:d2:
de:31:15:20:6d:d8:61:a5:f5:ca:2d:d5:1e:96:60:71:82:87:
79:a0:e6:f2:d3:ac:a5:0a:1d:3e:8e:20:6b:fb:b1:a6:27:17:
38:d9:bf:f7:fd:58:1d:ce:93:cf:ac:24:f8:18:e1:6d:46:0c:
54:f6:fb:01:7f:f1:69:18:94:7f:e1:47:86:35:b9:a2:66:6b:
a8:a6:fc:47:c1:de:f0:f8:84:cc:a0:01:10:6b:07:45:62:75:
34:7d:ff:46:04:24:2d:37:41:88:cb:fc:19:ab:d2:04:da:50:
86:d4:24:9a:54:98:bf:63:9e:54:3b:a2:1d:a2:80:18:fc:aa:
82:ab:da:77:d3:b7:19:46:f7:56:2d:fd:6a:03:16:5a:34:0d:
c5:e8:a9:98:96:22:95:f3:3f:4c:0c:77:f2:af:45:07:c1:d4:
95:eb:62:a6:c9:12:f1:9c:a9:b9:01:d2:44:94:aa:18:06:22:
a7:6b:17:aa:83:86:05:3f:80:15:fb:72:1f:7f:fb:03:3c:da:
80:c6:5b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org