Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/BC16DA02231411EF8554F4DB7CDC24C2.roa
File: BC16DA02231411EF8554F4DB7CDC24C2.roa (raw, json)
Hash identifier: 3hzkIj5j6Rm4SHj+NHo9SsUBByvGiR5kyVgropjn1Kc=
Subject key identifier: 9D:85:F9:98:BC:8B:68:4A:5A:75:1F:77:8D:8F:73:3E:39:87:DF:25
Certificate issuer: /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial: 04
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/BC16DA02231411EF8554F4DB7CDC24C2.roa
Signing time: Wed 05 Jun 2024 08:22:23 +0000
ROA not before: Wed 05 Jun 2024 08:22:20 +0000
ROA not after: Mon 05 Jun 2034 08:22:20 +0000
asID: 329278
IP address blocks: 102.212.244.0/23 maxlen: 23
102.212.244.0/24 maxlen: 24
102.212.245.0/24 maxlen: 24
102.212.246.0/23 maxlen: 23
102.212.246.0/24 maxlen: 24
102.212.247.0/24 maxlen: 24
2c0f:4440::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Validity
Not Before: Jun 5 08:22:20 2024 GMT
Not After : Jun 5 08:22:20 2034 GMT
Subject: CN=6660203f-3497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:67:df:d7:0f:78:43:fa:62:65:fc:d6:27:
ca:c2:f9:e2:9b:55:97:a1:64:c6:af:9b:aa:47:c4:
47:3f:e1:70:3e:0e:06:e1:58:a8:23:50:d4:c6:b6:
66:63:cf:fc:b0:1a:bb:a6:a9:a8:b0:90:ed:40:39:
ea:97:2d:f2:79:b7:ac:96:0f:f2:8a:94:00:a5:70:
a8:70:c8:59:e8:c4:92:d6:99:00:b0:53:39:0c:6f:
1c:7c:c7:7b:ef:a4:b5:5c:f3:ae:af:72:22:fc:73:
2f:a9:05:6b:9a:c8:8e:88:48:72:02:48:75:22:f1:
0a:89:d1:83:f8:a6:a4:a5:d9:97:72:51:93:db:2b:
c2:1d:00:46:ac:77:07:86:64:c7:e5:cd:a3:3e:90:
cb:85:14:d5:b8:52:6c:ca:4f:a5:4c:49:ce:57:ba:
bc:14:0e:bb:05:6f:2a:4b:79:ff:cc:6a:a7:65:b9:
b3:2e:7c:d6:f8:95:a8:13:d4:1a:3c:c0:a6:54:86:
32:6f:9b:30:d0:de:9b:a9:84:93:b1:57:2d:9f:f8:
e2:7d:8b:ff:6c:12:99:2b:0a:3d:ed:65:d0:fd:15:
77:4d:bd:56:15:bc:ad:15:68:d1:4a:5c:c6:5b:4b:
76:08:4f:11:29:02:73:a4:18:68:4b:00:56:f3:2d:
89:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:85:F9:98:BC:8B:68:4A:5A:75:1F:77:8D:8F:73:3E:39:87:DF:25
X509v3 Authority Key Identifier:
keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/BC16DA02231411EF8554F4DB7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.244.0/22
IPv6:
2c0f:4440::/32
Signature Algorithm: sha256WithRSAEncryption
25:ab:17:0e:df:9a:22:4b:b0:76:03:cb:f2:03:93:e9:7f:c6:
6f:61:40:24:47:d2:a0:91:47:2a:9a:99:c1:29:f4:3b:d1:86:
26:98:02:a0:46:ed:5c:ed:3b:88:f5:be:e1:8c:9a:08:95:09:
9e:d0:c6:43:4c:d0:c0:4a:88:bf:d1:68:df:bb:6d:54:1e:49:
92:d5:06:d7:6e:d8:41:98:f9:76:da:3a:a7:22:69:dc:5f:33:
b6:c9:4b:55:cf:f6:16:b6:e9:93:0f:f4:e2:d3:1a:d8:fb:f8:
4e:a2:d4:b5:81:62:a1:76:50:d9:86:f1:9c:a0:38:f9:38:b1:
78:89:32:56:c7:af:4b:fd:31:ce:2a:e6:d8:9c:a7:38:70:26:
cb:11:a3:b9:f2:af:72:fe:25:af:00:80:b5:09:b6:01:83:67:
cc:93:a9:be:9a:c4:3e:0e:5d:9a:9e:fa:95:d7:0c:94:c9:1c:
57:40:23:10:30:b8:7f:83:a2:ef:13:42:45:c6:84:66:1f:0a:
4b:1b:63:08:d3:2d:2e:a6:c8:77:47:2d:36:ad:01:35:0a:c2:
90:5d:f4:cc:e5:52:6d:da:75:75:48:a6:8a:8b:31:ea:f9:c9:
f3:28:09:08:99:ea:21:01:b8:28:bd:07:6f:01:8f:85:90:a2:
11:3a:29:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 09:35:05 2024 by rpki-client on console.sobornost.net