Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/026CCB3E2E4C11EDB59FF8B8F1222468.roa
File: 026CCB3E2E4C11EDB59FF8B8F1222468.roa (raw, json)
Hash identifier: lLoYR0bz4DGpnFPpqkaV8iemUNw5h2zaI8sFj6Tbt9c=
Subject key identifier: A2:25:D0:F4:12:A4:E6:AD:92:B5:DD:B5:9F:8A:10:F6:52:90:29:BA
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 06AE
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/026CCB3E2E4C11EDB59FF8B8F1222468.roa
Signing time: Wed 07 Sep 2022 01:25:51 +0000
ROA not before: Wed 07 Sep 2022 01:25:45 +0000
ROA not after: Thu 07 Sep 2023 01:25:45 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1710 (0x6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Sep 7 01:25:45 2022 GMT
Not After : Sep 7 01:25:45 2023 GMT
Subject: CN=6317f31f-24ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:b9:7c:85:51:00:69:10:98:06:56:ab:10:
2a:95:d8:71:fa:c6:71:29:ab:a6:ad:1f:a1:42:83:
c1:c5:20:06:cc:03:44:5a:cb:67:22:de:67:e1:ca:
5f:b0:5b:a9:7f:7d:9e:b9:b4:fb:bf:9d:63:08:da:
89:4d:e4:27:f0:ed:84:c5:f4:a1:fc:3a:96:cb:cf:
96:5b:c8:ba:08:cd:d3:73:2e:ef:c7:8d:f5:35:f9:
20:01:cd:26:6f:60:d3:26:a5:a8:97:7e:4b:b9:87:
33:44:c5:a0:14:f2:29:5f:e2:f6:f3:ae:09:34:1c:
74:16:11:fe:e3:09:bd:d2:7f:6e:58:b7:32:41:10:
38:04:06:59:42:27:92:db:8b:f9:9d:cf:50:d5:ad:
3c:a5:ea:90:7f:a0:54:8c:72:6f:dc:ae:3e:44:6e:
8a:e5:64:bb:6a:5f:fe:64:cf:ef:70:66:66:5d:fb:
43:0f:b8:8b:98:fa:d4:b3:7c:89:4b:ba:f1:ac:b5:
29:58:89:13:96:c8:55:cb:e2:8e:4b:00:82:08:6c:
68:aa:86:e2:39:05:cd:b7:ae:d1:78:6f:27:87:39:
10:f7:39:97:a5:f9:84:f6:72:88:4d:25:07:8b:a0:
f5:34:bb:92:65:cc:a4:ce:b6:88:79:5c:9d:ef:f8:
3f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:25:D0:F4:12:A4:E6:AD:92:B5:DD:B5:9F:8A:10:F6:52:90:29:BA
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/026CCB3E2E4C11EDB59FF8B8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
6e:aa:e3:96:81:1d:20:4d:9f:41:25:8e:97:5e:f7:be:5e:b3:
71:ca:dd:77:a5:4a:73:0a:9f:6a:e3:dc:07:5c:00:f7:2b:c5:
ac:e8:87:af:40:96:37:78:e6:2e:24:fa:8b:15:0c:f4:5e:32:
31:0c:e4:b0:47:4b:be:92:86:9f:ef:e1:bb:e7:ab:e1:44:71:
cb:f1:f9:d9:27:ad:61:ea:5a:1c:b8:86:8d:ff:32:86:7d:db:
ef:d2:61:73:57:0d:47:28:83:05:a6:a6:b3:6f:8a:da:5b:48:
47:da:25:82:b9:07:28:eb:b2:cd:8b:bb:3b:1c:b8:fc:a2:cb:
b6:88:87:1b:5f:90:f6:0c:84:7b:37:a1:54:f6:a4:3f:a2:9c:
1d:f3:74:72:da:b8:ef:63:18:be:b3:78:3e:15:84:ec:5b:ed:
31:9c:b6:5e:af:9d:c7:1f:87:81:94:d2:d3:ac:88:c2:2d:b8:
4d:1e:e2:ad:9d:52:f2:e5:b7:ba:c9:42:03:65:b3:be:26:d8:
1e:c7:32:44:33:ee:0a:26:e1:97:b4:09:cb:69:85:ea:54:48:
0a:52:b1:94:a4:d6:65:b0:00:90:c9:94:1b:23:95:1b:f0:b2:
1f:a2:1d:78:c7:2f:3f:9b:21:18:a2:56:fd:dc:09:c0:e1:38:
12:46:64:94
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBq4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjA5MDcwMTI1NDVaFw0yMzA5MDcwMTI1NDVaMBgxFjAU
BgNVBAMMDTYzMTdmMzFmLTI0ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCe27l8hVEAaRCYBlarECqV2HH6xnEpq6atH6FCg8HFIAbMA0Ray2ci3mfh
yl+wW6l/fZ65tPu/nWMI2olN5Cfw7YTF9KH8OpbLz5ZbyLoIzdNzLu/HjfU1+SAB
zSZvYNMmpaiXfku5hzNExaAU8ilf4vbzrgk0HHQWEf7jCb3Sf25YtzJBEDgEBllC
J5Lbi/mdz1DVrTyl6pB/oFSMcm/crj5EborlZLtqX/5kz+9wZmZd+0MPuIuY+tSz
fIlLuvGstSlYiROWyFXL4o5LAIIIbGiqhuI5Bc23rtF4byeHORD3OZel+YT2cohN
JQeLoPU0u5JlzKTOtoh5XJ3v+D8nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoiXQ
9BKk5q2Std21n4oQ9lKQKbowHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFLzAyNkNDQjNFMkU0QzExRURCNTlGRjhCOEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBAG6q45aBHSBNn0Eljpde975es3HK3XelSnMKn2rj3AdcAPcrxazo
h69Aljd45i4k+osVDPReMjEM5LBHS76Shp/v4bvnq+FEccvx+dknrWHqWhy4ho3/
MoZ92+/SYXNXDUcogwWmprNvitpbSEfaJYK5Byjrss2LuzscuPyiy7aIhxtfkPYM
hHs3oVT2pD+inB3zdHLauO9jGL6zeD4VhOxb7TGctl6vnccfh4GU0tOsiMItuE0e
4q2dUvLlt7rJQgNls74m2B7HMkQz7gom4Ze0CctphepUSApSsZSk1mWwAJDJlBsj
lRvwsh+iHXjHLz+bIRiiVv3cCcDhOBJGZJQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org