Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/0CCFC46AD64E11EC9412F596F1222468.roa
File: 0CCFC46AD64E11EC9412F596F1222468.roa (raw, json)
Hash identifier: WeA2yIPx3ccB5HUfEQyrE7xQGgSAYK9PmCktAATcW+A=
Subject key identifier: 0A:3B:43:75:B0:AD:70:68:74:D4:C0:8D:6C:84:B5:9E:E4:DF:5C:94
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 04AE
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/0CCFC46AD64E11EC9412F596F1222468.roa
Signing time: Wed 18 May 2022 01:58:45 +0000
ROA not before: Wed 18 May 2022 01:58:41 +0000
ROA not after: Thu 18 May 2023 01:58:41 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198 (0x4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 18 01:58:41 2022 GMT
Not After : May 18 01:58:41 2023 GMT
Subject: CN=628452d5-62e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:7c:3b:62:72:ab:3b:95:47:a2:dc:1c:5b:
5f:09:e0:b0:1c:a1:e5:b6:92:90:2a:01:d7:e2:6d:
5e:85:d1:5a:93:8c:47:4b:4c:0b:82:1f:c1:b3:27:
b4:fc:1a:49:6f:2f:ea:c1:49:09:e8:7d:91:63:13:
7c:79:89:f6:a0:84:57:9c:51:ff:39:01:5a:6f:59:
f0:fd:83:45:bc:f8:a7:f0:ad:45:c2:ad:b7:f6:ea:
2a:6e:e7:57:a7:26:c2:81:67:b6:36:e9:03:f4:28:
5f:df:6b:d0:94:97:db:c5:af:ff:1f:f1:07:07:58:
a6:0e:3a:7f:a2:6f:36:61:74:27:42:b9:13:8c:5e:
bf:e2:9b:b1:b4:e1:82:c2:8f:44:bc:92:76:2e:37:
2e:f4:e9:24:f7:de:22:b2:01:fc:a1:a9:f6:ec:d3:
c9:d8:dc:58:a4:52:b4:d7:ab:28:9c:35:fa:95:c7:
a3:46:58:77:67:1c:9b:b0:5d:9b:df:22:76:50:be:
df:46:42:db:28:bc:a7:6a:30:0e:81:23:5b:29:53:
c3:d6:f6:1c:07:e5:24:32:26:a6:cb:c4:bf:13:c8:
d1:c1:54:23:72:98:78:4d:4c:42:af:01:0c:02:a6:
10:17:7b:d1:ca:fe:f3:4d:3e:60:12:0f:5c:c2:39:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3B:43:75:B0:AD:70:68:74:D4:C0:8D:6C:84:B5:9E:E4:DF:5C:94
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/0CCFC46AD64E11EC9412F596F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
b8:5d:a7:bf:73:81:81:09:2e:fc:be:97:3c:d3:c8:7e:46:9e:
b9:f8:f4:4b:15:30:f0:f8:a1:b2:91:d8:45:e3:46:07:f7:19:
48:ca:82:23:ad:9c:90:ff:23:26:d9:38:da:71:e9:b6:4d:c3:
9f:2c:18:7d:2b:5e:22:fe:06:29:cf:8a:0b:c2:50:90:c2:0a:
f9:6c:a1:e5:d0:52:0e:d6:b8:71:78:9f:eb:91:35:45:1d:56:
48:6f:f2:20:a6:7f:4d:a2:20:6e:b8:70:56:23:3e:dc:d7:9b:
2a:29:d8:3e:1c:48:b3:40:62:ae:15:c1:40:6b:2f:83:35:21:
c9:b6:d8:78:ff:c1:24:48:2d:63:7f:6b:9e:88:9d:de:84:44:
3c:dd:0e:8f:1d:49:fd:98:f5:da:91:d8:c1:2a:2c:94:4a:ad:
13:16:47:5f:d6:34:dc:2e:1e:23:ea:07:0f:c2:7f:73:71:ee:
30:c3:83:94:7e:b9:56:5c:ee:af:ca:49:a7:44:af:f0:05:74:
8a:8d:2f:c8:a6:dd:a8:f7:99:f9:73:78:2b:76:23:87:fc:13:
b9:e4:f0:59:3c:37:47:78:35:97:71:d8:71:7b:6c:18:bd:9e:
f5:99:fb:18:0d:be:49:c5:a5:b6:0e:ca:21:41:5f:14:e6:08:
2a:38:3f:1b
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBK4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjA1MTgwMTU4NDFaFw0yMzA1MTgwMTU4NDFaMBgxFjAU
BgNVBAMMDTYyODQ1MmQ1LTYyZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkR3w7YnKrO5VHotwcW18J4LAcoeW2kpAqAdfibV6F0VqTjEdLTAuCH8Gz
J7T8GklvL+rBSQnofZFjE3x5ifaghFecUf85AVpvWfD9g0W8+KfwrUXCrbf26ipu
51enJsKBZ7Y26QP0KF/fa9CUl9vFr/8f8QcHWKYOOn+ibzZhdCdCuROMXr/im7G0
4YLCj0S8knYuNy706ST33iKyAfyhqfbs08nY3FikUrTXqyicNfqVx6NGWHdnHJuw
XZvfInZQvt9GQtsovKdqMA6BI1spU8PW9hwH5SQyJqbLxL8TyNHBVCNymHhNTEKv
AQwCphAXe9HK/vNNPmASD1zCORqtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCjtD
dbCtcGh01MCNbIS1nuTfXJQwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFLzBDQ0ZDNDZBRDY0RTExRUM5NDEyRjU5NkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBALhdp79zgYEJLvy+lzzTyH5Gnrn49EsVMPD4obKR2EXjRgf3GUjK
giOtnJD/IybZONpx6bZNw58sGH0rXiL+BinPigvCUJDCCvlsoeXQUg7WuHF4n+uR
NUUdVkhv8iCmf02iIG64cFYjPtzXmyop2D4cSLNAYq4VwUBrL4M1Icm22Hj/wSRI
LWN/a56Ind6ERDzdDo8dSf2Y9dqR2MEqLJRKrRMWR1/WNNwuHiPqBw/Cf3Nx7jDD
g5R+uVZc7q/KSadEr/AFdIqNL8im3aj3mflzeCt2I4f8E7nk8Fk8N0d4NZdx2HF7
bBi9nvWZ+xgNvknFpbYOyiFBXxTmCCo4Pxs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org