Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/128096E4B7FB11EC809C5AB35A40D577.roa
File: 128096E4B7FB11EC809C5AB35A40D577.roa (raw, json)
Hash identifier: I+oYlwKhuogUI7Bo0zrNKUvYxCck8LW1fooYOurY0aM=
Subject key identifier: 2E:92:BD:41:0A:EB:46:CD:05:1D:79:74:B9:7E:E8:83:AA:EB:2F:C2
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 03AA
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/128096E4B7FB11EC809C5AB35A40D577.roa
Signing time: Sat 09 Apr 2022 11:49:12 +0000
ROA not before: Sat 09 Apr 2022 11:49:07 +0000
ROA not after: Sun 09 Apr 2023 11:49:07 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938 (0x3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 9 11:49:07 2022 GMT
Not After : Apr 9 11:49:07 2023 GMT
Subject: CN=625172b8-dded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:39:8c:59:82:fb:23:76:cc:82:68:77:98:
44:1b:ec:6e:32:00:4e:ad:c8:f6:71:30:c6:53:4d:
25:ca:25:ff:63:31:53:12:68:d5:2c:d2:f8:dd:5e:
ee:94:fa:26:42:94:54:5f:92:d1:ea:5b:b5:6c:64:
3e:df:e4:8d:4f:ca:18:94:3e:37:e7:72:af:aa:cd:
f9:44:24:c9:6b:07:22:34:ce:38:ad:aa:36:b5:0e:
4d:93:6d:3f:2a:55:25:19:aa:50:33:a0:85:be:ad:
5f:62:ee:81:3e:77:c6:c2:23:30:5b:21:b0:d3:72:
30:86:67:d9:cb:f8:23:f0:64:95:bc:aa:76:70:74:
37:87:99:cd:56:79:9d:11:4a:8b:85:d6:5f:53:47:
a8:b6:56:c8:8a:1f:a2:3f:0f:00:50:ee:cf:b9:40:
ef:29:21:f8:f1:af:a1:61:5d:f2:e8:17:88:80:65:
c1:98:f6:e1:0f:10:68:84:1b:a0:fc:c4:10:6e:36:
6e:01:40:d7:b8:a9:d5:fb:94:44:6b:16:ac:91:e7:
57:ad:47:98:00:c6:7a:51:d0:37:68:2e:5a:f0:0a:
00:13:0e:c9:53:2a:3e:78:e5:f9:13:07:d6:42:c4:
04:3b:1d:78:a9:bf:2a:fc:1b:70:4e:f1:80:7f:4e:
c1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:92:BD:41:0A:EB:46:CD:05:1D:79:74:B9:7E:E8:83:AA:EB:2F:C2
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/128096E4B7FB11EC809C5AB35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
36:e0:d9:46:ea:c3:26:f9:cf:35:8e:a5:10:ad:6f:8a:41:8d:
0b:51:52:5c:c4:22:3e:da:01:1c:15:d7:a2:81:cc:dd:ee:83:
98:01:c8:28:e7:84:bd:87:15:12:68:30:ad:3e:13:d5:5a:77:
85:b9:13:f3:4a:56:9a:e1:f1:c9:b2:d8:7c:5f:36:55:7f:47:
e7:42:8a:88:e4:09:eb:20:2c:87:51:c4:61:30:dc:32:2a:fb:
48:5b:a5:6a:44:4d:6f:b2:3e:90:c3:b7:64:f4:e4:86:58:b8:
00:90:b8:d2:c6:c7:ef:43:f7:2c:c5:a1:e2:8d:cf:cb:ba:2d:
fc:5e:47:c3:f7:a7:db:df:17:17:17:44:5f:03:b5:25:be:27:
4f:f9:8e:0a:75:a1:2b:29:33:20:5f:7c:59:f5:6d:d2:1b:ad:
a0:c7:a1:c5:59:29:02:fb:b5:ba:43:ae:e4:ef:be:0b:50:08:
ad:ff:21:fc:d7:1f:c5:d1:69:a5:d3:87:24:01:3c:2d:55:82:
5c:56:8d:91:e7:98:d9:81:a9:bd:d4:7b:20:0b:61:0f:04:ee:
9d:01:a8:ec:70:dc:19:e6:63:36:bb:33:22:1a:8b:75:b6:e1:
26:9f:27:78:ac:33:4f:08:d1:83:d9:85:be:3d:32:5f:8a:1b:
25:3e:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org