Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/2BF3300E5AE111EC96991CC25A40D577.roa
File: 2BF3300E5AE111EC96991CC25A40D577.roa (raw, json)
Hash identifier: igZBMjzZcFp2MKQb0AsJRV1FFSWjearIc9Z2ppatITQ=
Subject key identifier: A8:9D:0C:04:F1:E7:9C:22:C4:AA:2E:5B:EF:9B:96:40:43:42:FB:EC
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0154
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/2BF3300E5AE111EC96991CC25A40D577.roa
Signing time: Sun 12 Dec 2021 00:19:29 +0000
ROA not before: Sun 12 Dec 2021 00:00:25 +0000
ROA not after: Mon 12 Dec 2022 00:00:25 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Dec 12 00:00:25 2021 GMT
Not After : Dec 12 00:00:25 2022 GMT
Subject: CN=61b54011-e80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:af:ec:bb:5c:aa:61:2a:f1:6c:22:d0:53:3c:
3a:eb:a5:ab:7f:fd:8a:66:06:1a:22:44:10:4d:49:
fd:b9:1b:68:fb:b7:cc:a8:8a:70:88:49:4d:ea:a5:
7d:9c:e9:e9:7b:0d:33:b4:82:5b:d4:22:f7:f2:3a:
08:34:a1:09:07:77:01:13:d5:bf:10:6d:07:a7:b4:
be:04:99:2a:76:64:7d:4c:37:76:25:cd:c4:d4:0f:
ad:3a:52:bd:9e:c3:c7:92:86:ae:dd:e0:5d:76:a9:
ab:71:92:11:47:9e:a4:3e:a6:90:7e:1d:1c:63:41:
1a:71:87:1e:72:ca:e7:03:46:fb:e0:64:05:e4:6f:
d5:88:f1:26:18:0f:b4:88:a9:80:af:90:d4:91:6a:
1a:17:3d:01:ac:d3:c7:c7:3d:8c:d0:80:6a:c6:db:
7a:87:a4:01:f3:6b:80:99:30:02:28:ed:05:22:e8:
10:e7:85:1a:1e:6b:35:c4:52:b9:9e:2a:7d:2b:90:
22:cc:e1:e4:8c:10:12:4f:76:c4:70:14:68:80:03:
e1:65:7a:73:56:f2:b5:67:a2:97:79:92:da:45:63:
b5:58:dc:57:3c:9d:f4:23:4c:30:e9:1b:7b:77:fd:
09:3e:4f:b4:80:2a:e5:a7:fb:f7:36:01:0d:8e:b7:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9D:0C:04:F1:E7:9C:22:C4:AA:2E:5B:EF:9B:96:40:43:42:FB:EC
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/2BF3300E5AE111EC96991CC25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
46:ee:d2:11:a5:a6:86:fe:64:a1:4e:ae:ad:e1:8c:4a:95:fe:
57:13:0e:cd:e0:e7:84:05:a9:cf:25:f9:6b:ad:9f:d4:ee:c3:
ce:1d:cd:12:04:83:04:08:d1:5e:b0:a3:4b:a5:29:21:84:fc:
18:ee:7c:d0:d7:47:ff:c1:f8:60:cd:4e:ac:88:a0:a7:94:e9:
2e:f9:08:6a:d0:9b:aa:79:11:87:75:3b:7a:da:34:28:3e:17:
20:c7:12:d6:63:98:90:05:f6:e5:f7:b0:90:95:f7:8d:2b:da:
af:df:43:50:23:ea:d8:92:1d:e4:db:a6:39:22:78:f1:b5:7e:
76:26:09:6a:20:2a:f7:0d:5a:95:ee:5d:19:72:4e:38:81:e2:
8f:70:cd:62:3c:ed:07:45:a5:c2:93:f5:fb:bc:e0:b2:c3:be:
0d:d5:d0:f7:5b:06:68:8c:48:64:49:56:70:cc:57:fb:84:21:
4f:af:f3:1b:86:24:12:23:a0:d7:5a:3d:36:64:54:42:08:41:
66:97:be:a4:60:b5:85:d9:5b:b0:52:e5:47:ff:6e:46:86:b3:
e9:ec:47:26:6b:4c:1b:1b:99:e0:c3:8c:cd:7d:40:da:4f:59:
4c:a9:3e:8e:b7:70:12:c3:c1:3e:4e:9b:87:8d:19:aa:27:eb:
f3:10:16:61
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMTEyMTIwMDAwMjVaFw0yMjEyMTIwMDAwMjVaMBgxFjAU
BgNVBAMMDTYxYjU0MDExLWU4MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDvr+y7XKphKvFsItBTPDrrpat//YpmBhoiRBBNSf25G2j7t8yoinCISU3q
pX2c6el7DTO0glvUIvfyOgg0oQkHdwET1b8QbQentL4EmSp2ZH1MN3YlzcTUD606
Ur2ew8eShq7d4F12qatxkhFHnqQ+ppB+HRxjQRpxhx5yyucDRvvgZAXkb9WI8SYY
D7SIqYCvkNSRahoXPQGs08fHPYzQgGrG23qHpAHza4CZMAIo7QUi6BDnhRoeazXE
UrmeKn0rkCLM4eSMEBJPdsRwFGiAA+FlenNW8rVnopd5ktpFY7VY3Fc8nfQjTDDp
G3t3/Qk+T7SAKuWn+/c2AQ2Ot6H9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqJ0M
BPHnnCLEqi5b75uWQENC++wwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFLzJCRjMzMDBFNUFFMTExRUM5Njk5MUNDMjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBAEbu0hGlpob+ZKFOrq3hjEqV/lcTDs3g54QFqc8l+Wutn9Tuw84d
zRIEgwQI0V6wo0ulKSGE/BjufNDXR//B+GDNTqyIoKeU6S75CGrQm6p5EYd1O3ra
NCg+FyDHEtZjmJAF9uX3sJCV940r2q/fQ1Aj6tiSHeTbpjkiePG1fnYmCWogKvcN
WpXuXRlyTjiB4o9wzWI87QdFpcKT9fu84LLDvg3V0PdbBmiMSGRJVnDMV/uEIU+v
8xuGJBIjoNdaPTZkVEIIQWaXvqRgtYXZW7BS5Uf/bkaGs+nsRyZrTBsbmeDDjM19
QNpPWUypPo63cBLDwT5Om4eNGaon6/MQFmE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org