Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/50577AEEC09A11ECAC1485BB5A40D577.roa
File: 50577AEEC09A11ECAC1485BB5A40D577.roa (raw, json)
Hash identifier: yUEoR20V+/fog42OES4CenwrnSv8W2+dYeNVsWGPPGY=
Subject key identifier: CB:DC:0B:34:A6:2D:36:9E:DD:0E:27:D1:DE:B7:ED:B5:20:37:12:7D
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 03F3
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/50577AEEC09A11ECAC1485BB5A40D577.roa
Signing time: Wed 20 Apr 2022 11:09:15 +0000
ROA not before: Wed 20 Apr 2022 11:09:10 +0000
ROA not after: Thu 20 Apr 2023 11:09:10 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1011 (0x3f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 20 11:09:10 2022 GMT
Not After : Apr 20 11:09:10 2023 GMT
Subject: CN=625fe9db-c9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:76:0b:84:64:85:b6:2f:cb:de:73:1b:bf:
00:9c:3c:c1:8e:7c:e2:dc:52:1d:6d:72:a9:fe:61:
ac:39:44:4a:16:97:7b:f9:76:5c:7d:75:ce:90:bb:
c7:9e:88:bc:25:5d:2b:5f:83:32:07:a7:59:c6:b8:
a5:d2:38:65:16:79:3e:98:5c:cd:de:4f:9d:8a:bd:
3c:16:70:19:29:a0:91:6d:5e:88:4a:f4:cf:5f:f4:
93:b7:a5:ed:b7:9c:73:9a:d4:cc:87:0a:27:04:8c:
dc:d0:98:5d:a6:fc:fd:12:47:3e:73:96:98:4a:50:
20:ea:dc:13:36:89:75:4e:ca:c3:69:ac:f0:ce:c1:
7c:bd:a8:9b:b6:4a:1e:27:c6:2e:88:2c:ce:9b:62:
79:6c:c0:bf:8f:95:aa:f0:8a:01:71:af:f5:19:55:
23:0d:01:d4:43:bf:5e:63:f5:1a:45:e5:14:cf:ea:
02:20:28:f4:99:59:e5:ba:de:63:8e:ab:d1:eb:ce:
99:b0:6e:3b:3e:30:19:03:cb:7b:d9:fd:b5:d7:18:
1d:2f:13:ca:f2:7e:b6:9f:3d:95:7d:f6:ec:a1:9b:
81:56:b2:bd:1c:a1:28:ef:c5:08:ec:3e:a5:c6:6d:
72:e3:94:b0:64:d2:f2:94:77:ed:53:32:6b:c1:6d:
e6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DC:0B:34:A6:2D:36:9E:DD:0E:27:D1:DE:B7:ED:B5:20:37:12:7D
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/50577AEEC09A11ECAC1485BB5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
26:91:de:b1:ab:f1:2c:fc:54:f8:ea:fa:70:a6:b5:6a:3b:09:
1a:b8:ed:cd:a7:38:06:ff:72:1f:6b:b2:cb:8d:3b:5b:38:ad:
88:41:64:fe:08:77:cd:02:b3:b9:b5:88:8c:9a:3f:a3:22:af:
ab:2f:40:14:8d:3b:d1:08:be:f8:a4:36:d2:bd:8a:e4:a1:8a:
b6:97:a0:b4:28:dd:cc:7d:0e:52:09:17:5a:d7:c7:a5:66:29:
0b:20:e0:91:2c:12:d6:03:12:a0:c8:3d:31:7d:4a:cb:72:31:
af:f6:5d:9c:65:10:f7:08:b8:fb:14:08:0b:fc:6e:62:fa:6b:
1b:6e:53:90:b1:f5:7e:01:69:cc:48:7e:be:dd:2f:be:d3:33:
80:8a:e2:7a:2c:0f:9b:38:bb:72:fb:a6:d6:54:16:b1:40:d7:
c6:2c:56:07:03:5f:26:db:98:6c:b7:ce:c7:0d:d8:ad:74:92:
43:3c:17:80:be:f9:30:02:b9:d8:a9:f4:18:aa:5f:f4:53:1b:
46:3e:ff:ee:3b:47:73:60:aa:8d:a2:45:6d:8d:84:23:40:ee:
7b:21:cd:50:e6:67:8e:4f:1f:39:d5:b2:ec:85:a2:d5:98:69:
c7:61:a6:c7:56:a8:87:b2:09:1b:b1:6f:90:cd:71:23:45:25:
4f:e5:ac:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org