Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/567BADC48C8211EC931CEA885A40D577.roa
File: 567BADC48C8211EC931CEA885A40D577.roa (raw, json)
Hash identifier: zYrTV1vUDOCQB2BJG1CwfUAzF7iawZmwc1wSFyR2sZg=
Subject key identifier: EC:C0:27:5D:F1:ED:16:C5:B0:C4:96:8D:09:A3:A6:B3:11:35:06:21
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0281
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/567BADC48C8211EC931CEA885A40D577.roa
Signing time: Sun 13 Feb 2022 04:06:37 +0000
ROA not before: Sun 13 Feb 2022 04:06:32 +0000
ROA not after: Mon 13 Feb 2023 04:06:32 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 641 (0x281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Feb 13 04:06:32 2022 GMT
Not After : Feb 13 04:06:32 2023 GMT
Subject: CN=620883cd-ffc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:e5:a2:ed:cc:4d:b0:ae:b5:74:ed:c4:b8:
68:4a:20:48:60:6a:81:74:cd:fe:88:8d:d6:e5:a1:
f4:e4:c5:72:55:94:2a:a9:c3:18:89:45:0c:d5:f5:
80:5d:ce:d8:ce:aa:10:b3:4d:8d:2a:ca:36:8a:dc:
7b:28:64:19:ce:4d:3f:33:6e:e3:1a:bd:4a:81:5d:
96:ae:6f:53:53:c1:a0:9c:f8:c8:29:74:85:ec:1a:
18:6f:46:a6:e3:10:ce:99:cf:dc:ff:97:95:2d:9e:
25:2e:d6:ea:7d:e3:f2:12:23:66:c2:5e:ba:73:e8:
af:5c:16:8c:8e:fc:8c:38:c2:f5:cf:b5:b2:cc:64:
33:13:17:97:1a:5c:44:04:e8:89:9c:d6:0f:e0:b8:
b4:ca:a2:0d:a4:f4:dc:1d:ef:40:b7:ad:11:e7:de:
f3:78:9a:41:c6:44:26:26:94:e1:0a:e2:f9:17:ec:
97:2d:29:d2:b7:83:ac:36:53:7c:b8:db:5d:e3:fd:
c2:dc:76:6e:f9:e2:e9:e3:3d:3c:df:eb:7b:b6:f7:
05:e9:2a:0b:84:61:93:78:e8:3e:81:1c:76:82:da:
98:60:b6:88:89:e0:60:cb:6f:db:5f:32:76:db:c6:
30:4d:bd:b7:9a:4e:bf:23:e9:66:f7:78:46:7f:50:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C0:27:5D:F1:ED:16:C5:B0:C4:96:8D:09:A3:A6:B3:11:35:06:21
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/567BADC48C8211EC931CEA885A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
50:e2:3d:1f:13:05:b0:aa:fc:ed:e5:11:2c:46:67:ca:2f:4c:
19:9a:61:fb:14:5d:90:ab:53:3e:fd:6c:57:dc:49:f5:da:a5:
9f:25:ed:dd:73:06:08:cb:23:c4:bb:91:c6:94:dd:12:6f:e1:
54:ba:9a:25:17:72:69:6d:28:33:67:2b:b2:38:e9:c7:12:2e:
30:c0:74:6d:86:d9:56:6b:30:0e:2f:d3:6a:6e:6d:41:d3:31:
64:15:f1:2d:52:e5:98:2e:10:27:ec:27:d5:21:75:7e:dc:7d:
c6:d8:9c:22:56:d4:54:25:39:81:4f:1a:cf:ad:53:18:4b:10:
9c:26:ab:96:de:60:1d:32:c9:b8:df:bc:9e:a2:6c:07:71:3e:
56:ad:e0:2d:ea:f5:11:d5:67:6d:31:d0:38:cd:8b:34:03:8f:
4b:1d:1d:50:64:ae:c9:21:83:5b:d4:1e:66:63:8b:64:44:67:
ff:8c:71:43:c2:0f:e2:10:15:b0:9b:e6:7b:b6:c3:54:16:22:
50:fe:fe:ad:eb:e2:f8:4e:a4:e9:72:ca:3e:00:f2:ef:ac:9f:
e3:86:aa:06:98:e9:7b:16:f1:35:ad:27:a4:9e:06:0b:82:00:
f8:83:81:f0:9b:ba:75:b3:75:f7:05:7f:7b:ce:11:a6:21:c4:
40:3a:14:54
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjAyMTMwNDA2MzJaFw0yMzAyMTMwNDA2MzJaMBgxFjAU
BgNVBAMMDTYyMDg4M2NkLWZmYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdOeWi7cxNsK61dO3EuGhKIEhgaoF0zf6IjdblofTkxXJVlCqpwxiJRQzV
9YBdztjOqhCzTY0qyjaK3HsoZBnOTT8zbuMavUqBXZaub1NTwaCc+MgpdIXsGhhv
RqbjEM6Zz9z/l5UtniUu1up94/ISI2bCXrpz6K9cFoyO/Iw4wvXPtbLMZDMTF5ca
XEQE6Imc1g/guLTKog2k9Nwd70C3rRHn3vN4mkHGRCYmlOEK4vkX7JctKdK3g6w2
U3y4213j/cLcdm754unjPTzf63u29wXpKguEYZN46D6BHHaC2phgtoiJ4GDLb9tf
MnbbxjBNvbeaTr8j6Wb3eEZ/UFVlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7MAn
XfHtFsWwxJaNCaOmsxE1BiEwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFLzU2N0JBREM0OEM4MjExRUM5MzFDRUE4ODVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBAFDiPR8TBbCq/O3lESxGZ8ovTBmaYfsUXZCrUz79bFfcSfXapZ8l
7d1zBgjLI8S7kcaU3RJv4VS6miUXcmltKDNnK7I46ccSLjDAdG2G2VZrMA4v02pu
bUHTMWQV8S1S5ZguECfsJ9UhdX7cfcbYnCJW1FQlOYFPGs+tUxhLEJwmq5beYB0y
ybjfvJ6ibAdxPlat4C3q9RHVZ20x0DjNizQDj0sdHVBkrskhg1vUHmZji2REZ/+M
cUPCD+IQFbCb5nu2w1QWIlD+/q3r4vhOpOlyyj4A8u+sn+OGqgaY6XsW8TWtJ6Se
BguCAPiDgfCbunWzdfcFf3vOEaYhxEA6FFQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org