Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6B7B83DC854F11EC93659BD85A40D577.roa
File: 6B7B83DC854F11EC93659BD85A40D577.roa (raw, json)
Hash identifier: hRmqyLLR8oWtL6q+SvucGikb0L+Uvj3ic459XnBXUtk=
Subject key identifier: 47:35:65:03:5C:3A:A5:42:DD:32:FF:A4:BD:04:89:C8:A9:B4:5B:C1
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0242
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6B7B83DC854F11EC93659BD85A40D577.roa
Signing time: Fri 04 Feb 2022 00:14:29 +0000
ROA not before: Fri 04 Feb 2022 00:00:24 +0000
ROA not after: Sat 04 Feb 2023 00:00:24 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Feb 4 00:00:24 2022 GMT
Not After : Feb 4 00:00:24 2023 GMT
Subject: CN=61fc6fe5-1c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:f9:d3:0e:77:b9:e7:f9:76:60:bd:48:a8:
3a:09:66:fc:68:77:cb:33:17:db:58:94:8f:db:2f:
0f:3b:cd:16:20:45:da:16:73:f0:ae:01:f9:33:57:
ae:ac:32:94:a0:ae:48:6b:81:c3:f2:fa:0e:bc:5c:
0c:78:2b:fc:28:6a:36:d2:8c:d6:da:4c:3c:92:d0:
a9:73:e2:2c:e3:64:4c:4f:d4:68:67:e4:82:05:2d:
86:6b:10:e7:22:c8:6f:75:ca:94:64:1b:a2:d9:bf:
17:a2:ad:3c:b2:7a:5d:56:95:cc:c2:21:4e:a2:31:
a3:14:74:2e:c7:8c:2d:95:65:2b:f2:89:8e:fe:d7:
29:44:06:1b:de:c8:59:6d:69:e7:bf:b3:b3:e4:09:
49:aa:71:33:ef:3e:44:2e:e8:5e:16:ca:2c:d2:fd:
85:c7:2a:ac:83:a4:a6:97:bb:24:0e:d2:7c:9d:f8:
22:36:8f:2b:62:34:15:37:e1:1d:e1:1e:b8:dd:d0:
7b:e5:9b:c8:d5:2a:22:69:2f:ee:b0:4b:8a:d7:f9:
e7:a5:23:84:3d:a0:86:be:75:46:38:64:91:23:96:
2b:f5:e3:52:ed:33:3a:85:da:f2:12:ea:9a:2d:c2:
d3:e2:71:1d:8e:e5:11:3e:24:86:52:7e:41:66:f4:
14:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:35:65:03:5C:3A:A5:42:DD:32:FF:A4:BD:04:89:C8:A9:B4:5B:C1
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6B7B83DC854F11EC93659BD85A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
bb:d1:84:39:e1:48:77:61:32:17:2f:fd:7e:d8:cc:34:71:16:
22:8f:17:63:2f:e4:e3:00:6f:72:32:d4:52:e8:0e:f7:cb:9d:
f2:6d:a3:e2:53:e4:d5:80:41:83:0d:84:cd:da:a3:30:0b:05:
1c:56:79:2c:fc:78:05:73:21:89:11:5a:59:ff:61:3c:fb:67:
9b:9f:5a:fb:01:aa:e6:c5:9e:77:f8:2d:5d:9c:00:74:43:21:
a8:62:c7:d7:12:e2:ef:c1:d7:c3:73:39:ed:53:fc:db:e5:fc:
22:81:e1:b8:00:d8:ef:7f:49:80:7d:96:96:58:f4:40:fa:6a:
f5:7d:34:fd:2c:91:bc:ce:6e:82:c7:55:3c:ae:fa:c3:c5:1f:
a8:d1:06:0e:89:1e:b4:23:d6:db:09:d9:8c:61:81:b3:36:43:
e0:40:0f:55:2d:32:f5:4d:77:93:2d:ee:9c:84:86:c0:9a:80:
d7:55:15:b0:34:92:28:09:e0:67:cc:f0:25:b7:3b:e6:a1:23:
83:45:f5:43:17:77:b3:15:be:69:c6:8a:49:90:b5:13:41:0f:
9e:78:70:2d:08:22:00:27:d3:39:cc:4e:84:71:d7:41:a9:a3:
87:7c:f7:d4:14:d7:7e:0a:1a:2d:06:67:df:3c:05:77:ad:5a:
f4:0c:41:52
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjAyMDQwMDAwMjRaFw0yMzAyMDQwMDAwMjRaMBgxFjAU
BgNVBAMMDTYxZmM2ZmU1LTFjNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQiPnTDne55/l2YL1IqDoJZvxod8szF9tYlI/bLw87zRYgRdoWc/CuAfkz
V66sMpSgrkhrgcPy+g68XAx4K/woajbSjNbaTDyS0Klz4izjZExP1Ghn5IIFLYZr
EOciyG91ypRkG6LZvxeirTyyel1WlczCIU6iMaMUdC7HjC2VZSvyiY7+1ylEBhve
yFltaee/s7PkCUmqcTPvPkQu6F4WyizS/YXHKqyDpKaXuyQO0nyd+CI2jytiNBU3
4R3hHrjd0Hvlm8jVKiJpL+6wS4rX+eelI4Q9oIa+dUY4ZJEjliv141LtMzqF2vIS
6potwtPicR2O5RE+JIZSfkFm9BQzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURzVl
A1w6pULdMv+kvQSJyKm0W8EwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFLzZCN0I4M0RDODU0RjExRUM5MzY1OUJEODVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBALvRhDnhSHdhMhcv/X7YzDRxFiKPF2Mv5OMAb3Iy1FLoDvfLnfJt
o+JT5NWAQYMNhM3aozALBRxWeSz8eAVzIYkRWln/YTz7Z5ufWvsBqubFnnf4LV2c
AHRDIahix9cS4u/B18NzOe1T/Nvl/CKB4bgA2O9/SYB9lpZY9ED6avV9NP0skbzO
boLHVTyu+sPFH6jRBg6JHrQj1tsJ2YxhgbM2Q+BAD1UtMvVNd5Mt7pyEhsCagNdV
FbA0kigJ4GfM8CW3O+ahI4NF9UMXd7MVvmnGikmQtRNBD554cC0IIgAn0znMToRx
10Gpo4d899QU134KGi0GZ988BXetWvQMQVI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org