Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/78C4BAF691FA11ECB3CC2A975A40D577.roa
File: 78C4BAF691FA11ECB3CC2A975A40D577.roa (raw, json)
Hash identifier: nm1b4K3wHPGF1CshIinH0NNPm7Tb1zbaekhJxhOf4gI=
Subject key identifier: CA:BA:6C:19:4B:89:6F:9A:9C:D9:1A:47:EA:5A:DA:58:34:D0:72:BC
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 02B4
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/78C4BAF691FA11ECB3CC2A975A40D577.roa
Signing time: Sun 20 Feb 2022 03:09:10 +0000
ROA not before: Sun 20 Feb 2022 03:09:05 +0000
ROA not after: Mon 20 Feb 2023 03:09:05 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692 (0x2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Feb 20 03:09:05 2022 GMT
Not After : Feb 20 03:09:05 2023 GMT
Subject: CN=6211b0d5-41ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d1:a3:d5:f6:40:66:1a:b5:19:0a:6b:7d:5e:
e0:a4:b1:86:fa:63:b3:bb:05:0e:c8:4b:d1:1b:ad:
cc:db:88:1a:9e:18:2f:02:5d:20:87:4b:6d:8b:43:
39:8c:c4:60:9d:76:1a:27:28:98:38:7e:98:39:ac:
35:85:d6:cc:ff:6a:7c:76:6a:46:45:1f:be:2d:3e:
c2:28:a6:18:29:81:64:72:ac:e6:48:fe:1e:50:80:
8f:3f:55:88:15:6e:c2:ad:61:a6:35:5c:00:a5:39:
46:17:5c:3d:fc:9a:31:52:91:93:a6:28:bc:68:55:
62:26:e9:18:d6:07:2f:ea:a5:bb:41:ee:31:79:3d:
5d:bc:8e:d8:41:b3:3a:bb:ff:d3:20:32:66:67:60:
24:4b:86:ea:fc:16:86:60:37:8d:c6:a8:e9:53:df:
06:81:5b:08:46:af:fb:32:d9:19:ca:9b:bb:87:2c:
c2:62:33:02:a2:9a:53:5c:45:5e:55:7d:0d:a9:7f:
90:94:d2:38:33:42:1a:ac:9d:da:65:c9:d8:2e:1d:
76:2d:b9:2c:c8:a8:98:c1:80:74:11:ec:72:e5:cf:
b0:f2:bf:96:2a:a2:18:14:60:a2:2c:9d:91:b5:a2:
8e:04:5d:0a:ad:fa:10:0a:94:0a:f6:16:3b:df:05:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BA:6C:19:4B:89:6F:9A:9C:D9:1A:47:EA:5A:DA:58:34:D0:72:BC
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/78C4BAF691FA11ECB3CC2A975A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
79:90:67:b7:c0:7a:c6:bf:8b:a6:19:92:13:3d:da:6c:19:b4:
e6:15:02:24:5c:a9:b7:5d:5f:6e:2b:f3:3f:fe:71:b0:f2:aa:
a5:f6:84:ae:6d:4b:bf:88:97:55:56:88:58:99:31:46:e5:0a:
55:75:3f:34:0b:79:d3:ed:4a:70:ae:19:aa:4f:98:7d:27:cf:
76:f9:3f:d1:81:1c:84:1a:06:cd:7a:ca:7b:ab:b8:83:99:06:
c4:a8:0e:eb:d5:c9:d5:87:92:46:b5:7e:6e:71:ab:20:36:56:
34:c6:d5:9e:bb:5e:22:99:ea:6d:ed:88:5b:84:c5:f7:a3:58:
aa:63:92:43:cb:e3:7d:83:c9:f2:b7:35:6a:a4:c2:c8:8e:dc:
ec:1b:0e:fe:4e:a1:b7:17:97:7c:9d:7f:e6:0d:83:33:8b:50:
1b:d1:e4:9e:f3:ed:69:65:57:99:14:75:05:f2:a1:1a:71:46:
1b:bd:73:ad:2f:b2:e2:e3:c7:48:e0:ee:f7:71:19:49:97:f1:
09:1b:39:f8:06:61:fb:12:6f:bf:4e:a6:83:e5:80:b0:09:aa:
e4:16:1d:91:19:92:8d:f2:d4:6b:cf:86:78:34:b8:4d:d8:7f:
6b:1c:86:71:55:b6:75:09:9d:b5:e9:64:e7:eb:df:59:ad:04:
d9:1a:cd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org