Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7DDF0596ABF911EC8D1D72765A40D577.roa
File: 7DDF0596ABF911EC8D1D72765A40D577.roa (raw, json)
Hash identifier: /G9sRF47rqBa5GeOFJxQN0wGwdUI2A+pjRm8rtVWKgU=
Subject key identifier: 8C:4F:14:74:43:5B:2A:FB:A4:28:C3:6D:72:61:28:26:67:A6:7E:32
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0347
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7DDF0596ABF911EC8D1D72765A40D577.roa
Signing time: Fri 25 Mar 2022 05:07:39 +0000
ROA not before: Fri 25 Mar 2022 05:07:34 +0000
ROA not after: Sat 25 Mar 2023 05:07:34 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 839 (0x347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Mar 25 05:07:34 2022 GMT
Not After : Mar 25 05:07:34 2023 GMT
Subject: CN=623d4e1b-4dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1d:e6:78:c0:d0:5d:4a:7c:43:11:23:08:38:
9c:68:d4:c7:6f:16:f2:9a:f5:7f:7b:48:5b:87:aa:
69:27:e9:4a:49:d3:12:c0:90:5c:90:ac:21:65:f1:
66:a4:91:97:8e:eb:3b:c3:b7:cc:72:38:3a:79:b9:
fe:a1:b4:3a:9b:69:35:18:69:25:14:b2:8e:07:7c:
09:6e:0b:7d:e4:c3:3a:4c:93:d8:a3:ab:18:73:dd:
d8:33:6f:de:51:d5:c4:21:49:c4:ad:92:38:57:31:
7e:5c:59:9b:90:e1:4f:3a:d8:8f:c3:6d:7e:41:42:
16:66:5f:6e:d4:51:ea:f7:d7:f5:b5:c0:0a:6e:02:
45:94:d6:fc:64:3c:83:f0:98:a1:d8:ca:43:ff:ff:
49:39:1b:5d:5a:20:3b:56:36:6f:54:b5:f4:57:42:
1f:4d:cc:69:b5:6f:c8:7b:2d:c5:55:01:cc:ee:96:
c0:71:31:b6:b0:d9:c8:1d:4b:af:34:49:da:78:7c:
5d:d7:df:ac:31:08:e9:a6:7f:b5:fd:6c:91:1a:02:
40:80:0d:2b:24:2b:98:12:f0:34:7a:0c:40:b8:65:
e8:a8:9d:ac:b7:af:12:57:21:a1:48:96:6b:83:26:
0c:95:41:20:1a:fe:72:a6:98:68:95:03:9c:f8:9b:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4F:14:74:43:5B:2A:FB:A4:28:C3:6D:72:61:28:26:67:A6:7E:32
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7DDF0596ABF911EC8D1D72765A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
ac:fa:a6:2f:28:c3:9e:ce:e7:3f:cf:19:63:dc:46:a2:df:b3:
45:17:3a:71:37:d7:a4:d0:4c:cb:3b:90:b5:4d:30:fe:0c:86:
20:9e:c4:43:80:1c:da:67:81:65:fd:e2:d1:e9:2c:dd:33:c9:
87:af:23:d1:e1:5f:44:5d:84:25:0e:36:bc:c6:59:b1:37:bf:
98:15:da:34:5b:ba:70:57:0a:fd:ab:8c:94:8b:cb:43:16:89:
9d:db:4f:de:66:1c:0d:6e:58:57:1f:01:10:89:d7:45:6f:f3:
34:e7:d8:e2:9e:45:18:a1:9f:bd:bb:9c:9c:45:12:22:ff:25:
42:ea:83:c2:32:01:af:7e:f5:5a:02:e7:f1:bc:1d:6b:3e:d8:
5c:40:3d:16:01:4e:e6:c9:70:a3:2c:57:8c:c2:00:f2:1a:bd:
f4:7f:b5:a0:18:bb:19:ee:72:05:0c:53:8b:cd:54:83:5a:83:
af:27:c0:87:4a:ed:da:2c:8e:49:aa:06:5b:14:1e:3d:3d:92:
d2:8d:41:0b:fc:8d:53:6e:cc:df:47:c0:b7:db:a8:5a:73:5b:
89:49:29:b5:5c:de:d0:5c:b4:9a:5a:a6:36:13:97:f4:ef:15:
dc:50:36:71:93:13:3f:71:87:fa:e0:26:c0:e6:06:7e:b6:89:
41:bc:06:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org