Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/89C4F4E2C76A11EC99D806C3F1222468.roa
File: 89C4F4E2C76A11EC99D806C3F1222468.roa (raw, json)
Hash identifier: t2Oo6vAW4vE7B9zk2RllsMhexlrWuv8s3LuymMZ1JQg=
Subject key identifier: CA:53:FD:84:4F:61:5E:70:DF:49:D7:F2:C5:B8:DF:26:80:B4:17:DB
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0432
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/89C4F4E2C76A11EC99D806C3F1222468.roa
Signing time: Fri 29 Apr 2022 03:14:54 +0000
ROA not before: Fri 29 Apr 2022 03:14:48 +0000
ROA not after: Sat 29 Apr 2023 03:14:48 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1074 (0x432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 29 03:14:48 2022 GMT
Not After : Apr 29 03:14:48 2023 GMT
Subject: CN=626b582d-3177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:66:32:7e:e1:23:c0:02:90:1b:be:65:8f:
1b:8b:6f:1d:e6:6f:80:53:44:bc:23:bd:25:5b:20:
f4:b3:c4:b2:89:ca:76:2e:52:e8:31:51:4d:58:79:
c1:52:b2:33:98:32:59:7a:b8:ff:ef:db:2b:6b:5b:
46:1d:d9:e2:66:3a:00:4b:20:ac:4c:d6:58:3e:56:
48:9d:3c:df:ba:49:d0:11:74:41:f4:1b:2d:30:b8:
4d:81:fb:0a:1c:1b:e2:3f:57:35:d4:f2:4a:12:5a:
da:69:cd:ae:67:9e:6b:26:33:90:06:46:fc:f2:7e:
1a:c4:d8:fe:c1:6c:bc:63:5a:42:63:cf:c2:c3:0b:
2c:d2:33:6e:2d:48:07:8e:ef:ed:76:8f:30:2b:95:
81:14:6a:1a:7b:b2:81:7b:c2:78:b9:41:ce:4e:bd:
b5:bc:a1:10:6b:f6:b1:1c:11:83:86:e2:02:23:18:
eb:74:04:4d:b8:17:e3:2b:ff:84:be:f5:46:2d:9e:
3f:f1:8d:fb:c0:d8:bb:2e:92:25:aa:12:6b:9e:ab:
c4:6a:e7:76:4c:56:7d:2b:44:92:f7:3a:3b:61:c7:
38:10:02:2b:0f:04:58:46:27:c7:54:a5:f7:63:3c:
a4:d7:d3:82:26:97:1a:84:9e:34:3d:06:56:20:32:
2e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:53:FD:84:4F:61:5E:70:DF:49:D7:F2:C5:B8:DF:26:80:B4:17:DB
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/89C4F4E2C76A11EC99D806C3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
7e:34:f4:f7:54:43:c9:df:12:4c:a1:6f:96:8c:a8:e6:78:ae:
0a:fe:bc:91:37:8b:42:db:f8:b0:0a:c3:e9:76:fc:67:86:0e:
fd:9c:91:15:a3:e7:f2:e3:6c:1a:b4:4a:d2:a8:62:8d:d7:5f:
67:96:ed:4b:c8:75:e0:fa:9d:0c:42:56:9f:e5:3b:c5:1e:64:
7d:30:1d:f1:44:95:f7:33:10:29:34:39:db:86:ef:7d:db:c9:
c7:f9:e2:2b:77:d1:09:e8:65:2b:f5:dd:72:ed:3c:b3:60:ad:
d5:f0:64:aa:d7:10:90:c2:6a:39:f0:f6:f7:78:80:18:25:99:
a1:98:8f:c2:07:48:7e:4b:9a:37:c6:c4:02:ac:8a:57:7b:c0:
03:83:5f:f1:de:52:91:b1:d3:b7:cb:91:3d:9d:f7:e3:11:40:
d1:e2:1b:9a:93:bd:05:f6:c1:ba:02:e1:e2:69:64:ea:6c:c3:
a5:f5:49:9c:84:a0:bd:cd:6a:69:aa:84:55:e3:77:f8:b8:8a:
4b:ea:58:e5:97:22:26:8b:1d:83:8f:d3:08:02:7e:11:80:76:
65:94:21:85:0b:f8:87:9a:1c:fb:70:35:5c:42:05:05:c3:62:
28:94:dc:5f:88:5d:a1:24:d2:0c:24:21:6e:c9:5e:b4:33:ef:
47:bb:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org