Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8FB4BC84D7D211ECA58F1FD1F1222468.roa
File: 8FB4BC84D7D211ECA58F1FD1F1222468.roa (raw, json)
Hash identifier: mSGsMScnTxJjHRxB9HeBhkwybB8mYvj+FDvaG44nw+k=
Subject key identifier: 07:AE:72:7E:77:D0:06:AF:7D:C1:7E:7F:10:CA:00:7A:79:3B:64:B3
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 04B9
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8FB4BC84D7D211ECA58F1FD1F1222468.roa
Signing time: Fri 20 May 2022 00:19:50 +0000
ROA not before: Fri 20 May 2022 00:00:45 +0000
ROA not after: Sat 20 May 2023 00:00:45 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1209 (0x4b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 20 00:00:45 2022 GMT
Not After : May 20 00:00:45 2023 GMT
Subject: CN=6286dea5-e771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:d1:cb:66:12:e0:1c:0c:60:55:4f:74:0e:
2b:f6:8f:7c:b2:ba:9c:87:69:16:05:e9:08:30:57:
6c:79:d0:0f:87:5d:db:85:89:dd:e7:08:df:49:5b:
f5:32:b7:ff:50:98:e7:22:a4:3d:b6:90:7d:b2:2e:
90:12:d0:3b:4c:7f:47:3e:bd:fe:6a:0b:b8:50:34:
f9:6d:b9:59:a3:cd:0d:bc:ac:b5:af:d3:f8:07:ac:
a0:b3:38:b4:aa:62:c9:32:f7:97:3f:57:35:18:8c:
6f:e8:18:7c:e7:05:ba:7c:de:8b:72:3e:8d:45:ad:
22:86:ea:52:4b:14:a8:85:d0:1e:e6:45:55:13:62:
9f:f4:7c:e3:98:53:1f:8c:b3:15:50:3c:0e:30:39:
a2:f2:6f:ca:76:b5:67:26:7c:d3:6c:d7:0e:3e:2b:
4e:b0:7e:b3:aa:55:45:bb:71:f0:a0:96:cf:3a:47:
04:92:89:5c:1d:8d:5e:95:79:ee:79:ab:3e:23:8b:
a1:af:96:b7:f5:bb:80:4b:e6:92:f4:8b:ab:65:89:
3a:fd:94:0f:e6:c2:fd:d6:64:0f:6e:b2:8b:5a:99:
d7:a7:3b:4e:b7:42:af:74:9c:9f:91:2a:51:d2:46:
15:7c:c6:ec:5f:f6:09:38:46:c6:80:38:b0:99:6c:
1d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AE:72:7E:77:D0:06:AF:7D:C1:7E:7F:10:CA:00:7A:79:3B:64:B3
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8FB4BC84D7D211ECA58F1FD1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
84:c5:39:95:2f:b1:b2:b2:53:c6:a8:91:91:68:17:7f:ab:73:
e6:53:66:04:15:d5:a6:de:a0:73:55:c9:8b:5e:a0:7a:47:b1:
b7:48:7f:a3:c6:59:15:a6:54:69:30:81:30:d8:25:7b:90:55:
0b:63:15:8a:f8:b2:dd:ab:43:60:58:1a:f6:40:78:f3:a9:1c:
17:f3:71:2d:4e:89:50:4c:5f:4e:cf:82:b7:21:61:16:f3:a6:
36:d9:56:60:00:58:9a:20:6f:2f:15:8b:17:02:91:48:17:c6:
e3:9f:4e:c7:60:6d:32:6c:ea:bd:44:15:f3:2e:02:8e:ec:2d:
ca:7c:14:81:e0:c4:27:57:6d:0c:d6:27:d6:2e:5e:c4:9d:73:
7a:98:94:2b:da:f6:52:90:71:3f:76:fe:03:93:d2:c3:0e:d3:
2f:69:dd:57:6b:39:2c:a9:02:4f:db:a9:08:11:39:88:6f:01:
c7:ca:8c:49:2c:18:34:1c:96:f3:75:19:58:2c:e7:3b:94:17:
45:09:c8:b4:26:bc:5a:a4:6f:bd:50:a1:1b:c5:6f:78:70:54:
55:62:b8:86:3a:74:cf:c8:38:de:37:56:46:b9:a4:cf:64:a3:
93:55:9c:82:19:40:02:25:c8:46:70:9f:4e:8b:b8:b1:a0:3b:
23:a6:d0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org