Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/90B87AEC8F9511ECA45F878E5A40D577.roa
File: 90B87AEC8F9511ECA45F878E5A40D577.roa (raw, json)
Hash identifier: KgzBwvNzpvnMxZDId9A7VEulTGb6Omf6ALT6eBEGmhQ=
Subject key identifier: 7D:F5:1A:D3:9D:27:20:E6:8F:41:A7:92:98:26:B9:F6:15:38:FB:B4
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 029D
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/90B87AEC8F9511ECA45F878E5A40D577.roa
Signing time: Thu 17 Feb 2022 02:01:48 +0000
ROA not before: Thu 17 Feb 2022 02:01:43 +0000
ROA not after: Fri 17 Feb 2023 02:01:43 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Feb 17 02:01:43 2022 GMT
Not After : Feb 17 02:01:43 2023 GMT
Subject: CN=620dac8c-d611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:1c:9b:dc:94:19:a7:b7:74:b4:56:c6:47:
e5:02:ba:79:b8:2c:1a:8b:db:80:ec:59:1a:cc:d7:
9b:fc:4a:c7:3b:a2:30:47:69:5e:d9:19:fb:1e:45:
cf:83:01:1b:7d:17:1c:47:55:ba:b5:45:2a:f8:98:
3a:14:0a:bf:9b:6a:b6:1d:31:fd:a6:66:cb:50:96:
ea:d7:8d:7b:ce:e5:b7:f8:a9:98:e5:4d:cb:99:4c:
6a:1b:59:ea:04:47:9a:e7:fc:da:84:9b:df:34:43:
4f:80:b6:b3:f1:cb:ed:7a:20:68:39:73:85:9c:b6:
33:a3:3b:2b:f7:b8:62:6d:cb:07:8a:0e:1d:c5:1f:
19:be:9e:a5:71:6d:ee:37:16:87:90:ff:18:fe:e9:
73:bd:8e:56:f7:ad:5f:fd:d7:87:0f:68:f7:df:17:
54:e9:3c:35:4c:ce:cd:d9:55:ab:c9:63:05:b1:b0:
fc:bf:3c:f0:8d:2f:f7:a6:14:f8:47:55:6b:ac:26:
6c:c0:18:99:93:df:7e:12:ab:1e:b2:3d:34:fe:0e:
46:09:bd:be:5c:f4:e8:76:91:30:51:7e:d9:59:25:
2d:d1:b8:08:7e:3d:28:5b:ac:02:ea:2a:c9:a2:da:
f4:5b:19:fa:8c:8a:01:94:7a:a5:19:1b:5d:20:55:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F5:1A:D3:9D:27:20:E6:8F:41:A7:92:98:26:B9:F6:15:38:FB:B4
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/90B87AEC8F9511ECA45F878E5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
61:65:4b:76:f8:05:6e:16:84:78:9e:fe:62:0e:db:2f:85:0f:
73:30:89:41:95:8c:87:95:61:f1:57:dd:96:c6:da:cf:fc:9d:
d8:ac:28:f6:44:8f:22:09:96:51:ff:60:cc:c0:7f:06:6b:02:
cd:ad:c2:e6:b8:a7:9f:7d:f7:c7:42:8a:e2:f6:26:f9:5c:b1:
5b:93:d1:4c:3e:bc:c4:f4:b0:2c:9f:be:07:e4:3c:21:ef:e4:
81:9e:a1:97:58:8e:b7:05:87:91:ae:ac:83:aa:3b:59:9f:f6:
c4:ef:a4:27:4c:df:44:7b:92:af:34:26:d7:86:a4:ec:ce:0e:
94:60:e0:ab:4b:42:cb:2f:3f:a7:55:ff:96:52:36:3a:88:68:
a9:e0:3c:f9:40:50:94:22:08:b4:b4:d2:f1:d2:c1:5c:d1:a1:
e5:d3:62:c3:b6:fc:f0:3b:1b:a0:fd:6f:27:a6:de:1c:75:54:
c4:bc:62:f1:16:78:9b:0c:a3:43:d3:f5:dc:fb:46:88:03:98:
79:c2:1d:65:6b:10:60:42:66:8c:f0:80:01:62:91:02:52:05:
92:09:87:23:18:4c:fd:6c:5b:ff:47:2d:30:5e:2e:63:ca:fa:
f1:6d:45:1b:d4:b5:cc:79:2f:9c:60:4c:99:f8:ac:35:0e:1a:
0a:c9:f5:3a
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjAyMTcwMjAxNDNaFw0yMzAyMTcwMjAxNDNaMBgxFjAU
BgNVBAMMDTYyMGRhYzhjLWQ2MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/JRyb3JQZp7d0tFbGR+UCunm4LBqL24DsWRrM15v8Ssc7ojBHaV7ZGfse
Rc+DARt9FxxHVbq1RSr4mDoUCr+barYdMf2mZstQlurXjXvO5bf4qZjlTcuZTGob
WeoER5rn/NqEm980Q0+AtrPxy+16IGg5c4WctjOjOyv3uGJtyweKDh3FHxm+nqVx
be43FoeQ/xj+6XO9jlb3rV/914cPaPffF1TpPDVMzs3ZVavJYwWxsPy/PPCNL/em
FPhHVWusJmzAGJmT334Sqx6yPTT+DkYJvb5c9Oh2kTBRftlZJS3RuAh+PShbrALq
Ksmi2vRbGfqMigGUeqUZG10gVUv9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUffUa
050nIOaPQaeSmCa59hU4+7QwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFLzkwQjg3QUVDOEY5NTExRUNBNDVGODc4RTVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBAGFlS3b4BW4WhHie/mIO2y+FD3MwiUGVjIeVYfFX3ZbG2s/8ndis
KPZEjyIJllH/YMzAfwZrAs2twua4p59998dCiuL2JvlcsVuT0Uw+vMT0sCyfvgfk
PCHv5IGeoZdYjrcFh5GurIOqO1mf9sTvpCdM30R7kq80JteGpOzODpRg4KtLQssv
P6dV/5ZSNjqIaKngPPlAUJQiCLS00vHSwVzRoeXTYsO2/PA7G6D9byem3hx1VMS8
YvEWeJsMo0PT9dz7RogDmHnCHWVrEGBCZozwgAFikQJSBZIJhyMYTP1sW/9HLTBe
LmPK+vFtRRvUtcx5L5xgTJn4rDUOGgrJ9To=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org