Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A1DCE4E6F74D11ECBF662F8AF1222468.roa
File: A1DCE4E6F74D11ECBF662F8AF1222468.roa (raw, json)
Hash identifier: A9a5B5kwxe4c4pqO8QGKkN7I0dVkN/ur3tRHgH+Fb+s=
Subject key identifier: 61:58:C0:78:FF:01:A8:7D:7E:77:70:63:D9:9A:02:0E:55:07:7A:7B
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 05D0
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A1DCE4E6F74D11ECBF662F8AF1222468.roa
Signing time: Wed 29 Jun 2022 01:48:54 +0000
ROA not before: Wed 29 Jun 2022 01:48:50 +0000
ROA not after: Thu 29 Jun 2023 01:48:50 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Jun 29 01:48:50 2022 GMT
Not After : Jun 29 01:48:50 2023 GMT
Subject: CN=62bbaf86-de30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:ab:1f:41:25:e0:80:22:f6:fb:2d:3c:f8:
28:bc:e6:1f:32:c6:c1:b5:a7:11:c6:fc:1e:25:5c:
32:f3:d6:64:ea:15:16:e6:42:d3:57:fe:9c:67:1d:
0b:6f:d5:63:c8:58:62:41:82:91:25:19:c8:95:df:
84:c9:5d:7d:29:cd:f9:84:06:e8:14:44:6a:da:bb:
96:4c:35:72:96:d2:c7:d8:b3:29:b1:1f:e5:57:0a:
d3:da:d5:36:83:57:68:81:71:88:43:14:88:fd:07:
74:92:02:11:e4:74:3c:b2:56:60:33:ed:ef:ee:62:
8a:8f:2b:62:fe:3b:02:f9:6c:e9:b1:19:20:3f:78:
39:22:e3:15:04:f1:82:92:48:b7:9a:1a:28:c3:f5:
01:d2:8d:e1:95:ce:c0:44:52:c2:44:a5:c3:69:b8:
ea:10:cd:6d:c2:0c:15:6d:45:50:48:9e:19:2c:3b:
a1:7d:1b:2a:31:13:1d:e2:6f:f2:7a:8a:46:b8:f3:
a5:32:b4:b3:82:98:50:70:c2:48:00:20:80:0c:0c:
a2:85:bf:f4:68:a1:06:db:9f:5e:27:66:ae:2d:a2:
aa:85:26:a7:65:7c:3b:dd:37:ba:5f:20:2e:56:a1:
a0:e7:05:b0:bb:85:81:ee:8c:cb:ff:40:24:a6:98:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:58:C0:78:FF:01:A8:7D:7E:77:70:63:D9:9A:02:0E:55:07:7A:7B
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A1DCE4E6F74D11ECBF662F8AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
51:80:fc:e6:b4:9f:6b:9f:63:28:85:8a:86:82:58:df:47:5b:
6b:fa:03:4a:44:d6:68:96:f8:b9:21:27:06:0c:5b:b7:67:84:
d2:11:75:ec:c4:c4:e6:f7:75:b6:35:bf:77:47:60:1d:99:6c:
52:5b:e3:8d:ef:90:f2:14:f7:0d:6c:85:3a:f6:cb:38:0b:c1:
4a:33:f7:3a:f3:54:4b:82:5d:38:fb:2b:06:00:be:45:7e:f8:
23:d0:4f:e9:08:60:65:c4:7f:9e:e6:8e:a1:93:32:22:4f:79:
0a:20:66:21:6b:62:f3:4c:5a:96:e9:e9:c4:ff:ab:2c:39:0a:
0b:14:9e:cc:06:02:e0:b6:81:77:41:3e:56:e0:cc:71:a0:54:
b7:0f:cd:9f:bb:5f:29:5c:e8:19:52:8d:4b:d8:62:46:03:f2:
6a:87:a4:57:26:af:b4:d7:de:3c:56:a1:eb:5e:47:67:78:ad:
a6:45:99:18:58:5c:d2:93:c1:1a:dd:5e:e4:85:f8:3c:66:e2:
98:e6:df:1d:db:06:3b:74:99:08:a1:6e:1d:60:46:5d:34:c8:
28:10:f0:8a:68:68:8a:71:ea:04:b4:42:bd:df:d8:11:7f:93:
47:cd:e1:5a:21:ca:0c:b0:e3:fb:9e:a9:cf:d2:4b:74:82:0f:
d7:1e:d3:1d
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBdAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjA2MjkwMTQ4NTBaFw0yMzA2MjkwMTQ4NTBaMBgxFjAU
BgNVBAMMDTYyYmJhZjg2LWRlMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDToasfQSXggCL2+y08+Ci85h8yxsG1pxHG/B4lXDLz1mTqFRbmQtNX/pxn
HQtv1WPIWGJBgpElGciV34TJXX0pzfmEBugURGrau5ZMNXKW0sfYsymxH+VXCtPa
1TaDV2iBcYhDFIj9B3SSAhHkdDyyVmAz7e/uYoqPK2L+OwL5bOmxGSA/eDki4xUE
8YKSSLeaGijD9QHSjeGVzsBEUsJEpcNpuOoQzW3CDBVtRVBInhksO6F9GyoxEx3i
b/J6ika486UytLOCmFBwwkgAIIAMDKKFv/RooQbbn14nZq4toqqFJqdlfDvdN7pf
IC5WoaDnBbC7hYHujMv/QCSmmLfTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYVjA
eP8BqH1+d3Bj2ZoCDlUHenswHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFL0ExRENFNEU2Rjc0RDExRUNCRjY2MkY4QUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBAFGA/Oa0n2ufYyiFioaCWN9HW2v6A0pE1miW+LkhJwYMW7dnhNIR
dezExOb3dbY1v3dHYB2ZbFJb443vkPIU9w1shTr2yzgLwUoz9zrzVEuCXTj7KwYA
vkV++CPQT+kIYGXEf57mjqGTMiJPeQogZiFrYvNMWpbp6cT/qyw5CgsUnswGAuC2
gXdBPlbgzHGgVLcPzZ+7Xylc6BlSjUvYYkYD8mqHpFcmr7TX3jxWoeteR2d4raZF
mRhYXNKTwRrdXuSF+Dxm4pjm3x3bBjt0mQihbh1gRl00yCgQ8IpoaIpx6gS0Qr3f
2BF/k0fN4Vohygyw4/ueqc/SS3SCD9ce0x0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org