Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A4D896047A5711ECBC6359B45A40D577.roa
File: A4D896047A5711ECBC6359B45A40D577.roa (raw, json)
Hash identifier: r6qyoeEQ+2ZiUuUCnq0MoH9VwpanH4clMTMdRG9PfOI=
Subject key identifier: EE:88:49:B1:9B:92:EB:B5:F5:7D:67:80:EC:31:DC:6F:4F:5D:AC:9B
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 021D
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A4D896047A5711ECBC6359B45A40D577.roa
Signing time: Fri 21 Jan 2022 01:15:39 +0000
ROA not before: Fri 21 Jan 2022 01:15:34 +0000
ROA not after: Sat 21 Jan 2023 01:15:34 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Jan 21 01:15:34 2022 GMT
Not After : Jan 21 01:15:34 2023 GMT
Subject: CN=61ea093b-f0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:93:d5:78:e0:e0:3c:90:74:7e:9f:aa:8c:
b1:38:f4:18:69:a1:1e:90:62:f9:2b:9c:03:29:7e:
81:f1:21:d5:b3:4f:58:1e:16:f7:dc:d7:11:46:ea:
50:b3:a3:79:33:59:5f:ed:3b:1e:a7:a5:b8:b2:bd:
4c:9f:73:23:cc:08:6b:59:5d:37:96:cd:b1:4f:40:
60:32:90:3f:ba:45:27:c4:ea:9e:bc:e2:56:e9:76:
e6:8e:9e:cd:64:2c:e8:87:54:91:58:0c:bb:26:a0:
6d:50:24:57:fe:ef:d6:0f:e4:00:c5:92:01:ab:aa:
6a:ee:2f:be:f6:84:2d:f6:ae:91:d3:6a:7d:3a:f1:
22:c4:35:6c:d7:df:4f:2b:04:55:79:2a:ed:9e:6f:
eb:2e:2b:44:1c:15:ee:0d:dd:be:ce:50:81:d5:80:
71:8e:bf:88:1c:08:34:e1:bc:67:15:2e:cd:55:c6:
69:bd:70:3d:3b:0f:32:14:f6:7b:03:db:bc:dc:17:
2c:6b:01:59:4b:86:2a:5c:4a:55:91:46:4a:a1:b3:
ae:9d:7d:70:bb:1d:fb:f4:59:06:91:cf:21:cd:a6:
eb:c1:46:c9:f8:2c:2f:d3:0e:42:48:ab:01:3a:58:
e0:05:55:b8:c4:d1:0d:b3:e6:44:8d:33:ec:45:2f:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:88:49:B1:9B:92:EB:B5:F5:7D:67:80:EC:31:DC:6F:4F:5D:AC:9B
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A4D896047A5711ECBC6359B45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
46:7b:c2:d3:31:56:a1:ae:ac:03:e2:3e:9b:40:e5:ea:0e:42:
7c:35:3e:b4:db:82:c5:2b:75:d1:a8:1a:18:6a:42:01:ec:f9:
7e:48:fe:07:14:2c:0a:ad:cd:3e:f9:ff:3e:4c:22:00:fe:1a:
37:93:79:56:92:ae:1f:d2:b4:b3:db:fa:50:18:07:bc:75:cc:
75:46:9b:94:5b:5d:eb:2f:9e:39:42:fc:2b:f4:dc:6f:7b:0b:
31:b4:8b:4f:04:53:00:c2:70:a5:b7:29:9c:5f:a8:95:54:1b:
40:f4:61:97:ef:19:44:f9:7e:75:c8:ac:ca:e5:80:0f:23:44:
0e:97:1c:70:c0:2a:d2:1f:70:1e:47:83:e5:62:f9:b1:25:6e:
78:06:bd:0f:94:e0:d4:9f:95:9d:70:36:97:c7:9a:93:95:ee:
4f:e2:cc:92:19:12:af:19:b9:d7:1a:b8:20:a1:3f:8b:b9:2f:
65:20:dc:68:38:07:a0:c1:35:83:19:37:f9:d7:16:b6:c5:09:
b2:36:c2:ca:5f:d4:2e:5c:1f:11:d3:4d:e3:d8:91:ba:15:1a:
46:db:dc:1b:9a:4c:2f:10:be:5d:95:02:63:40:99:8e:43:04:
df:84:24:81:1b:a8:64:3d:03:0c:1d:fa:63:b3:27:26:76:08:
8e:ad:03:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org