Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A997FECAE16B11EC9DD91D90F1222468.roa
File: A997FECAE16B11EC9DD91D90F1222468.roa (raw, json)
Hash identifier: VVE4+ehkKgDnX7wK8yyRhnfPQ+XJeXvHIWs94zcAs4Q=
Subject key identifier: 9B:0B:53:7C:0F:79:DB:32:C7:D3:F9:26:D9:38:61:F2:BF:0E:F8:64
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 050F
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A997FECAE16B11EC9DD91D90F1222468.roa
Signing time: Wed 01 Jun 2022 05:28:27 +0000
ROA not before: Wed 01 Jun 2022 05:28:22 +0000
ROA not after: Thu 01 Jun 2023 05:28:22 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1295 (0x50f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Jun 1 05:28:22 2022 GMT
Not After : Jun 1 05:28:22 2023 GMT
Subject: CN=6296f8fb-ef25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:eb:44:47:38:a5:28:89:4f:d7:a9:84:ef:
db:9a:e5:ca:29:47:83:d9:c3:88:e4:c9:d1:a9:19:
c5:0f:c4:2f:05:5d:cc:9b:c3:01:41:5e:57:ab:bf:
ee:06:cc:60:db:77:8b:a7:f6:29:db:d4:76:82:ac:
85:ca:38:bb:b6:21:78:4a:b9:e6:fe:cf:a6:0b:f8:
46:ff:eb:1f:37:3e:c7:cb:72:11:2a:15:16:9b:1b:
e6:3a:d5:e9:1f:d6:73:98:8d:3b:a3:ee:16:01:5d:
3a:31:2f:36:36:be:1e:a4:19:2d:00:79:fc:92:fb:
72:f5:0b:7f:b3:a8:5a:da:d5:31:95:49:e3:2e:0e:
de:74:b7:78:86:ef:b5:9e:97:d9:cb:ef:e4:ff:3e:
04:c9:67:29:e7:3d:34:a5:8b:b2:87:0e:5a:ab:47:
c4:af:f0:40:1e:5c:de:a6:2c:47:a1:0b:6e:f9:be:
43:e7:bf:47:6d:71:48:e7:c7:df:39:c9:32:80:68:
ab:c3:da:7b:60:b1:8c:a4:ae:63:e0:7f:82:d4:a5:
13:06:05:35:0d:ef:e4:08:dc:69:ac:3c:30:b8:8c:
27:0a:d6:ad:19:94:30:52:9f:76:12:c6:aa:94:ed:
70:f4:d3:0a:1f:c6:20:04:f5:c3:63:1d:40:50:05:
1e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0B:53:7C:0F:79:DB:32:C7:D3:F9:26:D9:38:61:F2:BF:0E:F8:64
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A997FECAE16B11EC9DD91D90F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
9a:28:de:3d:6d:4f:70:04:59:cc:6e:3f:ae:86:8c:c4:42:15:
8c:45:05:91:60:6d:2e:0e:d6:b5:5a:61:13:b7:71:5a:fe:d0:
b2:00:a8:11:12:5d:f6:b9:b6:8a:67:f8:46:65:ff:d6:9e:4b:
cb:05:8d:91:85:eb:b6:9b:e3:01:1c:18:04:bc:59:5f:66:51:
6d:36:e0:78:e3:c4:9b:78:55:b5:73:fc:c1:82:f9:9e:fb:12:
4f:6b:a1:fe:21:c2:6d:82:4b:ab:d0:5b:c8:cb:c3:2c:9b:9e:
e0:6a:95:fa:6b:c5:32:d0:15:e9:a2:37:29:11:ad:9f:d7:fc:
f9:ca:92:4b:fa:68:0a:4f:45:3a:eb:14:c8:91:fe:7d:d8:a3:
23:93:0d:6c:f4:95:a0:9e:c7:93:e9:44:19:f1:99:d7:8e:a9:
01:50:0a:83:b0:a6:2c:ea:eb:a4:4e:6d:20:6b:fe:2c:71:f6:
15:52:e0:e7:5d:5f:c6:c3:6f:af:bc:a9:3d:9b:5c:f9:dc:6f:
55:bd:ce:15:11:b1:c5:b6:5e:68:79:2d:9a:0c:19:dd:5b:10:
5a:c7:24:4f:c9:1e:5d:c4:84:e4:62:fa:ce:fc:ca:d7:40:99:
01:3f:d1:38:30:6b:2c:53:09:8b:44:f1:c1:5b:a2:90:bf:c0:
c2:14:0f:a8
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjA2MDEwNTI4MjJaFw0yMzA2MDEwNTI4MjJaMBgxFjAU
BgNVBAMMDTYyOTZmOGZiLWVmMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClr+tERzilKIlP16mE79ua5copR4PZw4jkydGpGcUPxC8FXcybwwFBXler
v+4GzGDbd4un9inb1HaCrIXKOLu2IXhKueb+z6YL+Eb/6x83PsfLchEqFRabG+Y6
1ekf1nOYjTuj7hYBXToxLzY2vh6kGS0AefyS+3L1C3+zqFra1TGVSeMuDt50t3iG
77Wel9nL7+T/PgTJZynnPTSli7KHDlqrR8Sv8EAeXN6mLEehC275vkPnv0dtcUjn
x985yTKAaKvD2ntgsYykrmPgf4LUpRMGBTUN7+QI3GmsPDC4jCcK1q0ZlDBSn3YS
xqqU7XD00wofxiAE9cNjHUBQBR61AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmwtT
fA952zLH0/km2Thh8r8O+GQwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFL0E5OTdGRUNBRTE2QjExRUM5REQ5MUQ5MEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBAJoo3j1tT3AEWcxuP66GjMRCFYxFBZFgbS4O1rVaYRO3cVr+0LIA
qBESXfa5topn+EZl/9aeS8sFjZGF67ab4wEcGAS8WV9mUW024HjjxJt4VbVz/MGC
+Z77Ek9rof4hwm2CS6vQW8jLwyybnuBqlfprxTLQFemiNykRrZ/X/PnKkkv6aApP
RTrrFMiR/n3YoyOTDWz0laCex5PpRBnxmdeOqQFQCoOwpizq66RObSBr/ixx9hVS
4OddX8bDb6+8qT2bXPncb1W9zhURscW2Xmh5LZoMGd1bEFrHJE/JHl3EhORi+s78
ytdAmQE/0TgwayxTCYtE8cFbopC/wMIUD6g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org