Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/ACEA1ECCC82111EC8451E27FF1222468.roa
File: ACEA1ECCC82111EC8451E27FF1222468.roa (raw, json)
Hash identifier: XvI372WItsMQVgy75JxreS1ERv/ddydHP4kvnnfHc5A=
Subject key identifier: 2E:A1:AA:88:82:C7:79:A4:97:C8:E1:E8:2B:AD:E3:30:4B:FE:18:E4
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0438
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/ACEA1ECCC82111EC8451E27FF1222468.roa
Signing time: Sat 30 Apr 2022 01:05:50 +0000
ROA not before: Sat 30 Apr 2022 01:05:46 +0000
ROA not after: Sun 30 Apr 2023 01:05:46 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080 (0x438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 30 01:05:46 2022 GMT
Not After : Apr 30 01:05:46 2023 GMT
Subject: CN=626c8b6e-c1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:c6:46:c0:64:5f:91:da:1e:f1:b6:ff:14:
e7:6e:11:56:15:08:0a:cd:a8:4b:ba:34:fa:4b:5d:
67:01:34:80:69:7e:58:7f:ec:d0:3f:4b:6f:59:2f:
76:90:70:f8:d2:0e:54:54:06:9f:1f:e9:73:a0:5d:
5a:82:38:bf:a1:99:f5:8b:ca:10:10:41:92:b9:7c:
16:ea:6f:64:91:c8:60:aa:3a:11:07:fd:2c:d7:6e:
a0:55:1c:c3:c5:a4:85:30:b2:f1:cf:b5:04:6b:13:
49:e4:c6:61:8b:4f:56:c7:96:8c:d0:0e:83:66:d1:
ec:dc:16:88:e2:f6:0d:ea:80:2d:74:a3:a8:3a:6b:
64:0c:9b:11:e8:e5:ae:8b:b4:8d:af:36:fa:b6:53:
72:9c:d8:68:ff:b4:94:e2:92:97:02:ac:65:4a:f7:
9d:1f:a1:4f:be:6c:9b:fa:ce:31:9d:d1:b4:66:45:
f0:23:86:e7:ee:8e:0e:4b:44:e0:9f:15:8a:72:18:
1d:1c:84:a9:f9:29:e1:7c:ab:fb:c4:b3:48:05:96:
4f:c9:38:71:7d:f4:37:95:66:3b:ff:c4:14:e2:d5:
19:be:4f:ef:03:cb:7b:7d:4c:36:48:2b:01:4d:ec:
a2:ab:4c:49:97:a4:a9:ed:bd:41:8c:ba:f4:30:e9:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A1:AA:88:82:C7:79:A4:97:C8:E1:E8:2B:AD:E3:30:4B:FE:18:E4
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/ACEA1ECCC82111EC8451E27FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
6d:65:5b:2f:b9:f9:04:e1:e5:36:2e:e4:c7:f8:7d:8d:62:9e:
31:c6:b7:79:2f:50:84:c9:6b:c5:9a:6f:a1:88:d1:e2:5d:b4:
56:88:c3:b1:7d:79:e1:db:39:b8:83:dc:38:2c:dd:26:ce:45:
d2:53:72:3c:93:d1:0b:ee:08:ae:c8:bc:d8:3e:7c:b1:85:d1:
2f:07:a0:a4:bd:74:4a:93:c6:75:4f:9e:50:fe:cc:0c:17:1c:
20:5d:a2:75:48:ba:c0:4b:6a:dd:28:4e:6c:66:32:3f:05:4c:
ff:6e:c9:72:31:c5:c4:4a:6c:9f:1d:e5:c5:8d:ba:b7:de:1b:
f4:da:04:3c:0f:ee:79:20:e1:d0:70:8f:ed:71:dd:64:89:c7:
8f:6a:6d:86:de:98:84:43:a6:46:95:34:cb:c3:a6:a1:89:98:
ef:53:54:f3:a4:8c:e0:d1:97:2b:77:d3:14:b9:4e:09:54:c4:
c6:95:1b:41:24:dd:85:fe:b3:8a:db:18:96:44:ed:b3:5d:9d:
5e:78:89:8a:52:67:5a:de:a6:fd:3f:69:5c:09:34:27:19:c8:
5b:a5:6b:1b:8c:8c:a3:40:8a:21:30:ca:e0:49:28:ab:f6:d8:
e2:99:0f:95:d2:2d:f5:05:90:ed:b4:b8:0c:78:23:5a:91:da:
bf:bd:e2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org