Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C3F253EC274311ED86EA38F7F1222468.roa
File: C3F253EC274311ED86EA38F7F1222468.roa (raw, json)
Hash identifier: kv8+BQZ4tvevfiynqC75EnBvmHpPslCoUZ82Bc7/fWA=
Subject key identifier: BC:D7:53:EB:70:2A:BC:4D:26:76:23:EA:F5:65:28:AB:41:AF:2D:B7
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0670
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C3F253EC274311ED86EA38F7F1222468.roa
Signing time: Mon 29 Aug 2022 02:39:12 +0000
ROA not before: Mon 29 Aug 2022 02:39:07 +0000
ROA not after: Tue 29 Aug 2023 02:39:07 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1648 (0x670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Aug 29 02:39:07 2022 GMT
Not After : Aug 29 02:39:07 2023 GMT
Subject: CN=630c26d0-5eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:04:77:92:1b:70:0f:64:ed:b1:9a:eb:50:21:
f7:e6:af:04:db:25:eb:d6:23:33:3d:e1:38:8e:65:
cc:de:b1:f7:b7:a9:37:fc:1c:86:29:ff:48:eb:43:
b2:6a:06:74:3c:3c:61:51:47:f1:c8:90:68:dc:c5:
bb:07:d9:10:42:f3:ef:53:c5:a1:6d:aa:1a:11:4f:
e4:49:19:7d:22:d1:be:9f:a7:63:9c:9b:51:d3:35:
71:ac:46:1a:0b:1e:f4:a2:e9:c5:b1:7c:e6:95:8a:
31:77:4e:ab:af:bb:98:aa:e3:81:48:09:ad:61:e6:
d6:a0:6a:41:8c:c1:1a:aa:a5:06:f1:3d:59:59:1c:
75:27:db:02:1a:1d:e7:58:db:ce:08:6c:c0:23:f4:
1e:30:88:4c:6c:3c:88:94:3d:07:83:24:1a:bb:18:
c2:31:f3:b7:ec:13:34:b7:66:77:86:3c:2f:18:fe:
f5:31:fb:9c:8f:9b:77:93:a0:ca:24:c2:9f:7d:ba:
05:60:d0:02:77:5e:51:4b:6f:00:57:17:be:23:96:
95:ab:12:80:eb:f4:37:83:0e:36:b6:81:2a:52:49:
06:aa:6c:69:8a:d5:09:32:80:75:fd:3f:02:6c:f0:
de:0a:33:4c:b6:e0:d8:8e:12:04:95:25:42:91:39:
29:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D7:53:EB:70:2A:BC:4D:26:76:23:EA:F5:65:28:AB:41:AF:2D:B7
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C3F253EC274311ED86EA38F7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
a3:2b:03:1a:ee:6c:d7:06:bf:20:66:5b:e9:7f:9e:61:0e:01:
d6:a8:15:06:d3:50:df:18:72:db:60:64:91:63:64:c7:74:a9:
b0:15:79:c9:66:dd:79:34:6c:91:df:ec:f0:e3:b9:e2:be:61:
2a:15:13:48:93:0e:5c:77:30:9b:e0:ab:5e:14:31:07:eb:c0:
be:ed:db:68:cc:b6:74:67:f9:e9:9a:11:09:40:9b:ba:88:bf:
1c:44:e8:46:c7:69:52:5a:03:94:ec:b5:23:ce:e8:62:40:f7:
08:41:07:57:c9:dd:31:d8:5e:9e:b0:6f:b0:ce:0f:36:19:f8:
ba:e1:76:1c:da:4f:0f:51:4f:14:f0:54:1b:c9:7b:44:02:fe:
51:eb:82:04:88:f1:5f:4a:9e:1c:97:7f:74:fe:7d:07:2c:90:
dc:92:a4:af:1d:5f:4b:2c:3b:9b:29:0c:75:de:1b:7d:ac:f9:
5e:d8:28:4e:80:f5:ed:49:ef:6a:0e:3a:7e:9e:16:3d:2e:96:
e4:e3:e5:22:67:86:b2:28:8f:3a:6d:7b:b9:aa:ee:4e:81:fb:
94:9c:c6:f7:ce:9a:98:22:a8:ac:8d:56:22:be:d9:8d:56:96:
7b:6f:21:04:3a:0e:99:74:29:7e:23:4e:a7:26:17:57:dd:e3:
ec:06:7c:42
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjA4MjkwMjM5MDdaFw0yMzA4MjkwMjM5MDdaMBgxFjAU
BgNVBAMMDTYzMGMyNmQwLTVlYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdBHeSG3APZO2xmutQIffmrwTbJevWIzM94TiOZczesfe3qTf8HIYp/0jr
Q7JqBnQ8PGFRR/HIkGjcxbsH2RBC8+9TxaFtqhoRT+RJGX0i0b6fp2Ocm1HTNXGs
RhoLHvSi6cWxfOaVijF3Tquvu5iq44FICa1h5tagakGMwRqqpQbxPVlZHHUn2wIa
HedY284IbMAj9B4wiExsPIiUPQeDJBq7GMIx87fsEzS3ZneGPC8Y/vUx+5yPm3eT
oMokwp99ugVg0AJ3XlFLbwBXF74jlpWrEoDr9DeDDja2gSpSSQaqbGmK1QkygHX9
PwJs8N4KM0y24NiOEgSVJUKROSknAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvNdT
63AqvE0mdiPq9WUoq0GvLbcwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFL0MzRjI1M0VDMjc0MzExRUQ4NkVBMzhGN0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBAKMrAxrubNcGvyBmW+l/nmEOAdaoFQbTUN8YcttgZJFjZMd0qbAV
eclm3Xk0bJHf7PDjueK+YSoVE0iTDlx3MJvgq14UMQfrwL7t22jMtnRn+emaEQlA
m7qIvxxE6EbHaVJaA5TstSPO6GJA9whBB1fJ3THYXp6wb7DODzYZ+LrhdhzaTw9R
TxTwVBvJe0QC/lHrggSI8V9KnhyXf3T+fQcskNySpK8dX0ssO5spDHXeG32s+V7Y
KE6A9e1J72oOOn6eFj0uluTj5SJnhrIojzpte7mq7k6B+5ScxvfOmpgiqKyNViK+
2Y1WlntvIQQ6Dpl0KX4jTqcmF1fd4+wGfEI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org