Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C5F74A7EA7E311EC85C1BE6B5A40D577.roa
File: C5F74A7EA7E311EC85C1BE6B5A40D577.roa (raw, json)
Hash identifier: pXIoGs4VbCAnPCqTtgQYW7CAsmG3aqmiJcmWD/ZsLJU=
Subject key identifier: 08:47:01:A3:F9:4B:ED:A2:C0:5A:AC:9B:5D:D8:2D:05:B5:37:CD:85
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0321
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C5F74A7EA7E311EC85C1BE6B5A40D577.roa
Signing time: Sun 20 Mar 2022 00:22:06 +0000
ROA not before: Sun 20 Mar 2022 00:00:02 +0000
ROA not after: Mon 20 Mar 2023 00:00:02 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 801 (0x321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Mar 20 00:00:02 2022 GMT
Not After : Mar 20 00:00:02 2023 GMT
Subject: CN=623673ae-cd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:d3:52:cd:6a:72:e2:27:e6:10:a4:e4:f4:
d7:17:9e:b7:27:f0:02:f2:46:b8:a3:3f:0b:54:12:
51:fa:52:36:33:7b:17:18:49:b3:7f:35:15:f8:74:
5f:65:40:0c:17:82:07:97:aa:3c:00:9c:3e:31:d1:
c0:8f:fd:c3:1c:6a:58:7c:13:d1:75:40:48:40:11:
29:de:28:83:85:ef:b7:60:aa:cb:b5:b9:7c:89:6e:
64:3a:e8:9b:70:81:03:39:0e:0d:7e:b2:55:35:84:
46:4d:08:1e:4a:c6:0b:ae:85:f8:50:98:e5:44:23:
cf:15:7a:fe:c2:86:ba:44:68:92:a3:03:f3:74:62:
7f:ff:df:94:91:b3:27:12:c4:6f:d9:08:d0:da:ab:
e5:34:ad:e0:b5:03:b1:ed:48:c7:40:b7:16:90:c1:
aa:5d:45:a9:17:02:6c:5f:c8:b7:35:e6:29:23:46:
c6:4f:e9:65:d6:c6:1d:38:db:3b:ef:41:21:79:b8:
ca:a4:a9:00:45:aa:1a:e1:63:02:0c:93:59:59:b3:
81:fe:9a:63:24:cb:2e:d8:73:e3:3e:0b:90:89:1c:
b5:60:da:0e:14:03:9c:ac:89:36:c3:1a:28:c3:b4:
db:5f:5d:fa:4d:5c:09:9b:22:c9:83:c6:35:8b:19:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:47:01:A3:F9:4B:ED:A2:C0:5A:AC:9B:5D:D8:2D:05:B5:37:CD:85
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C5F74A7EA7E311EC85C1BE6B5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
2e:a9:cc:9a:e8:e1:1e:d1:be:07:68:8e:b5:92:05:0c:b6:2e:
49:56:7c:3b:7e:a5:f0:f1:88:16:55:24:7f:82:8a:9f:e1:f7:
9d:5e:e4:5b:fd:4e:9c:1d:d0:60:44:e7:46:7d:62:e9:f4:eb:
af:3d:df:a1:db:e5:94:b8:0b:84:d6:e6:d9:3d:2c:a4:e2:3b:
a6:76:da:01:10:ba:67:79:76:00:e3:63:c1:88:b5:d0:dc:1a:
fa:1d:86:02:85:a1:4c:ef:8f:6d:e2:05:93:d3:c3:18:11:76:
ab:9e:8c:1d:bc:c0:c7:b6:bf:70:05:1f:7e:60:dd:3e:f8:37:
66:44:05:40:88:9b:79:ba:f3:f1:34:7b:3d:34:0e:86:7b:c5:
c1:6a:df:40:65:12:f9:70:e3:83:36:97:ca:15:f1:2b:36:54:
43:f8:80:50:17:89:9b:dd:ab:e6:40:fd:1e:d2:5d:c9:19:39:
07:19:60:04:43:ca:5e:00:f0:60:9f:40:d1:d4:b5:74:01:aa:
6a:dd:e6:d6:44:a2:5d:e7:ad:e3:24:05:2b:74:7a:e0:3b:fc:
89:a7:c1:63:04:70:b7:eb:40:a4:0b:13:19:16:10:d5:af:75:
75:3b:90:9e:ca:f5:4a:cc:c5:2a:f4:68:17:59:f2:62:37:0f:
a9:3d:e9:04
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjAzMjAwMDAwMDJaFw0yMzAzMjAwMDAwMDJaMBgxFjAU
BgNVBAMMDTYyMzY3M2FlLWNkMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC34dNSzWpy4ifmEKTk9NcXnrcn8ALyRrijPwtUElH6UjYzexcYSbN/NRX4
dF9lQAwXggeXqjwAnD4x0cCP/cMcalh8E9F1QEhAESneKIOF77dgqsu1uXyJbmQ6
6JtwgQM5Dg1+slU1hEZNCB5KxguuhfhQmOVEI88Vev7ChrpEaJKjA/N0Yn//35SR
sycSxG/ZCNDaq+U0reC1A7HtSMdAtxaQwapdRakXAmxfyLc15ikjRsZP6WXWxh04
2zvvQSF5uMqkqQBFqhrhYwIMk1lZs4H+mmMkyy7Yc+M+C5CJHLVg2g4UA5ysiTbD
GijDtNtfXfpNXAmbIsmDxjWLGUUZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCEcB
o/lL7aLAWqybXdgtBbU3zYUwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFL0M1Rjc0QTdFQTdFMzExRUM4NUMxQkU2QjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBAC6pzJro4R7RvgdojrWSBQy2LklWfDt+pfDxiBZVJH+Cip/h951e
5Fv9Tpwd0GBE50Z9Yun0668936Hb5ZS4C4TW5tk9LKTiO6Z22gEQumd5dgDjY8GI
tdDcGvodhgKFoUzvj23iBZPTwxgRdquejB28wMe2v3AFH35g3T74N2ZEBUCIm3m6
8/E0ez00DoZ7xcFq30BlEvlw44M2l8oV8Ss2VEP4gFAXiZvdq+ZA/R7SXckZOQcZ
YARDyl4A8GCfQNHUtXQBqmrd5tZEol3nreMkBSt0euA7/ImnwWMEcLfrQKQLExkW
ENWvdXU7kJ7K9UrMxSr0aBdZ8mI3D6k96QQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org