Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/CF3AB6E4D40111EC95DA83DDF1222468.roa
File: CF3AB6E4D40111EC95DA83DDF1222468.roa (raw, json)
Hash identifier: bTA9bDYFtN/RRD2iyLETlGQzXmsamcP1LiYn12OoX3A=
Subject key identifier: 89:43:DC:3F:F2:16:FC:57:00:C6:53:AD:DA:BB:73:E8:9C:B6:36:FB
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0497
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/CF3AB6E4D40111EC95DA83DDF1222468.roa
Signing time: Sun 15 May 2022 03:47:58 +0000
ROA not before: Sun 15 May 2022 03:47:52 +0000
ROA not after: Mon 15 May 2023 03:47:52 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1175 (0x497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 15 03:47:52 2022 GMT
Not After : May 15 03:47:52 2023 GMT
Subject: CN=628077ee-3c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:c7:94:3c:f1:5f:95:a4:9b:98:71:07:54:
59:7d:35:c1:7d:01:9e:44:35:c7:61:68:3d:8f:c7:
ac:79:15:cb:70:fa:6d:99:3e:49:6d:62:36:f4:7c:
a5:07:34:a1:5d:b2:59:7c:c1:4b:8b:71:4c:e7:c0:
b6:02:86:6d:21:9f:70:57:b1:0a:85:70:07:7a:c5:
a7:49:b4:eb:d5:6b:2d:64:d9:53:b3:13:29:57:34:
48:b7:51:ff:63:da:db:85:f6:99:7a:8f:2c:7d:b1:
0a:98:fd:fa:d1:01:b0:76:3e:38:96:62:73:e0:bc:
08:2f:9a:5e:f1:b2:f8:53:fc:f3:7a:71:eb:23:cf:
5e:8f:25:d1:ba:7a:00:3b:c3:78:ea:2b:f0:48:2a:
05:b4:4f:e5:a6:63:b8:7e:bc:56:ce:c5:e9:74:47:
5a:67:93:5d:35:f2:1f:70:77:97:fd:de:dc:99:ab:
e2:3a:cf:a6:37:90:50:91:04:7d:52:4d:5d:c0:00:
e9:1a:4e:bb:83:e3:d5:97:15:85:45:82:ba:00:c9:
36:5a:ea:a2:f9:e2:f2:71:5b:bc:83:f3:5f:72:9a:
98:16:24:11:e7:24:da:4c:91:5e:01:c7:1a:bf:97:
3e:b6:d9:ca:6d:fc:aa:7e:03:d7:37:0f:09:c2:e2:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:43:DC:3F:F2:16:FC:57:00:C6:53:AD:DA:BB:73:E8:9C:B6:36:FB
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/CF3AB6E4D40111EC95DA83DDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
a8:40:16:4d:7c:64:2d:00:bf:7b:5f:f1:8b:89:a1:70:de:99:
db:0a:99:bf:28:d8:2b:2c:b9:bc:da:7e:88:27:0f:5c:ba:92:
de:11:d2:43:73:a3:61:58:b4:ba:2c:bd:b5:c4:f9:f2:db:60:
15:8a:8b:54:d1:7c:fd:d7:2d:61:58:4e:9f:8e:d3:5b:84:69:
2e:93:36:cb:b8:71:57:73:44:28:f8:44:dd:dc:d7:da:ce:8f:
eb:a9:70:cc:be:7c:79:33:c2:ae:51:5d:ea:1f:3b:f6:25:57:
1e:48:d9:aa:3b:ec:33:69:91:a5:e7:46:bd:ef:5d:b8:fe:b4:
86:38:8e:b6:e6:83:98:f5:9d:e6:c9:50:bb:76:5e:7f:85:b6:
75:ea:19:3d:8f:40:1b:b1:af:7e:45:d2:5d:a3:f1:29:12:e7:
b7:89:c1:b2:01:dc:46:5a:86:cc:73:22:46:5b:71:7f:0d:4a:
1f:4a:0d:76:9c:fb:d6:66:fb:26:29:ec:de:71:0f:bf:70:0e:
87:b8:ba:d4:a0:bd:2e:f5:ea:08:d5:28:6d:2b:3e:14:08:a2:
bf:1e:c4:d7:26:62:11:fc:17:2d:cd:7d:81:66:92:e5:61:4d:
0f:fc:43:6b:95:46:44:ae:5d:f3:64:ce:52:36:e6:b5:88:09:
87:c2:16:99
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjA1MTUwMzQ3NTJaFw0yMzA1MTUwMzQ3NTJaMBgxFjAU
BgNVBAMMDTYyODA3N2VlLTNjMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDbceUPPFflaSbmHEHVFl9NcF9AZ5ENcdhaD2Px6x5Fctw+m2ZPkltYjb0
fKUHNKFdsll8wUuLcUznwLYChm0hn3BXsQqFcAd6xadJtOvVay1k2VOzEylXNEi3
Uf9j2tuF9pl6jyx9sQqY/frRAbB2PjiWYnPgvAgvml7xsvhT/PN6cesjz16PJdG6
egA7w3jqK/BIKgW0T+WmY7h+vFbOxel0R1pnk1018h9wd5f93tyZq+I6z6Y3kFCR
BH1STV3AAOkaTruD49WXFYVFgroAyTZa6qL54vJxW7yD819ympgWJBHnJNpMkV4B
xxq/lz622cpt/Kp+A9c3DwnC4mYRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiUPc
P/IW/FcAxlOt2rtz6Jy2NvswHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFL0NGM0FCNkU0RDQwMTExRUM5NURBODNEREYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBAKhAFk18ZC0Av3tf8YuJoXDemdsKmb8o2CssubzafognD1y6kt4R
0kNzo2FYtLosvbXE+fLbYBWKi1TRfP3XLWFYTp+O01uEaS6TNsu4cVdzRCj4RN3c
19rOj+upcMy+fHkzwq5RXeofO/YlVx5I2ao77DNpkaXnRr3vXbj+tIY4jrbmg5j1
nebJULt2Xn+FtnXqGT2PQBuxr35F0l2j8SkS57eJwbIB3EZahsxzIkZbcX8NSh9K
DXac+9Zm+yYp7N5xD79wDoe4utSgvS716gjVKG0rPhQIor8exNcmYhH8Fy3NfYFm
kuVhTQ/8Q2uVRkSuXfNkzlI25rWICYfCFpk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org