Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E3C61564322E11ED8DBB5890F1222468.roa
File: E3C61564322E11ED8DBB5890F1222468.roa (raw, json)
Hash identifier: MsAQYPINFQAxLuWbhFPimatrJ/8Wy769lh+9PImpsdw=
Subject key identifier: F8:41:D4:66:79:EC:3D:8F:FD:86:7B:4A:1C:54:B5:3E:38:4D:5D:F7
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 06D1
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E3C61564322E11ED8DBB5890F1222468.roa
Signing time: Mon 12 Sep 2022 00:07:29 +0000
ROA not before: Mon 12 Sep 2022 00:00:24 +0000
ROA not after: Tue 12 Sep 2023 00:00:24 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745 (0x6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Sep 12 00:00:24 2022 GMT
Not After : Sep 12 00:00:24 2023 GMT
Subject: CN=631e7841-0a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:f2:55:61:ce:c7:ec:5b:7e:b4:1d:7e:9e:
bb:55:f6:51:98:4d:fc:6d:5a:89:59:a1:f3:ae:f4:
44:c6:d7:a8:53:1e:61:db:aa:08:17:e5:76:f6:5d:
96:b0:6e:12:bd:61:1c:48:58:35:1c:be:e2:37:a2:
ac:65:ba:35:2a:53:6d:91:9d:33:d3:ac:b4:b4:4e:
51:d4:b8:ee:73:08:5c:f0:f4:ab:1e:03:e9:ba:a4:
ca:94:7e:91:49:61:4a:f0:9f:a2:cb:a2:df:0c:83:
a7:db:99:52:75:59:ba:ea:ca:d6:f2:e2:94:fd:27:
66:46:02:04:f5:cf:d2:04:c1:59:0c:4c:a2:ec:ef:
1d:9e:b5:d4:e5:30:08:de:ff:eb:8a:c8:2c:57:99:
7e:fe:88:cb:f2:eb:fe:58:9f:51:c6:d0:7e:07:0f:
c3:3a:96:95:33:71:ba:f7:63:8f:e6:75:4f:7a:4b:
c9:26:4c:c1:6b:fd:b0:46:7c:f9:5b:ea:b2:15:08:
50:5d:14:2a:1e:66:83:0f:8a:1c:5c:4e:d7:8a:37:
f9:e9:fd:4a:f3:e9:32:57:4d:22:dc:5e:51:97:92:
34:c3:da:ef:f8:2f:d1:ac:7f:d8:c8:fa:ce:2c:cb:
31:1a:da:71:40:86:60:f1:2c:3d:6f:a2:a5:1b:bd:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:41:D4:66:79:EC:3D:8F:FD:86:7B:4A:1C:54:B5:3E:38:4D:5D:F7
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E3C61564322E11ED8DBB5890F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
59:9f:3e:81:e9:43:fc:18:ee:20:65:d4:18:26:23:34:9a:20:
9d:96:d5:8a:59:3a:df:4d:db:e6:a5:c5:a4:52:ff:0e:3b:c5:
47:c0:39:a0:92:0f:b1:cc:ce:5c:be:63:68:11:0c:66:f4:a1:
db:4a:54:0b:18:da:ee:c6:21:ec:7a:38:0d:0e:18:ab:c6:37:
4f:f9:15:02:08:10:33:83:81:b2:90:00:ab:86:b9:cc:d2:f2:
53:71:24:e0:af:bf:3e:57:37:73:51:6e:76:5c:e8:ac:04:b7:
99:10:50:5f:d3:32:3f:ad:ff:0a:b7:21:f8:bf:15:5a:c7:86:
9c:3d:98:4f:dd:b6:4d:ab:4a:11:01:77:1f:c6:37:f3:86:b8:
0d:45:29:b8:48:e4:d6:af:58:ec:33:18:4e:37:4b:2c:22:c1:
9e:80:78:8c:3d:e4:ab:ac:98:80:d4:0b:f2:21:4c:a5:dc:6e:
9d:8d:33:03:43:0b:8e:e7:ed:03:32:be:27:79:a6:c1:08:0a:
d6:87:81:d5:ac:f4:ee:fc:6d:90:cc:15:33:eb:5f:8d:49:cd:
6a:81:e3:8c:46:9e:b3:c3:fc:ed:de:0e:52:35:36:f9:de:ab:
f8:a5:ac:02:c1:c7:67:b4:03:7a:2f:4b:d8:42:99:72:fb:45:
66:0d:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org