Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E7BF1650906411ECB3C5B16E5A40D577.roa
File: E7BF1650906411ECB3C5B16E5A40D577.roa (raw, json)
Hash identifier: jSMl2uQJjB2h9uALIhMEuF5GKqeUGPL+6dwWpmNcu9k=
Subject key identifier: 62:C4:7B:EC:E1:07:CF:F2:A6:3F:B5:EB:DC:C4:FC:28:3A:95:42:02
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 02A4
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E7BF1650906411ECB3C5B16E5A40D577.roa
Signing time: Fri 18 Feb 2022 02:46:00 +0000
ROA not before: Fri 18 Feb 2022 02:45:55 +0000
ROA not after: Sat 18 Feb 2023 02:45:55 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676 (0x2a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Feb 18 02:45:55 2022 GMT
Not After : Feb 18 02:45:55 2023 GMT
Subject: CN=620f0868-0a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:73:2d:a6:15:ca:ec:c1:7c:74:9c:49:4e:
df:8d:3e:c6:18:f5:06:41:e1:51:90:a3:b8:fb:20:
bc:b3:97:a8:33:05:27:30:33:4d:76:6d:1e:da:b3:
90:d6:fe:dc:f5:64:4c:46:39:ed:df:92:c4:da:96:
33:f8:0a:dc:37:15:3d:1c:02:8a:a9:bd:5a:0d:a0:
2f:02:70:a1:8d:34:54:97:cc:3e:bd:c0:03:fa:ff:
60:6a:82:86:ae:6f:ab:5a:f3:5a:c1:f3:e6:29:aa:
a7:cd:0a:f8:95:fa:2e:63:a3:75:12:3a:a4:b5:b2:
d9:90:10:18:74:9e:10:b5:ce:b5:a4:55:38:b5:e4:
6c:12:28:b8:cb:7c:23:67:f4:ad:f4:8c:52:46:6f:
b2:bd:7b:76:84:ba:35:3a:e9:48:5e:eb:cc:99:c0:
61:9d:26:30:e3:47:be:36:d4:4a:1d:c1:d5:d8:ee:
34:ae:d8:f9:c9:19:d6:ba:3c:52:1b:5f:97:ff:0c:
61:07:e3:59:d8:63:c2:74:99:5e:52:ac:42:1b:15:
dc:3a:77:cc:c5:08:c2:4b:9e:4d:8a:a5:85:4d:47:
f9:2d:68:2a:9f:c8:f6:ec:f8:af:ff:c3:2d:b4:e7:
76:47:4c:73:6f:b3:3f:2a:9a:5e:02:bc:cd:4b:ac:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C4:7B:EC:E1:07:CF:F2:A6:3F:B5:EB:DC:C4:FC:28:3A:95:42:02
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E7BF1650906411ECB3C5B16E5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
31:f0:4f:a3:bc:23:8d:52:32:66:dd:3c:0b:ca:6d:88:45:f1:
9a:54:5a:a0:4e:15:05:fa:ba:90:d3:1d:a5:68:21:c9:80:04:
9a:76:08:ce:74:41:50:b3:b2:6a:4b:6a:4f:ad:08:5f:e4:6d:
bd:c3:82:25:03:25:0a:16:a7:93:5d:52:41:c4:f5:be:c0:af:
3b:f1:20:09:8c:15:d0:de:46:23:a5:df:e2:8e:42:ef:d4:9e:
6e:b0:3a:0c:cc:88:e8:fb:61:07:ac:58:a9:c5:bb:60:6c:4e:
68:b2:60:c9:c6:bc:14:18:e5:7e:a9:95:45:b9:39:0d:c3:51:
08:92:d0:9a:f8:8d:3e:2c:03:4a:4f:3f:51:36:74:ca:c9:e5:
51:27:8f:0d:71:9c:66:63:c2:96:c1:c5:d7:92:54:f7:04:1f:
b6:0e:8a:f0:10:c4:b4:4d:f6:b7:df:16:c5:f8:ce:fe:2e:be:
c7:e0:40:e7:e2:c8:96:67:b3:88:d8:fa:ac:3e:bb:aa:eb:fd:
a9:90:c3:aa:aa:ce:bb:16:ce:1b:53:ef:6a:c8:9f:6d:88:95:
f8:2b:5a:a1:fd:1e:3f:be:50:90:2a:9d:d0:82:13:76:78:66:
6e:73:e8:a3:8e:83:b5:a8:51:d2:7f:88:eb:61:ce:25:1d:dd:
78:0c:86:f2
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjAyMTgwMjQ1NTVaFw0yMzAyMTgwMjQ1NTVaMBgxFjAU
BgNVBAMMDTYyMGYwODY4LTBhMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCf7XMtphXK7MF8dJxJTt+NPsYY9QZB4VGQo7j7ILyzl6gzBScwM012bR7a
s5DW/tz1ZExGOe3fksTaljP4Ctw3FT0cAoqpvVoNoC8CcKGNNFSXzD69wAP6/2Bq
goaub6ta81rB8+YpqqfNCviV+i5jo3USOqS1stmQEBh0nhC1zrWkVTi15GwSKLjL
fCNn9K30jFJGb7K9e3aEujU66Uhe68yZwGGdJjDjR7421EodwdXY7jSu2PnJGda6
PFIbX5f/DGEH41nYY8J0mV5SrEIbFdw6d8zFCMJLnk2KpYVNR/ktaCqfyPbs+K//
wy2053ZHTHNvsz8qml4CvM1LrGQjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYsR7
7OEHz/KmP7Xr3MT8KDqVQgIwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFL0U3QkYxNjUwOTA2NDExRUNCM0M1QjE2RTVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBADHwT6O8I41SMmbdPAvKbYhF8ZpUWqBOFQX6upDTHaVoIcmABJp2
CM50QVCzsmpLak+tCF/kbb3DgiUDJQoWp5NdUkHE9b7ArzvxIAmMFdDeRiOl3+KO
Qu/Unm6wOgzMiOj7YQesWKnFu2BsTmiyYMnGvBQY5X6plUW5OQ3DUQiS0Jr4jT4s
A0pPP1E2dMrJ5VEnjw1xnGZjwpbBxdeSVPcEH7YOivAQxLRN9rffFsX4zv4uvsfg
QOfiyJZns4jY+qw+u6rr/amQw6qqzrsWzhtT72rIn22IlfgrWqH9Hj++UJAqndCC
E3Z4Zm5z6KOOg7WoUdJ/iOthziUd3XgMhvI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org