Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/ECEB06C0309B11EDB8B3B6DCF1222468.roa
File: ECEB06C0309B11EDB8B3B6DCF1222468.roa (raw, json)
Hash identifier: ZIs7nS5/Nks8yW/tmfnjNo8lDyHlcG2gDxTSwo4lBkg=
Subject key identifier: BB:66:C4:F0:A0:D3:5A:58:A7:B3:3E:E0:46:BA:2D:13:DA:4E:81:02
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 06C3
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/ECEB06C0309B11EDB8B3B6DCF1222468.roa
Signing time: Sat 10 Sep 2022 00:02:57 +0000
ROA not before: Sat 10 Sep 2022 00:00:52 +0000
ROA not after: Sun 10 Sep 2023 00:00:52 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1731 (0x6c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Sep 10 00:00:52 2022 GMT
Not After : Sep 10 00:00:52 2023 GMT
Subject: CN=631bd431-d577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:aa:6f:1f:38:3a:e8:bc:a5:52:35:ec:14:
66:9a:5f:68:bd:16:00:93:47:c7:4f:ea:8c:08:2f:
b4:05:da:a1:4f:d8:55:42:ec:39:b6:a2:44:a0:90:
38:d1:e2:31:4e:ce:ac:46:80:4c:55:4e:19:76:4f:
ae:ce:0a:8e:ab:a7:32:83:e2:ac:9a:94:7b:5c:0d:
c1:4c:a3:20:43:6c:10:ee:a7:7a:13:0b:a9:9e:cf:
fb:8d:6c:55:f5:18:c9:3b:0b:af:1d:30:d4:12:6d:
bd:d2:b1:50:6d:71:15:60:fa:e8:1f:21:40:d1:76:
5a:3e:e4:7a:50:d7:24:45:03:c5:54:4d:a3:d8:29:
d1:09:69:a5:c6:a1:81:1b:98:98:bc:39:69:b2:2f:
8b:d7:2a:50:97:9e:34:8e:6b:36:d9:89:37:1e:03:
84:52:60:d4:3e:66:0d:65:2f:1f:80:8b:d5:e6:ca:
75:02:3d:11:62:b8:04:20:bd:7e:ff:7a:45:41:d4:
7f:bf:2d:77:65:17:e6:4e:42:9a:0d:dc:bb:d9:94:
1a:c4:83:bb:ea:b3:14:4d:c7:1b:36:55:f5:b5:67:
64:88:ea:9e:b9:df:0d:8e:fa:d7:f8:da:98:1c:f1:
49:65:46:f3:2b:3d:4e:69:c9:b3:2d:90:a1:99:bb:
3f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:66:C4:F0:A0:D3:5A:58:A7:B3:3E:E0:46:BA:2D:13:DA:4E:81:02
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/ECEB06C0309B11EDB8B3B6DCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
5b:39:32:75:2d:b7:3b:b5:4b:eb:1d:da:1a:7b:c4:49:08:9b:
62:39:a3:e2:6a:54:b9:bf:1f:81:df:78:63:f0:16:1d:c5:be:
5e:d3:34:85:c9:77:5c:2c:c9:2b:43:55:a7:6b:76:78:39:47:
92:58:8d:5b:d7:27:a1:ff:04:4c:af:33:89:54:82:ef:73:c9:
53:1e:36:5e:80:cc:33:db:04:71:0e:78:ee:f2:62:e5:b2:d5:
66:0c:2f:80:94:f3:60:75:ae:ed:90:d6:31:46:11:3f:e6:95:
b4:c2:92:71:96:a3:6d:50:98:6a:cb:82:70:b8:a8:7c:f5:f7:
9f:1e:65:ce:af:07:95:43:9a:11:ec:ae:67:cb:67:2a:ba:04:
29:9d:8e:94:10:65:70:4b:60:92:ac:66:8d:99:ef:ec:91:f6:
a2:5b:98:0b:f5:32:0a:e8:c5:1a:55:60:06:de:b0:0f:14:09:
23:ed:50:9b:b2:a5:87:38:0f:c7:d4:19:22:1c:c2:02:1e:6a:
b2:84:bf:ae:53:65:93:06:a7:e7:0b:9d:bb:c7:01:ad:67:c8:
37:f0:a7:e2:44:ba:e8:d9:a8:b1:62:4d:60:e3:e1:05:f5:77:
3a:fa:72:00:ff:49:b7:90:26:0a:22:74:16:4f:c5:07:78:14:
03:53:ea:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org