Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/F85B7ABEC69511ECA846A4A7F1222468.roa
File: F85B7ABEC69511ECA846A4A7F1222468.roa (raw, json)
Hash identifier: /lGpn8mmIGNieRz+k5nxXn1D9HX8Q217b5f4qBp4+zY=
Subject key identifier: 2A:25:B5:1F:DD:35:26:F0:4F:BA:33:21:16:E9:C5:22:12:27:C1:C9
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 042B
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/F85B7ABEC69511ECA846A4A7F1222468.roa
Signing time: Thu 28 Apr 2022 01:53:16 +0000
ROA not before: Thu 28 Apr 2022 01:53:11 +0000
ROA not after: Fri 28 Apr 2023 01:53:11 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1067 (0x42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 28 01:53:11 2022 GMT
Not After : Apr 28 01:53:11 2023 GMT
Subject: CN=6269f38c-a0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:dd:1c:ff:99:a9:e0:8f:95:64:c2:ac:0b:55:
49:13:03:77:56:f6:e2:51:6b:5e:2a:9c:3d:f9:e0:
a6:32:4d:76:c1:95:e1:e3:5a:88:ce:c8:27:49:a0:
15:cf:0b:3c:73:91:6e:9a:df:83:e1:4d:20:f1:72:
ec:00:f5:71:4c:3e:00:2d:d0:7e:30:94:f3:f3:cf:
d7:de:dd:2c:06:28:09:6b:b0:1c:1f:d3:3e:68:75:
fd:a3:97:57:b7:af:7f:23:1c:fb:4c:66:8f:fb:14:
33:71:ba:44:8c:d2:63:17:12:5b:60:b2:2a:a4:2b:
5b:1b:db:c3:6e:4f:d2:f5:df:da:a4:79:49:3d:57:
1d:74:7c:44:01:da:b9:91:57:69:37:ec:30:f7:82:
bc:9b:80:f0:b3:02:e0:bd:92:6b:60:bc:14:df:ef:
2d:02:dc:da:87:ec:a9:34:fa:81:cf:19:59:88:39:
c5:11:09:d7:99:c4:8e:72:b9:2a:e2:40:32:c5:ea:
f0:d0:0d:f1:e5:a0:63:54:d7:d1:09:a6:5c:d1:ff:
0a:43:bf:ab:80:a9:25:0d:c6:18:c5:55:7e:09:95:
3e:9f:ce:fd:81:77:d2:c1:8d:57:ac:6d:4c:ed:16:
68:c4:eb:e1:a9:76:6a:11:df:9b:f6:5d:03:1e:7a:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:25:B5:1F:DD:35:26:F0:4F:BA:33:21:16:E9:C5:22:12:27:C1:C9
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/F85B7ABEC69511ECA846A4A7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
6f:eb:81:d0:69:f4:9f:d3:63:e2:af:cb:ce:2c:39:30:46:54:
db:2b:a8:fa:ac:87:74:f5:75:87:24:e0:5f:ab:c3:be:34:45:
2e:77:9b:85:aa:ee:e2:f3:76:1f:dc:bb:82:db:2b:c1:c8:23:
5d:40:c0:35:96:e5:73:d5:7c:c2:35:59:8a:de:82:8e:8f:7f:
29:cb:ff:4f:2f:1c:02:a1:49:83:b3:38:06:1d:84:b9:f4:10:
ed:cc:23:0c:47:6a:9f:5f:5c:65:09:c8:cb:ea:37:01:37:40:
31:1b:f7:bd:4a:1c:d0:e6:a2:7d:2e:17:6e:b3:b9:1e:bf:cb:
8f:ed:ad:58:1d:84:5e:92:1c:ab:dd:31:91:ff:15:03:49:d8:
0e:1d:48:07:2c:2d:42:8a:94:c8:a9:bc:54:d2:3d:86:c0:85:
63:fa:12:2f:e3:92:e3:fc:1d:29:a2:9d:34:c4:12:a0:7c:4f:
a5:d8:81:c4:5e:a1:22:ea:cc:19:56:b1:19:3b:99:6e:a6:79:
c6:77:59:49:94:6c:f6:63:06:f8:51:82:22:8a:f3:2d:18:de:
3b:b7:80:f0:55:b2:b1:23:80:6b:51:c1:c1:09:39:d5:28:ca:
fc:65:4d:63:ca:61:a6:b9:c0:59:3f:20:10:2f:78:fd:35:61:
55:50:18:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org