Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696DE6/89E35F64187211ED9F36EADEF1222468/F69FCEAC187311EDA45F40E3F1222468.roa
File: F69FCEAC187311EDA45F40E3F1222468.roa (raw, json)
Hash identifier: /eY8VbXYfN2cJ3tX1k8k7LuKIMr+G8eyVfaJ1qF4tcU=
Subject key identifier: 2C:3E:CE:68:99:C7:B7:08:EF:66:27:23:9C:04:1D:DF:FE:70:B0:20
Certificate issuer: /CN=F3696DE6AF/serialNumber=AD38214215468A513426A3094D699A47CEF5C4EC
Certificate serial: 02
Authority key identifier: AD:38:21:42:15:46:8A:51:34:26:A3:09:4D:69:9A:47:CE:F5:C4:EC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rTghQhVGilE0JqMJTWmaR871xOw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696DE6/89E35F64187211ED9F36EADEF1222468/F69FCEAC187311EDA45F40E3F1222468.roa
Signing time: Wed 10 Aug 2022 06:16:26 +0000
ROA not before: Wed 10 Aug 2022 06:16:22 +0000
ROA not after: Tue 10 Aug 2049 06:16:22 +0000
asID: 36930
IP address blocks: 41.73.192.0/19 maxlen: 24
41.204.128.0/19 maxlen: 24
197.221.192.0/19 maxlen: 24
2c0f:fdc0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696DE6AF/serialNumber=AD38214215468A513426A3094D699A47CEF5C4EC
Validity
Not Before: Aug 10 06:16:22 2022 GMT
Not After : Aug 10 06:16:22 2049 GMT
Subject: CN=62f34d3a-74fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:16:e7:1f:b7:62:38:18:12:bd:4c:67:f1:
19:f0:9a:fc:c0:28:af:8a:19:59:5e:06:91:95:06:
a7:64:2d:87:01:f4:3c:83:a9:3c:d5:fe:f1:32:55:
5f:c9:00:a7:55:56:5b:b3:7f:6a:82:8f:e3:9b:ec:
ba:28:de:9e:af:fc:85:a8:00:5c:a5:5e:07:91:74:
cd:ae:c7:d2:1d:96:bb:fb:26:38:f8:27:6e:a0:b5:
3f:c9:91:01:74:85:18:2d:03:26:28:90:c2:2b:54:
d2:8a:cb:02:86:55:97:87:75:2f:38:4c:70:b9:91:
c1:0f:df:00:ed:0c:11:ed:f8:84:9d:bd:70:e4:4c:
5d:fa:30:be:b1:7f:c0:39:36:a1:a2:08:de:7a:a8:
24:67:47:74:ab:b1:15:5e:8b:9b:26:05:33:17:55:
92:03:53:2f:8d:44:cb:18:17:1e:c7:14:e6:09:8c:
21:25:43:55:c3:08:4b:03:b9:9f:55:fd:0d:36:c9:
d4:af:34:04:3e:b6:77:56:94:c5:07:f5:96:93:91:
66:0e:8d:aa:7b:22:81:ac:ff:2b:4e:c3:94:91:b9:
33:8b:40:32:d4:b8:5b:84:7a:4f:41:be:30:79:c3:
b9:19:9c:2f:3f:57:52:9f:0e:38:f2:0d:36:e5:0d:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3E:CE:68:99:C7:B7:08:EF:66:27:23:9C:04:1D:DF:FE:70:B0:20
X509v3 Authority Key Identifier:
keyid:AD:38:21:42:15:46:8A:51:34:26:A3:09:4D:69:9A:47:CE:F5:C4:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696DE6/89E35F64187211ED9F36EADEF1222468/rTghQhVGilE0JqMJTWmaR871xOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rTghQhVGilE0JqMJTWmaR871xOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696DE6/89E35F64187211ED9F36EADEF1222468/F69FCEAC187311EDA45F40E3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.73.192.0/19
41.204.128.0/19
197.221.192.0/19
IPv6:
2c0f:fdc0::/32
Signature Algorithm: sha256WithRSAEncryption
47:22:b2:19:36:d9:15:96:c1:6e:48:9b:c8:c0:1f:8a:e2:b5:
02:fc:25:fb:8f:fd:d2:38:6b:ee:90:f0:8a:6f:1f:52:67:ea:
57:75:d8:b9:01:9d:a9:a3:21:ab:a8:1b:a0:62:cb:1b:18:43:
48:ae:32:07:b2:86:ea:4f:91:c8:fa:8e:28:5c:00:97:ff:ff:
8f:0b:c1:19:2a:2b:4f:98:e3:d8:be:e6:b2:ef:68:ab:a8:a0:
d5:c4:5a:52:91:fe:61:aa:b6:03:17:10:de:c7:a1:b6:da:e2:
8a:3b:66:a8:47:3c:66:96:31:55:0d:3e:6a:e3:72:ec:92:56:
c0:7f:6d:0e:58:db:10:be:8d:f7:95:49:5b:76:b8:1f:7c:f2:
86:e1:72:19:47:96:58:d9:45:81:47:9b:b8:97:6b:1c:d6:db:
a8:51:54:94:7c:3c:e1:8f:2f:f0:10:44:b0:51:b6:66:0e:f0:
f8:1c:b1:f8:e3:d0:10:4d:93:09:a6:5f:32:64:be:dc:e3:4e:
35:89:37:71:73:89:05:06:d2:7e:25:61:32:e7:29:c5:c1:c6:
fd:63:1e:0a:a4:0f:64:7e:b4:0e:64:c7:59:20:6c:02:a8:ee:
47:1f:4d:c5:8d:60:ec:96:99:72:a8:b5:66:a4:6a:24:e0:83:
ae:cd:f8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org