Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3CF52240B8A611ECB02D68AC5A40D577.roa
File: 3CF52240B8A611ECB02D68AC5A40D577.roa (raw, json)
Hash identifier: aPitwnCJoTA+BeBi4+6Sxcd4LnUXLF7HoDX6OysCvCI=
Subject key identifier: E8:43:89:D9:24:25:69:69:4C:CA:B7:41:AA:DE:3D:78:87:9E:00:D1
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 03B1
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3CF52240B8A611ECB02D68AC5A40D577.roa
Signing time: Sun 10 Apr 2022 08:14:27 +0000
ROA not before: Sun 10 Apr 2022 08:14:23 +0000
ROA not after: Mon 10 Apr 2023 08:14:23 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 945 (0x3b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 10 08:14:23 2022 GMT
Not After : Apr 10 08:14:23 2023 GMT
Subject: CN=625291e3-8d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:f6:38:a5:e1:45:e8:79:e2:7b:1d:7b:3c:
20:80:3f:3a:a4:f6:ff:b1:a3:9d:73:fb:61:47:79:
7a:18:f8:24:27:1e:db:e7:2e:66:44:c5:46:62:29:
24:92:3f:fb:60:7f:3d:aa:7d:d5:90:95:66:ac:14:
1e:7a:c6:83:56:c3:3c:07:bb:dc:68:51:b1:ab:a1:
a9:9b:a2:74:96:a1:6d:7d:69:3b:3c:b8:6a:f1:c8:
34:29:3c:1b:22:1b:95:04:d3:4c:ef:ea:a5:ca:19:
6d:14:30:4e:aa:0e:80:a6:a4:98:3b:ec:db:a9:00:
3d:d4:94:f3:ce:01:c9:16:15:4a:28:08:6f:36:c5:
1d:23:74:58:1d:0c:fb:20:f1:38:d3:75:11:8c:ad:
a5:ad:b3:dc:e9:ca:7c:9e:aa:2b:d5:e2:4a:b1:81:
d1:ad:f3:49:30:57:02:a6:e5:74:50:b8:6e:0c:15:
c7:1d:20:ee:bb:0c:af:7e:99:6d:09:80:80:4b:f6:
56:20:23:c7:3c:58:9c:9d:42:e0:7f:59:60:94:ef:
f6:43:a9:ac:28:61:40:8d:cb:2d:18:73:13:2d:fc:
ca:47:38:e4:38:bb:84:b1:33:65:67:cf:62:d7:ea:
7f:0a:a9:85:24:14:75:49:77:1b:6a:d8:32:ea:5e:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:43:89:D9:24:25:69:69:4C:CA:B7:41:AA:DE:3D:78:87:9E:00:D1
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3CF52240B8A611ECB02D68AC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
c2:01:ca:5c:9d:72:24:30:51:2e:16:0f:cf:3f:c8:36:2d:b0:
e7:81:69:88:9c:7d:40:fb:58:80:6d:96:d8:73:67:06:47:26:
06:0c:00:24:38:8a:9d:97:aa:37:71:ca:09:f1:62:d1:54:49:
1a:75:06:96:56:56:40:92:2a:ad:fc:55:b5:fd:cb:5f:22:a0:
c5:cb:63:bf:42:7a:a9:34:ad:9a:a5:6b:f3:38:88:d0:2e:53:
07:36:e1:0e:7f:4e:19:4c:66:c4:30:b4:b8:52:84:ce:f7:02:
05:68:70:33:0b:61:e4:ed:09:38:a3:e4:58:25:64:bf:ae:3c:
03:13:c8:79:c0:ec:d1:59:0d:34:00:73:e2:9f:b5:4a:14:98:
6a:13:66:94:fb:05:c6:fc:9f:8b:68:a8:9e:45:f0:45:6d:42:
bc:a8:99:78:b0:7e:80:8a:44:97:ef:c1:86:70:6e:e1:93:c6:
69:69:c6:f6:d9:1d:37:3e:35:31:e2:03:ad:3b:73:75:74:88:
14:a7:20:79:a0:d5:24:c8:35:f4:49:76:ec:57:83:52:d1:1e:
ce:eb:61:cd:de:a6:b8:a0:c4:91:de:12:10:54:8e:76:9e:03:
ca:45:59:8d:43:a8:53:ab:67:c4:7b:f0:7d:40:00:cf:5e:72:
41:dc:94:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org